Sam'smom Posted January 10, 2010 Report Share Posted January 10, 2010 Just in the last few days when I have logged into this web site I get a warning from my Norton antivirus telling me this site is now unsafe??? when I go to the details list for info it comes up with a long list of thubmnail attachments that contain a trojan virus???? is anyone else getting this?? Quote Link to comment Share on other sites More sharing options...
Guest echoica Posted January 10, 2010 Report Share Posted January 10, 2010 Just in the last few days when I have logged into this web site I get a warning from my Norton antivirus telling me this site is now unsafe??? when I go to the details list for info it comes up with a long list of thubmnail attachments that contain a trojan virus???? is anyone else getting this?? i doubt it's the site as there are no ads here...and for them to be jpgs...nmph. sounds like you might already have a virus and it is running in the background. what browser are you using?...i am going to guess internet exlporer (THE WORST browser ever for that sort of thing!) Quote Link to comment Share on other sites More sharing options...
Sue R Posted January 10, 2010 Report Share Posted January 10, 2010 I've been getting the same thing from my Norton. The details list "trojans". However, I've corresponded with Heather and she assures me there is no problem with the site but that she thinks Norton may just be giving false positives. That's good enough for me, although it's frustrating. I've never had this happen before and it's only happening with www.bordercollie.org. Quote Link to comment Share on other sites More sharing options...
Sam'smom Posted January 11, 2010 Author Report Share Posted January 11, 2010 Am glad to know it's not just me... and glad to know the site is ok... Quote Link to comment Share on other sites More sharing options...
Lokisaab Posted January 11, 2010 Report Share Posted January 11, 2010 I use firefox and I'm getting the same thing. 298 threats all coming from these thumbnail pictures Viruses (what's this?) Threats found: 298 Here is a sample: Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page1702.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page2034.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page1278.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page920.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page913.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page123.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page2535.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page282.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page1918.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page193.html Quote Link to comment Share on other sites More sharing options...
JohnLloydJones Posted January 11, 2010 Report Share Posted January 11, 2010 I use firefox and I'm getting the same thing.Here is a sample: Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page1702.html That's not a thumbnail image, it's a link to a page and yes, Norton is correct, it's infected by a Javascript trojan. Quote Link to comment Share on other sites More sharing options...
Heather Posted January 11, 2010 Report Share Posted January 11, 2010 That's not a thumbnail image, it's a link to a page and yes, Norton is correct, it's infected by a Javascript trojan. If somebody could tell me where the thread is that has the post that's pointing to a virus, I'll delete it. Thanks! Quote Link to comment Share on other sites More sharing options...
WyoBC Posted January 13, 2010 Report Share Posted January 13, 2010 I get the same thing with Norton. But I haven't had any problems and haven't gotten anything from this site. So I'm guessing its safe. Quote Link to comment Share on other sites More sharing options...
JohnLloydJones Posted January 13, 2010 Report Share Posted January 13, 2010 I get the same thing with Norton. But I haven't had any problems and haven't gotten anything from this site. So I'm guessing its safe. Which forum/topic/page gives this message? I don't get any infected pages browsing normally. The links referenced in the Norton report are infected, but I have no idea they related to the normal forum pages. Someone who gets these messages, please post what you did immediately before, so that Heather has a chance to find out what is happening. Quote Link to comment Share on other sites More sharing options...
desertranger Posted January 13, 2010 Report Share Posted January 13, 2010 Kaspersky reports the same thing as a clicker type trojan. Quote Link to comment Share on other sites More sharing options...
Brad Posted January 13, 2010 Report Share Posted January 13, 2010 Here is Symantec's info on this, a very low risk, but if someone can reference the actual page they get it on, it could be deleted. Anyone with updated virus definition files should be fine, SAV will automatically delete any infection. http://securityresponse.symantec.com/secur...-011517-3725-99 Quote Link to comment Share on other sites More sharing options...
desertranger Posted January 14, 2010 Report Share Posted January 14, 2010 I remember my first virus.; Michaelangelo for the original PC. 1986. It was a boot sector virus. I was working as a part time electronics and computer instructor and another instructor and I wrote a killer for it. Quote Link to comment Share on other sites More sharing options...
Kelliwic Border Collies Posted January 14, 2010 Report Share Posted January 14, 2010 Heather, et al, the warning seems to show on every page on the BC Boards site in both Firefox and IE (at least those I've visited). See screenshots below. Sorry the last is a bit large, if I reduce the screenshot images in size, the text degrades in quality and can't be read. See "Norton" and red warning "X" above browsing tab (this shows green with a checkmark on "safe" sites): When the drop down arrow next to the warning X is clicked, the information message is as follows: When "Full Report" is clicked, a new page is opened with a report from Symantec. At the bottom of this image you can see the beginning of the list previously pasted by Lokisaab. Hope this is some help. Quote Link to comment Share on other sites More sharing options...
desertranger Posted January 14, 2010 Report Share Posted January 14, 2010 Advanced Member *** Joined: 28-February 09 Posts: 839 Location: This is where being better than average with computers gets ya. biggrin.gif This bad boy is a Clicker Type Trojan, usually found in email. It's not the Trojan that gets ya it's where you go when you click on it. This one wasn't too bad all it did was throw a lot of advertising at you. However clicking on one of the ads... Who knows? lots of evil things possible. So t'warn't all that bad. Some clicker Trojans can take you places that will dump a Java script to your computer and take over. The first thing you see is your anti-virus stops working. By then whatever data the ubiquitous they want they got. A similar Trojan is called a drive-by download. Just following the link is enough to open a page that dumps a file to your system which executes and does whatever the once again nefarious they ahve in mind Quote Link to comment Share on other sites More sharing options...
