i’m saimatkong

When you browse http://www.maybank2u.com.my it will keep redirecting to http://www.maybank2u.com.my/ht.shtml

Redirect Loop

Firefox has detected that the server is redirecting the request for this address in a way that will never complete.

The browser has stopped trying to retrieve the requested item. The site is redirecting the request in a way that will never complete.

* Have you disabled or blocked cookies required by this site?
* NOTE: If accepting the site’s cookies does not resolve the problem, it is likely a server configuration issue and not your computer.

Can you login? Tried since 10pm just now still can’t.

but still can login thru old website link https://www.maybank2u.com.my/mbb/scripts/mbb_login.jsp?action=Login

Updates: Solved, now can access maybank2u without any problem.

Just now wanted to book movie for Batman, The Dark Knight online from GSC website but it encounter the following error when I tried to login.

Microsoft OLE DB Provider for SQL Server error ‘80004005′

Transaction (Process ID 275) was deadlocked on lock resources with another process and has been chosen as the deadlock victim. Rerun the transaction.

/2007/_login/login_engine1.asp, line 99

is GSC being hacked again or it’s only the webmaster/programmer mistake? Some of the reader even said GSC website always timeout when buying tickets online, but for me so far I have been purchasing tickets with my Credit Card, it fast and smooth experience for me =)

Few months back it was hacked with 2117966.net

Today as I surf to GSC.com.my - place where most Malaysians make their bookings for cinema tickets, AVG Security Toolbar alerted me of a JS/Downloader.Agent threat coming from 2117966.net!”

All Malaysian’s should take the necessary step not to visit this site at the moment until this problem is fix.
Update: GSC has removed the exploit. You can now surf GSC.com.my without any worries.

We have made a report on our blog not too long ago about 10,000 website injected with malicious iframe - this is the same threat that is affecting GSC’s website. This particular threat takes advantage of the vulnerability in Internet Explorer ActiveX and SANS Internet Storm Center said that as a result of this threat a password-stealer program will be installed on the infected machine.

AVG alert of 2117966.net

Further looking at GSC’s html source code, we found related code entries to load a javascript “fuckjp.js” from 2117966.net.

source : drsafemode.com