Possible Virus/Trojan?

[Marius 0]

Ok, this only started today (June 30, 2006) but everytime I go into the forums, or move around in the forums, This download screen pops up, then disappears again. It's a quick download obviously, but after this, a few seconds later, my antivirus says something about a Exploit-WMF trojan having to be deleted.

 

Once, I checked the Temporary Internet Files (that being where it said it was from) And I saw a WMF file from some weird site i've never visited before. I think the site was countbest.net. Thing is, it doesn't appear anymore on the list of Temporary Internet Files, despite the fact that I get the notification each time I go to a new page.

 

Also, there was this other one it keeps telling me about, a...Exploit-ANIfile, or something like that. I think I might have gotten rid of it, though the antivirus doesn't think so...

 

Anyone know what's going on?

Edited June 30, 2006 by Marius

[OdileCondacin 0]

I got this too, on both computers that I've visited the site with.

[Guest Laarell]

It may have been going early morning-ish (about 4 AM EST), as well. I've been playing around, and Norton seems to find/delete it. I get a worm intrusion alert on Internet Explorer when I try to access the forums in that browser. I also don't seem to be getting the download box or any other messages when using AOL Explorer.

 

It seems to occur when it starts to load

countbest.net/adv/085/new.php

[Atragon9 0]

Yes, we are aware of this. It seems that some Internet baddie has exploited a hole in the code for the Boards. We will be removing that code soon and the redirection to the location of the Trojans will stop. As for fixing that hole in the code, we will have to upgrade the Boards backend software, more to come on that later. Thanks.

 

[Marius 0]

Thanks everyone, A9! Glad to know it wasn't just my computer!

::breathes a sigh of relief::

I'm happy to know it'll be fixed soon! :P

[Atragon9 0]

Fixed!

 

THANK YOU, WEBBIE!!!

 

 

It turns out that we were "hacked" by an automated system that was able to exploit a flaw in the Boards software. We are moving forward with an upgrade soon and that should stop this sort of thing from happening again. Thanks.

 

[Guest Laarell]

Thanks to our webmaster! :P

[Webmaster 20]

YIPE!

 

:::hides after being spotted:::

[Col. C.E. Harper 0]

Thank you, Webbie!!!

[Sam_SemaJ 0]

...Mac... :P :blink:

 

Even so, much appreciation to our web master!

[Marius 0]

Yay Webbie!!!

 

::runs after him, places a crown on his head, then throws him onto a throne that came out of nowhere::

[Kansas_Jones 0]

Thanks very much Webbie Calvert!

 

::points:: There he goes! Quick, thank him before he finds another dark hiding spot!

[Dumbass 0]

We will be removing that code soon and the redirection to the location of the Trojans will stop.

I think the Trojans are somewhere between the health / beauty supplies and the motor oil.

[Sam_SemaJ 0]

charming dumass...as per usual :lol:

[Xantara 0]

I think the Trojans are somewhere between the health / beauty supplies and the motor oil.

 

 

 

 

 

::just shakes my head and laughs::

Edited July 7, 2006 by Xantara

[Kallah Ramson 0]

Just to inform, I've suddenly getting this trojan repeatadle. It started Sunday night near midnight and has kept happening to now (Mon 7am). So, whatever code was removed still doesn't seem to be helping on my end.

[Atragon9 0]

Just to inform, I've suddenly getting this trojan repeatadle. It started Sunday night near midnight and has kept happening to now (Mon 7am). So, whatever code was removed still doesn't seem to be helping on my end.

No, it just means that the malicious code got shoved at us again. Look for a notice on the Boards about an upgrade to the Boards coming SOON.

 

[Kallah Ramson 0]

I was not getting the trojan at all until last night. So, something was different this time. But, it isn't happening now.

[Dumbass 0]

I was not getting the trojan at all until last night.

Woo-hoo! Sounds like you had a good night last night!

[Marius 0]

:D I did *not* need to hear that... :o

::squeezes eyes shut and tries to get bad images out of his head:: :lol:

[Sam_SemaJ 0]

:lol: :D

 

Though this did not affect my computer, I feel for you (windows) guys and for the Board code too, So sad that we can't just use the internet freely and not worry about stupid people with malicious intent.

-Sam

[Dumbass 0]

So sad that we can't just use the internet freely and not worry about stupid people with malicious intent.

I don't think it is the stupid ones we need to worry about. Hackers tend to be an intelligent lot.

[will_marx 0]

Except for the stupid ones who try to hack into the DoD, etc... Then the Feds usually remove them from the gene pool

[Webmaster 20]

Unfortunately the majority of the folks who exploit these things are not the brightest of folks. It's ONE person who finds out how it's done, then it's the billion other not-so-bright ones that go out and exploit it to kingdom come.

 

Half the time, it's not even THEM doing this sort of thing. They try to find vulnerabilities using search engines, etc. Then just automate the crap. :lol:

[will_marx 0]

Well, I just notified the owner of another board I belong to, using the similar software about it. Hopefully they won't get hit any time soon. Besides, I really don't want to do another safe mode scan of my system just to make sure it's clean. It takes too damn long.