Planted Tank Hacked

[sewingalot]

Thanks for fixing it so quickly, Kyle! I changed my password, cleared my cache and cookies and haven't seen any further messages. After running a spyware and virus on my computer, all is well.

Hmm....I wonder if this is related to the APC problem a few days ago?

[breakaway]

Does the planted tank forum db store passwords in plaintext or are they hashed?

[barbarossa4122]

I changed my password.

[mr_walker]

Hi Kyle,

I appreciate the warning - thanks for the quick action.

I updated my password from my phone, but when I viewed this thread from my PC my Symantec antivirus/antimalware software reported:

HTTP Phoenix Malicious Toolkit Activity detected

I think there's still a disturbance in the force!

[mistergreen]

Does the planted tank forum db store passwords in plaintext or are they hashed?

It's standard that these Bulletin Boards are hashed.

IS it me or the Forum is really slow/stalls randomly?

[barbarossa4122]

It's not slow.

[alan j t]

my AVG gave me a malicous pop up wheni opened up my pm just now

[fishydaze]

Hello
my earlier posted reply doesn't appear, thought I would try again, sorry if it ends up being repeat...

Went to open Planted Tank site at 8:30 pm 9/11 (directly, not thru link in email) and when the home page opened, Symantec informed me that "An Intrusion Attempt" had been BLOCKED. Thought it was coincidence at first, but noted other's comments thereof.

I explored further in Symantec and found the following information.

"An intrusion attempt by [my computer] was BLOCKED. Application path DEVICE\HARDDISKVOLUMEI\PROGRAM FILES\INTERNET EXPLORE\IEXPLORE.EXE"

Additional Details:
Risk Name: HTTP Phoenix Malicious Toolkit Activity
Severity: High
Attacking Computer: [my computer's name] (my computer attacking my computer?)
Attacker URL:
Destination Address:213.155.18.57, 80
Source: [My computer's IP address, I think]
Traffice Description: TCP, Port [....]

Seems to have successfully blocked for me (and is not reoccurring), but a further warning to others might be good (to ditch their cookies/internet history, update their virus protection and check their firewalls). Oh, and I haven't visited the site in month or more and pretty much ditch my cookies/history every week. But I have the planted tank.net as a home page...

[sewingalot]

Getting some sort of message about phoenix hardware and malicios sitr when trying to view pm. I signed off my computer and shut it down for the night just in case. Cookies cache and password were all reset. H

Sent from my Ally using Tapatalk

[Damian]

Originally Posted by mr_walker

I think there's still a disturbance in the force!

I had to comment on this line of awesomeness. BTW Thanks Kyle for the heads up and the hard work. I so far am not experiencing any issues. *knock on wood*

[MCHRKiller]

I change my password for here, changed my paypal pass word just to be safe, and cleared my cookies/browsing history. Running malwarebytes now to see if anything checks out. My MicroTrend Pc-Cillin checks the system twice per day and it has detected nothing.

[bigboij]

what i get as a alert when i try to visit.

Safe Browsing
Diagnostic page for plantedtank.net/forums

What is the current listing status for plantedtank.net/forums?
This site is not currently listed as suspicious.

What happened when Google visited this site?
Of the 166 pages we tested on the site over the past 90 days, 3 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-09-11, and the last time suspicious content was found on this site was on 2010-09-11.
Malicious software includes 2 exploit(s). Successful infection resulted in an average of 2 new process(es) on the target machine.

Malicious software is hosted on 2 domain(s), including

This site was hosted on 1 network(s) including AS36351 (SOFTLAYER).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, plantedtank.net/forums did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

Next steps:
Return to the previous page.
If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

[Darkblade48]

Firefox is still giving me a "Reported Attack Site" warning.

[redman88]

this is what i got after i passed chromes

[chonhzilla]

Originally Posted by Darkblade48

Firefox is still giving me a "Reported Attack Site" warning.

Same here.