ForumUp English Language Support

Raulken · Posted: Thu Apr 05, 2007 3:40 pm Post subject: Virus warning

After many investigation IMHO the false warnig is a script of social bookmakers.

Please deactivate one at time for found the evil script, after I remove forever this script from forumup.

_________________

LT · Member Joined: 03 Feb 2007 Posts: 23

I'm sorry, I'm not understanding.

What does this mean?

_________________

Raulken · Posted: Thu Apr 05, 2007 4:13 pm Post subject:

is not BM... on .it users continue with this problems...

can be Google Analitycs DNS spoof problem... now I have disabled Google Analitycs please give me feedback if work or not.

If U fine a page with virus please copy and paste here into CODE tag all HTML of evil page for investigation, tnx.

_________________

gg'ssimon · Posted: Thu Apr 05, 2007 4:28 pm Post subject:

LT wrote:

I'm sorry, I'm not understanding.

What does this mean?

The social bookmarks are the Digg, Delicious, and Technorati links at the bottom of forum pages (unless you disabled them from showing via the Admin Control Panel).

Raulken thought one of those was the problem, but his new post says, no, those are not the problem.

_________________
Margaret /gg'ssimon~ForumUp World-Wide Administrator

Jacko · Member Joined: 05 Jun 2006 Posts: 78

I have ads free and disabled those additional links when they were first added on, so not sure why I am still getting this Trojan (only happens when visiting my forum and this support forum). Here’s the info I got back from Microsoft:

“Win32/MSA-935423!exploit is a generic detection of animated cursor files that attempt to exploit a vulnerability in the handling of these file formats…”

Does this info help? Please explain what you mean when you call it a false warning? My PC needs to be shut down and scanned to remove it each time it happens ?

I have a screen shot of the alert if you want me to post it.

Thanks,
Jacko

_________________

Noclue4aname · Member Joined: 21 Nov 2005 Posts: 2109 Location: UK

He already said he'd ruled out the social bookmarks and the adverts, so the investigation is still on going to find the cause but the information you have given will help.

_________________

artpad · Member Joined: 30 May 2006 Posts: 18 Location: LONDON

Hi, my forum is

Only registered users can see links on this forum!
Register or Login on forum!

and a member has today posted this message to me by email

McAfee has automatically blocked and removed a Trojan.

Details

Detection: Exploit-ANIfile.c (Trojan)

I don't know what to do about this as my knowledge of these viruses is minimal. Can you help please. People are not posting on my site because of this.

_________________

Noclue4aname · Member Joined: 21 Nov 2005 Posts: 2109 Location: UK

The advice is still the same, just keep your virus scanner up to date. The problem is being investigated.

_________________

kerrymoe · Member Joined: 11 Jul 2005 Posts: 5

Kerry

Only registered users can see links on this forum!
Register or Login on forum!

This is the one I've been getting.

I'm going to advise everyone to stop visiting the site until this is resolved.

Win32/MS07-017!exploit

Only registered users can see links on this forum!
Register or Login on forum!

gg'ssimon · Posted: Fri Apr 06, 2007 7:52 pm Post subject:

kerrymoe wrote:

Kerry

Only registered users can see links on this forum!
Register or Login on forum!

This is the one I've been getting.

I'm going to advise everyone to stop visiting the site until this is resolved.

Win32/MS07-017!exploit

Only registered users can see links on this forum!
Register or Login on forum!

It doesn't happen with Firefox browser. So you can advise people to use that in the meantime.

_________________
Margaret /gg'ssimon~ForumUp World-Wide Administrator

Wezzy · Member Joined: 13 Dec 2006 Posts: 4

I have gotten a complain about the trojan warning too. This warning came from a firefox user so I don't think they're safe either.

I myself haven't found it yest but I trust this user.

Only registered users can see links on this forum!
Register or Login on forum!

artpad · Member Joined: 30 May 2006 Posts: 18 Location: LONDON

Just a thought but could it be linked with the 'upload image to post' link below the text box?

_________________

gg'ssimon · Posted: Mon Apr 09, 2007 6:37 pm Post subject:

artpad wrote:

Just a thought but could it be linked with the 'upload image to post' link below the text box?

That is a thought to be considered.

_________________
Margaret /gg'ssimon~ForumUp World-Wide Administrator

Sibelius · Posted: Tue Apr 10, 2007 11:34 am Post subject:

Just for the record, one user has reported a virus warning on my forum. I asked him to specify what the warning was, he will get back to me.

Interestingly, I have never gotten the warning myself, I have no-ads enabled as well. As another precaution, I would suggest to everyone to disable all the technocrati and digg add-ons as well.

_________________

gg'ssimon · Posted: Tue Apr 10, 2007 5:56 pm Post subject:

Sibelius wrote:

Just for the record, one user has reported a virus warning on my forum. I asked him to specify what the warning was, he will get back to me.

Interestingly, I have never gotten the warning myself, I have no-ads enabled as well. As another precaution, I would suggest to everyone to disable all the technocrati and digg add-ons as well.

What browser do you use?

_________________
Margaret /gg'ssimon~ForumUp World-Wide Administrator