Active X Control

Post by **TSR2** » 15 Aug 2006, 10:34

Please do not run any active X control which you may get when visiting this site. I am investigating this as we speak, but please be assured we take security very seriously, and we do not run Active X controls on any of our pages.

Thanks

Callum · Post by **Callum** » 15 Aug 2006, 10:51

Which version of phpBB is this? Make sure you update to the latest, also, make sure you block email addresses which have a .ru address.

(add *@*.ru ) into the email ban filters, then search for user accounts with these addresses. These are spam bots which inject code into the forum, which in turn add spyware to users machines. Luckily for me, my system is built like a brick shit house and won't let anything past it.

I'd also suggest installing some of these hacks to prevent them from signing up/posting anything.

http://www.phpbb.com/phpBB/catdb.php?cat=57

If you want a hand with anything, let me know

Post by **Garry Russell** » 15 Aug 2006, 10:54

HI ben

Is it always obvious of can Active X be on a link without realising it.

Regards

Garry

airboatr · Post by **airboatr** » 15 Aug 2006, 11:47

Thanks for staying up on things Ben

AndyG · Post by **AndyG** » 15 Aug 2006, 11:52

Garry Russell wrote:HI ben

Is it always obvious of can Active X be on a link without realising it.

Regards

Garry

Garry, if you are running Windows XP SP2 it wil usually let you know if an Active X control is trying to get itself launched.

AndyG

Post by **Garry Russell** » 15 Aug 2006, 12:26

Cheers Andy

I get worried by the amount of stuff that gets downloaded without realising it!

Garry

bigred1970 · Post by **bigred1970** » 15 Aug 2006, 14:29

uh too late for me,

I have avast and it didn't yell though..... :think:

Nigel H-J · Post by **Nigel H-J** » 15 Aug 2006, 17:14

Thanks for the advice Ben.Always nice to know some-one is looking after our interests.

Post by **TSR2** » 15 Aug 2006, 19:53

I have check the site thoroughly and it has not been modified since i last updated it. I am running ie7 beta 3 on both my home and work systems. I had the request to run the Quicktime active x control while using my work PC which has updated the version of Quicktime it runs. I have not had the problem on my home PC at all.

I have run the control on my work PC without any nasties and have thoroughly scaned the work system using McAfee, Trend and Spybot which have found nothing.

It seems that this may be something to do with a Quicktime / IE7 bug, but not sure.

The mesage from CBFS remains the same though...

WE DO NOT USE ACTIVE X SO PLEASE DO NOT RUN ANY ACTICE X CONTROLS FROM THIS SITE.

I'll keep an eye on things too.

Thanks Guys.