European Bahn website - IMPORTANT WARNING

mattcarey · Post by **mattcarey** » Thu Nov 11, 2004 10:45 pm

Hello All

Looks Like there is a problem with Europeanbahn website - Been Hacked???

Its giving off Viruses, i recommend not going on in, hopefully one of the lads can sort it out.

birminghamnewstreet · Thu Nov 11, 2004 11:02 pm

didnt think we where alload to talk about it

jbilton · Post by **jbilton** » Thu Nov 11, 2004 11:05 pm

Yes you can...you just cant say incorrect things about any commercial groups.
I'm afraid EB forums have suffered from attacks quite often of late.

mattcarey · Post by **mattcarey** » Thu Nov 11, 2004 11:05 pm

well i have not read that? better to warn then for people to get computer buggard.

Sorry for talking about this then

XPTE · Post by **XPTE** » Thu Nov 11, 2004 11:20 pm

Thanks for the warning. Much appreciated. I am a regular viewer of the website. My Norton Anti-Virus has reported my PC has picked up a virus tonight which can't be fixed. Whether it's do with that website or not I don't know. But I'm now going to restore to yesterday's restore point.

Lad491 · Post by **Lad491** » Thu Nov 11, 2004 11:22 pm

Well ive been on the forum most of the day until it shut down, and i haven't seen any sign of any so called trojan activity. I have up to date Norton and a firewall and neither protested at all today.

I dont think their website was the cause of any problems

GrahamK · Post by **GrahamK** » Thu Nov 11, 2004 11:23 pm

XPTE wrote:Thanks for the warning. Much appreciated. I am a regular viewer of the website. My Norton Anti-Virus has reported my PC has picked up a virus tonight which can't be fixed. Whether it's do with that website or not I don't know. But I'm now going to restore to yesterday's restore point.

have you tried running NAV in safe mode, that usually sorts out the problem and cleans most then.

Graham

XPTE · Post by **XPTE** » Thu Nov 11, 2004 11:24 pm

The forums seem to be working absolutely fine. Its the home page itself which causes problems. Have just tried it now and its not very pleasant. Had better do that restore now........

Lad491 · Post by **Lad491** » Thu Nov 11, 2004 11:35 pm

well if you have been infected, from wherever, be aware that viruses can infect system restore information as well. It is possible to restore a virus by returning to an earlier restore point.

The only safe method is to deleted all previous restore points and turn system restore off temporarily, then run Norton and quarantine the file. Reboot and then go to the quarantine folder where you should now be able to delete the file. Reboot again and do a full scan checking all files, not just default ones. If that comes up clean then create a new restore point

Oh and the site has been down for most of the evening, so if you are still getting the home page you are loading that from your pc cache, not from the web site, so make sure you delete all your temporary internet files and change your setting to collect anew page every visit

XPTE · Post by **XPTE** » Fri Nov 12, 2004 12:19 am

I had in fact just returned my PC to factory condition on Tuesday. There was no restore point available for yesterday, so the only option was to restore to Tuesday so I selected that. It did its thing and restarted only for me to get a message "Your PC can not be restored to this restore point". So unless I kept my PC with that darn virus or viruses(whoooah no way), then the only thing I could do was to restore to factory again. And that's what I've just done. Just when I was building up my MSTS stuff up again too.

The virus was something to do with MSN Messenger I think as the virus report I got earlier included "msnmsng" as one of the files that had a virus. Not sure how that happened as I don't actually MSN anymore unless absolutely necessary. May well be the EB home page though and some idiot hacker/s out there with the intent of wrecking people's PC's.

Please let us know when the EB site is safe again.

olympian · Post by **olympian** » Fri Nov 12, 2004 12:23 am

Thank God I came into this forum.

As I would have went to Europeanbahn after checking the UKTS forums.

Gazz

Lad491 · Post by **Lad491** » Fri Nov 12, 2004 7:04 am

Please let us know when the EB site is safe again

Its still closed this morning, but i would expect it will start up soon

Im not convinced the problem came from Europeanbahn as i was visiting the site on and off all day yesterday until about 3pm. MSN is a much more likely candidate, which is why i have it disabled on my machine.

Either way, i expect we will learn the details soon.

Lad491 · Post by **Lad491** » Fri Nov 12, 2004 7:06 am

the only thing I could do was to restore to factory again.

Make sure you run a full virus check again and get a clean result before proceeding to reload any software

petermakosch · Post by **petermakosch** » Fri Nov 12, 2004 8:44 am

Norton Anti-Virus is more or less useless.
I stopped using it and moved to McAffie. Notron does not properly clean files, and does not detect some virus's. I recommend next chance you get, start using McAffie.

Yea, after just paying a visit to the site's forum, it started opening a page from url: http://www.sp2isf**ked.biz or something similar. I will check it out on my Bommer PC (- a PC that is connected to the net but has no Firewall or Anti-Virus on it, no work either, bog standard windows. So I can check stuff out like this without caring or loosing any work).

Peter

Lad491 · Post by **Lad491** » Fri Nov 12, 2004 10:15 am

Norton Anti-Virus is more or less useless.
I stopped using it and moved to McAffie. Notron does not properly clean files, and does not detect some virus's. I recommend next chance you get, start using McAffie

Funny you should say that as last year I found the exact opposite. After many years with McAfee it constantly let me down, despite being fully up to date with both engine and dat files. Each time i was able to use the symantic stinger to clean my machine and finally changed all 3 to using Norton.

The main thing i think is that you cant rely on either automatically updating virus definition files so you should check manually at least once a day - Myself i check twice, morning and evening as soon as the computer has booted.