Author Topic: Virus or Trojan on the Forum?  (Read 14645 times)

Offline Yeratel

  • Posty McPostington
  • ***
  • Posts: 8872
    • View Profile
Virus or Trojan on the Forum?
« on: April 23, 2009, 09:34:27 PM »
Every time I've gone onto jimbutcheronline.com today to get into the forums, I get a warning message from Norton Antivirus that JS.Downloader, a javascript program listed as a threat has been blocked. I haven't gotten that prompt on any other website but this one. Not sure if it's a coincidence, or not, but I clicked on several other web sites in a row, then came back here, and got the warning again. I'm doing a full system scan on my PC now, but I thought I'd give you a heads up.

*Edit- I did some further experimenting. I don't get the warning message when I go to the main Jim Butcher page, www.jim-butcher.com, only when I click to go to the Forums at www,jimbutcheronline.com, and again when I clicked to go to this particular forum for Suggestions and Support. This didn't occur when I was here yesterday, so something has changed since then.
« Last Edit: April 23, 2009, 09:42:06 PM by The Angel Yeratel »
"Women and cats will do as they please, and men and dogs should relax and get used to the idea. " -RAH

Offline iago

  • The Merlin
  • Posty McPostington
  • *******
  • Posts: 3071
  • I'm the site administrator.
    • View Profile
    • Deadly Fredly
Re: Virus or Trojan on the Forum?
« Reply #1 on: April 23, 2009, 09:44:52 PM »
I've hunted through the actual PHP source code on the site, and haven't found any references to JS.Downloader. If it's there, I'm not sure HOW it's there.

Anyone able to tell me anything?
Fred Hicks
I own the board. If I start talking in my moderator voice, expect the Fist of God to be close on my heels. Red is my Fist of God voice.
www.evilhat.com * www.dresdenfilesrpg.com
Support this site: http://www.jim-butcher.com/store/

Offline iago

  • The Merlin
  • Posty McPostington
  • *******
  • Posts: 3071
  • I'm the site administrator.
    • View Profile
    • Deadly Fredly
Re: Virus or Trojan on the Forum?
« Reply #2 on: April 23, 2009, 09:48:39 PM »
Hmmm, sonofa -- I may have found something in the code somewhere. Stay tuned.
Fred Hicks
I own the board. If I start talking in my moderator voice, expect the Fist of God to be close on my heels. Red is my Fist of God voice.
www.evilhat.com * www.dresdenfilesrpg.com
Support this site: http://www.jim-butcher.com/store/

Offline iago

  • The Merlin
  • Posty McPostington
  • *******
  • Posts: 3071
  • I'm the site administrator.
    • View Profile
    • Deadly Fredly
Re: Virus or Trojan on the Forum?
« Reply #3 on: April 23, 2009, 10:08:55 PM »
I THINK I've managed to scrub it all out. Anyone seeing any remaining signs?
Fred Hicks
I own the board. If I start talking in my moderator voice, expect the Fist of God to be close on my heels. Red is my Fist of God voice.
www.evilhat.com * www.dresdenfilesrpg.com
Support this site: http://www.jim-butcher.com/store/

Offline Yeratel

  • Posty McPostington
  • ***
  • Posts: 8872
    • View Profile
Re: Virus or Trojan on the Forum?
« Reply #4 on: April 23, 2009, 10:53:57 PM »
I THINK I've managed to scrub it all out. Anyone seeing any remaining signs?
I'm not getting any more warning messages, so it looks like that fixed it, thanks!  :)
"Women and cats will do as they please, and men and dogs should relax and get used to the idea. " -RAH

Offline Priscellie

  • Timeline Chick and Industrious Little Gnome
  • The Gatekeeper
  • Seriously?
  • ******
  • Posts: 12791
  • Icon by Daoine! <3
    • View Profile
    • Priscellie.com
Re: Virus or Trojan on the Forum?
« Reply #5 on: April 23, 2009, 11:17:18 PM »
Thanks, Fred!

