Trojan attached to site

Discussion in 'Website Feedback' started by nick-c, Mar 30, 2010.

  1. nick-c

    nick-c Member

    Joined:
    Oct 27, 2007
    Messages:
    30
    Likes Received:
    0
    Location:
    Leeds
    There appears to be a Trojan hidden in the site somewhere.

    30/03/2010 18:40:31 Denied: Trojan-Downloader.JS.Agent.fce Firefox *link removed*

    I dont know whether it's a legit part of the site or not either way it's a little unnerving, anyway you are aware of it now should it be dodgey.
     
    Last edited by a moderator: Apr 6, 2010
  2. Radius

    Radius Give me back my passport u slags

    Joined:
    Sep 29, 2005
    Messages:
    7,243
    Likes Received:
    67
    Location:
    Somewhere over the flyover
    go to this site to check if you have got it or any of teh variants. The cleanup scripts are in the download section
    http://www.scatlovers.com
     
  3. BDS

    BDS Active Member

    Joined:
    Mar 25, 2008
    Messages:
    3,223
    Likes Received:
    2
    Location:
    Ye Olde England

    ...
     
    Last edited by a moderator: Mar 12, 2015
  4. nick-c

    nick-c Member

    Joined:
    Oct 27, 2007
    Messages:
    30
    Likes Received:
    0
    Location:
    Leeds
    I havent got it as Kaspersky blocks it. Just giving a heads up to admin and other users who may not have an AV that detects it.
     
    Last edited: Mar 30, 2010
  5. Fes Rock

    Fes Rock Nothing..........

    Joined:
    Jul 21, 2005
    Messages:
    15,258
    Likes Received:
    138
    Location:
    U WOT M8?
    how can one even embed a trojan into our script?

    i found all my answers at www.scatlovers.com
     
  6. fisher

    fisher I've been naughty, I'm banned

    Joined:
    Dec 22, 2007
    Messages:
    234
    Likes Received:
    1
    fes fes fes
     
  7. Fes Rock

    Fes Rock Nothing..........

    Joined:
    Jul 21, 2005
    Messages:
    15,258
    Likes Received:
    138
    Location:
    U WOT M8?
    staedy trollin since 07 eh playboy?
     
  8. BDS

    BDS Active Member

    Joined:
    Mar 25, 2008
    Messages:
    3,223
    Likes Received:
    2
    Location:
    Ye Olde England
    God I wish there was still a thanks button :oscar:
     
  9. Moskit

    Moskit :rodigan: Staff Member

    Joined:
    May 27, 2009
    Messages:
    4,374
    Likes Received:
    3,778
    People are gonna think i'm playin' but i'm deadly serious.

    My work PC got done by a fake Trojan from here today & i'm actually really fucking pissed off by it.

    Why the fuck is it here?

    It embeds itself in windows security centre as "XP Security Pro" if you use a secondary Virus Protection Program, doesn't matter if your protection is up-to-date or not, it is a "ghost/fake trojan".

    I've had to do alot of explaining & fuckeries today due to this bullshit & it still ain't sorted, it deletes all the paths from shortcuts to program files upon remova/deletionl & generally causes fucked havoc.

    PLEASE FUCKING SORT THIS OUT IT IS BULLSHIT.

    Genuine: :mad:
     
  10. sdm

    sdm This is Dog Fort

    Joined:
    Nov 29, 2001
    Messages:
    12,757
    Likes Received:
    17
    Hi both, I've had a quick look around the server and the forum software and cannot see any sign of a trojan being embedded within this site or server.

    Does it happen on a particular page? If so, which one?
    Can you take a screen shot of the message(s) from your spyware/anti-virus software?

    Is anyone else having this issue?

    I'm more than happy to investigate this but I need some more information and evidence.
     
  11. $marty

    $marty Dexcell Staff Member

    Joined:
    Dec 8, 2003
    Messages:
    18,697
    Likes Received:
    1,944
    Location:
    Watford
    No problems over here.
     
  12. Moskit

    Moskit :rodigan: Staff Member

    Joined:
    May 27, 2009
    Messages:
    4,374
    Likes Received:
    3,778
    I tried to take a screenshot, but couln't upload from work due to the bars in place...

    Sorry for all the swearing by the way, not called for, just got a grilling cus' I shouldn't really have been on here, so many apologies for that. :(

    It happened to me in general section, was just posting as normal & it just jumped in, closed down internet explorer then started with its "pay to update security centre" malarkey.

    The filename was: FakeTrojan.av & it infects extension files in user settings folders & spreads into program extension files the more you carry on operating wih it on your system.

    The I.T guys here think its when there are multiple users on one server like here, they have closed this loophole it used to get in here, so hopefully won't have the same problem again.

    But it wrecked all my settings & paths to files for programmes upon deletion as it actually becomes an extension of a Dorment Standard Windows Security Centre when you're using a Secondary Virus Protection (Norton etc) as your primary Firewall & as previously described, carries on spreading through file extensions.

    Clever, but bleak as hell.

    Hope this helps.

    Cheers,

    Amos
     
  13. Scythe

    Scythe New Member

    Joined:
    Aug 5, 2009
    Messages:
    29
    Likes Received:
    0
    Someone's sig might of been hijacked so an image contains a script. Have a look into the threads for the virus alert and then track it down using the address source the AV gives you.
     
  14. Radius

    Radius Give me back my passport u slags

    Joined:
    Sep 29, 2005
    Messages:
    7,243
    Likes Received:
    67
    Location:
    Somewhere over the flyover
    Moskitt you downloaded the fake trojan from Scatlovers .don't pretend.