Define Cynical Infected
Tuesday, January 31st, 2006On the Ozy & Millie mailing list, someone discovered a spyware/virus infection in the code for the O&M fan forum, Define “Cynical”. Before doing anything on this site, please read my reply to him, and do NOT visit any URLs in this message:
When I accessed the actual board, I got a blocked cookie request from toolbardollars.biz, it seems than an infected file has embedded itself in the forum.
Upon viewing the source code, it seems that there’s an Iframe embedded in the source code for the forum that loads http://toolbardollars.biz/dl/adv553.php.
To view the site safely, add the following lines to your HOSTS file (on WinXP, it’s in C:\WINDOWS\System32\drivers\etc):
127.0.0.1 toolbardollars.biz
127.0.0.1 www.toolbardollars.biz
This will prevent any access to the malicious site, and allow safe browsing until the forum is repaired. If you do not have antivirus software installed, and you’ve visited the Define Cynical board, please do a full system scan before viewing any sensitive data on your computer. And please send a link to this to any Define Cynical members who may not have heard yet.