Offline Shecky

  • Bartender
  • O. M. G.
  • ****
  • Posts: 34672
  • Feh.
    • View Profile
Re: Virus or Trojan on the Forum?
« Reply #6 on: April 24, 2009, 12:14:47 AM »
Fred = awesomeness. That is all.
Official forum rules and precepts; please read: http://www.jimbutcheronline.com/bb/index.php/topic,23096.0.html

Quote from: Stanton Infeld
Well, if you couldn't do that with your bulls***, Leonard, I suspect the lad's impervious.

Offline Phoenix_Kayden

  • Participant
  • *
  • Posts: 49
    • View Profile
    • Live Journal
Re: Virus or Trojan on the Forum?
« Reply #7 on: April 24, 2009, 01:04:32 AM »
Thanks for fixing it! I received a pop up saying my viris program blocked it, about 100 times! I'm super happy you fixed it! Thank you!
"I promise not to eat your soul."
-They Call Him Phoenix, a work in progress

-"If I need you I'll give you a signal."
-"What signal?"
-"I'll imitate the scream of a terrified little girl."

Offline Elanel

  • Conversationalist
  • **
  • Posts: 310
  • Hard Soul
    • View Profile
Re: Virus or Trojan on the Forum?
« Reply #8 on: April 24, 2009, 05:59:22 AM »
Awesome. Thanks Fred :)
Love spreads around, waits there for the nails
I forgive you boy, I will prevail.

Offline Murphy's Stunt Double

  • Needs A Life
  • ***
  • Posts: 20870
  • Tiny... but fierce!
    • View Profile
Re: Virus or Trojan on the Forum?
« Reply #9 on: April 24, 2009, 06:53:58 AM »
Fred - as always, YOU ROCK!
If you are up to no good, please do no good for me too, okay?   ;D

horsehearted

  • Guest
Re: Virus or Trojan on the Forum?
« Reply #10 on: April 25, 2009, 12:43:31 AM »


Partake as you will Your Awesomeness, Sir!

Offline El Diablo

  • Posty McPostington
  • ***
  • Posts: 2931
  • Mostly Harmless
    • View Profile
Re: Virus or Trojan on the Forum?
« Reply #11 on: April 30, 2009, 10:26:10 PM »
Thanx! All clear now!
//Sings
"If you've been messaged to ignore me clap your hands!"
:)

knnn said "All must now bow in presence of your Dresden-Fu."

Offline Matrix Refugee (formerly Morraeon)

  • Posty McPostington
  • ***
  • Posts: 1684
    • View Profile
Re: Virus or Trojan on the Forum?
« Reply #12 on: April 30, 2009, 10:35:52 PM »
I've been getting a wierd warning message from Adobe Acrobat, something like "Unable to perform this function". Might this have had anything to do with the not-so-little problem that just got rooted out?

Offline El Diablo

  • Posty McPostington
  • ***
  • Posts: 2931
  • Mostly Harmless
    • View Profile
Re: Virus or Trojan on the Forum?
« Reply #13 on: April 30, 2009, 10:57:07 PM »
no Adobe got hit by a zero day, you have to shut off javascript.

http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9132307
//Sings
"If you've been messaged to ignore me clap your hands!"
:)

knnn said "All must now bow in presence of your Dresden-Fu."

Offline iago

  • The Merlin
  • Posty McPostington
  • *******
  • Posts: 3071
  • I'm the site administrator.
    • View Profile
    • Deadly Fredly
Re: Virus or Trojan on the Forum?
« Reply #14 on: April 30, 2009, 11:17:37 PM »
Problem cropped up again. I've upgraded the site software; hopefully that will patch the hole.
Fred Hicks
I own the board. If I start talking in my moderator voice, expect the Fist of God to be close on my heels. Red is my Fist of God voice.
www.evilhat.com * www.dresdenfilesrpg.com
Support this site: http://www.jim-butcher.com/store/