HTML Script Virus Warning

If you look at the left hand edge of your browser window, under the title, you'll see an IFRAME that links to this url.

I can see it too, how the hell does it install itself? Is it attached to the html code of gamedev.net? Are the servers compromised?

Or is it client-side?

Oh god not this AGAIN...

Must be some nasty leak there. It's gone now though.

I'm getting a request to run "Microsoft vector graphics rendering (VML)", and my back button isn't working properly either.

This is nuts.

I'm constantly getting this off and on. It'll get fixed for a while, but seems to eventually reassert itself. Maybe Jack Johnson is targetting the site as a way of stopping video game developers before they even have a chance to make the games that he so vehemently (sp?) opposes. :D

I see it too, the tiny square and code. Very strange.

EDIT:
It does not appear in IE7. It will instead cause the browser to yell at you, asking you if it is okay to run an active x control.

I see it too if you drop down on the back button you see a entry for "www.kingbaba.cc" that can't be good. Anybody know what it is trying to install? Has anyone emailed gamedev and asked wtf? I've redirected kingbaba.cc to 127.0.0.1 in my hosts file so hopefully that will over some protection as symatic corp isn't flagging anything.

I see it but it doesn't seem to do anything. (im running firefox though so i don't use ActiveX)

Not sure if reports of this are still helpful or not, but I'm currently having to view GameDev with my IE7 security settings on highest. Anything lower and every time I move to a new page, I get some kind of large download from the newx0x site locking up the browser and making my poor old harddrive go into overtime. Even seems to stop me closing my browser for a few seconds.

I'm getting the vector rendering ActiveX thing as well. I should point out that I have not agreed to the download before I get the problems above.

All seems fine with security set to highest, but then of course I can access the top bar menus. I also can't post with these settings and am currently battling against this problem in order to post this.

Appreciate you are all aware of this and sorry if you are sick of these reports, but it is concerning me slightly. Will we be seeing the rhino again soon?

[Edited by - EasilyConfused on March 25, 2007 5:09:23 AM]

Yes, it looks as if gamedev has been compromised somehow. That script inserts "", so it's best to map www.newx0x.com to 127.0.0.1 for now..

Quote:

Original post by JohnFredCee Yes, it looks as if gamedev has been compromised somehow. That script inserts "", so it's best to map www.newx0x.com to 127.0.0.1 for now..

Thanks. That appears to have done the trick.

Quote:

Original post by EasilyConfused Will we be seeing the rhino again soon?

We're hoping to avoid that, but the forums will definitely get turned off for some period of time.

Oh my god,

Its a conspericy. There is a area 51 and they are all going to eat our brains.
Why us? Why!!! Couldn't they just taken Bush and go to an other planet to dump their waste? Why!! I don't want to die yet. We dutch people don't want to harm anyone we are here in peace. We need to fight back, maby I can buy some weapons from our village manic and build a resistance, it would be just like CoD 3. Damm its a dream comming true.

PS: After reading my post I think I have serious brain dammage.

Tjaalie,

Quote:

Original post by JohnFredCee Yes, it looks as if gamedev has been compromised somehow. That script inserts "", so it's best to map www.newx0x.com to 127.0.0.1 for now..

How would one go about doing this on XP?

I'm assuming you edit the file "hosts" and put:

127.0.0.1    www.newx0x.com

Correct?

Quote:

Original post by SticksandStones Quote: Original post by JohnFredCee Yes, it looks as if gamedev has been compromised somehow. That script inserts "", so it's best to map www.newx0x.com to 127.0.0.1 for now.. How would one go about doing this on XP? I'm assuming you edit the file "hosts" and put: 127.0.0.1 www.newx0x.com Correct?

Personally for IE7, I just added http://www.newx0x.com to the list of restricted sites through the Security panel in Internet Options. Seems to have solved the problem for me.

Quote:

Original post by EasilyConfused Quote: Original post by SticksandStones Quote: Original post by JohnFredCee Yes, it looks as if gamedev has been compromised somehow. That script inserts "", so it's best to map www.newx0x.com to 127.0.0.1 for now.. How would one go about doing this on XP? I'm assuming you edit the file "hosts" and put: 127.0.0.1 www.newx0x.com Correct? Personally for IE7, I just added http://www.newx0x.com to the list of restricted sites through the Security panel in Internet Options. Seems to have solved the problem for me.

Is this possible with firefox too? I searched all the options but nothing there.

Quote:

Original post by Tjaalie Quote: Original post by EasilyConfused Quote: Original post by SticksandStones Quote: Original post by JohnFredCee Yes, it looks as if gamedev has been compromised somehow. That script inserts "", so it's best to map www.newx0x.com to 127.0.0.1 for now.. How would one go about doing this on XP? I'm assuming you edit the file "hosts" and put: 127.0.0.1 www.newx0x.com Correct? Personally for IE7, I just added http://www.newx0x.com to the list of restricted sites through the Security panel in Internet Options. Seems to have solved the problem for me. Is this possible with firefox too? I searched all the options but nothing there.

This is not really an issue with firefox, as FF will not exec the ActiveX (unless you installed the extension, which is quite a bad idea).

Could this have caused the images on the front page to be put out of order.