Forum Virus

[AtW]

Site was fine late yesterday, there when I logged on this am around 10:15

malvolio IS INFECTED!!!

[SimonMac]

Would you be so kind as to tell us exactly WHAT the nasty is, so we can check it out ourselves... for instance see if our OS/browser is vulnerable?

Was it Sasguru?

No because it worked

[saptastic]

Avast is free and yet catches more than Mcafee ever did. Respect.

[mudskipper]

Would you be so kind as to tell us exactly WHAT the nasty is, so we can check it out ourselves... for instance see if our OS/browser is vulnerable?

Was it Sasguru?

... and what action might cause the virus to be downloaded? mbam quick scan hasn't found anything on my PC, running full scan now.

[malvolio]

malvolio IS INFECTED!!!

Nope, Avast blocked the linked URL immediately. Got a full scan running just in case, haven't seen anything yet.

[ctdctd]

... and what action might cause the virus to be downloaded? mbam quick scan hasn't found anything on my PC, running full scan now.

On my AVG free protected Vista/Firefox PC just visiting the forum home page caused Java runtime to kick into life in the system tray. Deleted FF temp files and updated Java from 6v24 to 6v30 and rebooted when I saw it.
Quick scan is clear.

[cojak]

(Here's hoping it hasn't infected iPhones...)

[cojak]

Nope, Avast blocked the linked URL immediately. Got a full scan running just in case, haven't seen anything yet.

Which post had the bad link Mal? (for edukshun purposes - we don't need to go back to it...)

[administrator]

Hi All,

Yes, Avast caught the thing but AVG did not. Am switching to Avast for everyone in the office here and my machines at home etc. Seems much less intrusive than others I have used.

There was an iFram injected at the bottom of the page and it was pulling content from another site. I can only assume that it was the payload for a trojan.

Avast was blocking communication with:

http:// indikatorl DOT in / z / enukgb

Spaces added around the slashes... Feel free to have a poke about and see what it was doing but my priority is patching the forum right now so not got time to look myself.

Admin

[cojak]

Ta Admin.