Heather Posted January 17, 2010 Report Share Posted January 17, 2010 None of this is wildly clear to me. Nobody but Megan seems to be reporting problems on every page in the site--I certainly don't have that problem, and I've checked on multiple computers, each with different virus programs. I gather that there is a thread with a link to a potentially low-risk infected site. I'm happy to take the thread down if someone could tell me *specifically* which thread contains the suspicious link. If not, we'll leave things alone. Thanks! Quote Link to comment Share on other sites More sharing options...
Samantha J Posted January 17, 2010 Report Share Posted January 17, 2010 None of this is wildly clear to me. Nobody but Megan seems to be reporting problems on every page in the site--I certainly don't have that problem, and I've checked on multiple computers, each with different virus programs. I gather that there is a thread with a link to a potentially low-risk infected site. I'm happy to take the thread down if someone could tell me *specifically* which thread contains the suspicious link. If not, we'll leave things alone. Thanks! I am getting the same site unsafe as Megan, it still shows 298 threats on here now. It comes up on all the forum sections i have been in, i haven't clicked around much though as i don't like having the site unsafe on as i don't know hardly anything about these virus things. Quote Link to comment Share on other sites More sharing options...
desertranger Posted January 18, 2010 Report Share Posted January 18, 2010 You could be having false positives. I've seen that happen when internet security programs are set to high or tight. Check your security levels and return them to their defaults if not set there. Then clear your cookies and browser history and try again. Quote Link to comment Share on other sites More sharing options...
JohnLloydJones Posted January 18, 2010 Report Share Posted January 18, 2010 There is obviously something going on; the links to "thumbnails" point to pages that are infected by a Javascript trojan and they are on the bordercollie.org site. I have checked very carefully with web tools that I use and I am absolutely sure that there are no references to any of the reported links when I browse the site. I am using Firefox on Linux. My board settings are plain vanilla. Quote Link to comment Share on other sites More sharing options...
desertranger Posted January 18, 2010 Report Share Posted January 18, 2010 John would you PM me the links. I'm not getting any warnings at all and I have my security set pretty tight. I went through the thumbs and nothing. I may not be hitting the right ones or something in my security may be intercepting it without telling me. Quote Link to comment Share on other sites More sharing options...
Lokisaab Posted January 18, 2010 Report Share Posted January 18, 2010 Gee, I posted at least 9 of the links. It's like I don't even exist lol. Quote Link to comment Share on other sites More sharing options...
desertranger Posted January 18, 2010 Report Share Posted January 18, 2010 Don't feel bad Loki. John and I are dissecting this thing trying to find the problem. Not with much luck however. it turns out this is one nasty Trojan when you dig into it. It seems to have eaten or taken over the thumbnails reference page. I shall say this after looking at in on another computer be careful. It can disable your anti virus, then it makes an attempt to hijack your browser and seems to dl script that could be a data miner. If you You hit one of those pages close your browesr. Reopen it. If it come ujp to your home page OK, if not your infected. Clear your cookies, caches and history then close and reopen your browser. I do recommend you have a second browser so if one is infected you can open another. Recommend browsers are Firefox, Opera, Chrome and Safari. All available for PC, Mac and Linux. @John HijackThis doesn't report anything out of the ordinary in memory running as a process Quote Link to comment Share on other sites More sharing options...
Samantha J Posted January 19, 2010 Report Share Posted January 19, 2010 You could be having false positives. I've seen that happen when internet security programs are set to high or tight. Check your security levels and return them to their defaults if not set there. Then clear your cookies and browser history and try again. The history and cookies get cleared quite often on here so i think i am fine there, also our Norton has only just been renewed so i think it is still at the default settings. I shall say this after looking at in on another computer be careful. It can disable your anti virus, then it makes an attempt to hijack your browser and seems to dl script that could be a data miner. If you You hit one of those pages close your browesr. Reopen it. If it come ujp to your home page OK, if not your infected. Clear your cookies, caches and history then close and reopen your browser. I do recommend you have a second browser so if one is infected you can open another. Recommend browsers are Firefox, Opera, Chrome and Safari. All available for PC, Mac and Linux. I am now on Firefox and still getting the same Norton warning as i do on IE, 298 threats. I think i will stay off here again for a while until it is clear and safe again. I am scared to click on any other threads now except this one. Quote Link to comment Share on other sites More sharing options...
desertranger Posted January 19, 2010 Report Share Posted January 19, 2010 Do you remember what you did to first trigger it? Quote Link to comment Share on other sites More sharing options...
Pam Wolf Posted January 19, 2010 Report Share Posted January 19, 2010 Getting the same message the past 3 days. was skeptical about logging on here. Teh message is the thumbnails as earlier posted/ Wasn't getting this til we redid our Norton. I get the message on IE8 and Firefox both Glad you are on it, thanks Quote Link to comment Share on other sites More sharing options...
Brad Posted January 19, 2010 Report Share Posted January 19, 2010 Heather, I'd suggest speaking with the hosting company and have them scan the /uploads directory. It may not be something that can be dealt with remotely from the server. FWIW, I don't get any warnings on this site unless I specifically click one of the links. If people are getting it consistently after the first time, I'd look at caching setup on the browser, perhaps they've cached the pages. Deleting all temp internet files might help. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.