fchan

discussion

OK, is anyone else getting a Trojan?

Pages:1
1Report
Brad S at 10 Feb 2008: 20:38

Well...for some strange reason every time I load the Female image boards, my virus protector says that a trojan has been removed.  hat means that there is something on the site that is downloading trojans onto people's computers whenever they just loa the Female board.  I hope you admins can fix this because I would hate to see thousands of people getting destructive trojans on their computers just from using the boards...  O.o

2Report
at 10 Feb 2008: 21:52

Not getting anything here

3Report(capped)
Xenofur at 10 Feb 2008: 23:41

so, what av are you using? what exactly is it complaining about?

many avs nowadays are, quite simply, shitty as hell, overly paranoid and like to cry wolf over a bunny to seem more effective. unless you can give me serious and solid information on exactly how and what, i will assume that's the case.

4Report
Shadowfox at 11 Feb 2008: 08:37

XENOFUR THE KING OF FCHAN OMG I LOVE YOU "pounces on xeno"

5Report
Brad S at 11 Feb 2008: 20:14

Umm...anyone know how to add a pic to the discussion boards?  I have picture proof of the trojan.  It may just be my protector acting up but I'm not sure...

6Report
at 11 Feb 2008: 21:09

>>5
You can't post a picture on the discussion boards..And it's not affecting me and i'm assuming lots of other people as well, so it may just be your system..

7Report
at 11 Feb 2008: 22:01

http://imageshack.us/

8Report
Brad S at 11 Feb 2008: 22:29

It's just wierd since this laptop is a Vista and I got it only like a month or so ago.  My McAfee software must be thinking that this site is trying to download a trojan when it really isn't... o.o

I'll upload the pic on a photo-sharing site or something and post the link.

9Report
Brad S at 11 Feb 2008: 22:34

OK, here's the link:

http//s67.photo/...

I think you can see what it's names, etc.  I also noticed that the name is the same each time. :P

Anyway, I'm sure it's just something that's messed up in the McAfee software or something. :-P

10Report
at 11 Feb 2008: 22:54

I've just searched my machine for a file similar to the one in the dialog in the picture. Didn't find anything in my temps, or anywhere at all.

PS, uninstall those toobars. :D

Run Adaware and Spybot too.

11Report
at 12 Feb 2008: 02:02

>>9 http://vil.nai.com/vil/content/v_135834.htm

Specifically:

-----

Several cases have been reported to AVERT as potential incorrect identifications of JS/Wonka, which turned out to be accurate hits. These observations were typically made upon visiting hacked web pages.  These hacked pages have an IFRAME inserted that point to an external website containing malware such as Exploit-Codebase, Exploit-ANIFile, W32/Dumaru.gen, and Exploit-MhtRedir.gen.

This is a generic detection for highly obfuscated JavaScript. The signature is based on specfic characteristics of the encryption. Because this is a generic detection there is no specific description of the activity undertaken by JavaScript detected under this name, however these can include malicious activity such as downloading and executing files.

-----

So it's a bogus detection because the file probably had "obfuscated" javascript. Just another reason I don't bother with antivirus I suppose. It just isn't worth it.

12Report(capped)
Xenofur at 12 Feb 2008: 10:08

first off, if you're actually worried about security. get off IE. due to its market share most exploits are targeted at its specific bugs and an alternate browser like opera or firefox is far less likely to be targeted.

secondly, your AV is crying wolf. adbrite's advertisement system uses some rather complex javascript techniques and it seems your av got caught on those and thinks it's something malicious. "js/wonka" is the signature for that, it means in layman's speak: "this is not a virus, but boy howdy does it look odd to me."

13Report
Brad S at 12 Feb 2008: 17:18

OH, ok thanks.  I usually use Firefox, but I was being lazy. XD

I was just worried that everyone here would end up getting some sort of virus or something and they would stop coming here.  That would end up ruining the site since noone would be posting... o.O

14Report
Yuki Hishinuma at 14 Feb 2008: 03:17

Thank you Brad i put up a warning on this too about the linl in  [male] the cute cpuples but looks like no one else was eleving me so im glade to see this up ^^

15Add Reply
Name Sage? - captcha =
First Page - Last 40 - Entire Thread

Powered by: Shiichan Version 3956
The contents of this page are asserted to be in the public domain by the posters.
The administrators claim no responsibility for thread content.
Manage