Phillip! Your web site has a virus on it

Rokenn · 06-23-2004, 01:07 AM

well actaully a trojan horse.
I just got this popup from McAfee when I went to the link in your sig-

The file (path deleted) was infected with the JS/Keylog-Briss.ldr trojan and has been deleted to complete the Clean process.

I suggest you remove this from you website immediately.

here is the link in question:
http://www.xxxxxxxxxxxxxxxx

Mods, you may want to delete His sig till it has been fix on his server.

[ 06-23-2004, 02:29 AM: Message edited by: Ziroc ]

Rokenn · 06-23-2004, 01:17 AM

Here is information on the Trojan if you want to check for infections:
http://vil.nai.com/vil/content/v_101058.htm

Lord · 06-23-2004, 02:17 AM

I also suggest you warn people not to click on the 1st link that you provided us with

Ziroc · 06-23-2004, 02:29 AM

Done and done. [img]smile.gif[/img] Don't worry guys, unless you OPENED the file and ran it, you should be okay.

philip · 06-23-2004, 12:15 PM

Thanks for deleting it (my sig) [img]smile.gif[/img] Sorry for the trouble

I thought I saw something like that happen but I didn't know if it was my site or something else and when I tried to recreate I didn't get it.

Seemed that the too good offer was too good (had a thread about it a few weeks ago).

Thanks for the info, up to another host for me. Any suggestions?

edit: did i have the .tk address in my sig? I deleted the link there to be sure as well and my site. About how long does it take for links to get through?

edit2: for the host preferably one that allows ftp access

[ 06-23-2004, 12:35 PM: Message edited by: philip ]

philip · 06-23-2004, 12:29 PM

O and it wasn;t me who added the program stupid host. Think I'll make a site at freewebs.com, someone I know has a site there as well and I haven't seen anything like this there, shame of no ftp access but I'd ratehr don't have it than have it with a virus.

philip · 06-23-2004, 02:25 PM

I uploaded to my ISP's webspace. I hope they don't do any of this stuff

I added a news link to the NWvault and here in the NWN fora. I deleted the domain name and my site and scanned the folder before I uploaded (so I didn't get any virus from the old host). That's the most I can do isn;t it

?

06-23-2004, 01:07 AM	#1
Rokenn Galvatron Join Date: January 22, 2002 Location: california wine country Age: 60 Posts: 2,193	well actaully a trojan horse. I just got this popup from McAfee when I went to the link in your sig- The file (path deleted) was infected with the JS/Keylog-Briss.ldr trojan and has been deleted to complete the Clean process. I suggest you remove this from you website immediately. here is the link in question: http://www.xxxxxxxxxxxxxxxx Mods, you may want to delete His sig till it has been fix on his server. [ 06-23-2004, 02:29 AM: Message edited by: Ziroc ] __________________ “This is an impressive crowd, the haves and the have mores. <br />Some people call you the elite. <br />I call you my base.”<br />~ George W. Bush (2000)

06-23-2004, 01:17 AM	#2
Rokenn Galvatron Join Date: January 22, 2002 Location: california wine country Age: 60 Posts: 2,193	Here is information on the Trojan if you want to check for infections: http://vil.nai.com/vil/content/v_101058.htm __________________ “This is an impressive crowd, the haves and the have mores. <br />Some people call you the elite. <br />I call you my base.”<br />~ George W. Bush (2000)

06-23-2004, 02:17 AM	#3
Lord Ma'at - Goddess of Truth & Justice Join Date: June 3, 2003 Location: New York Age: 39 Posts: 3,302	I also suggest you warn people not to click on the 1st link that you provided us with __________________ "You're a thief and a liar." "No, I only lied about being a thief."

06-23-2004, 02:29 AM	#4
Ziroc Ironworks Webmaster *Bow to the Meow* Join Date: January 4, 2001 Location: Lakeland, Florida Age: 51 Posts: 11,720	Done and done. [img]smile.gif[/img] Don't worry guys, unless you OPENED the file and ran it, you should be okay. __________________ Ziroc™ Ironworks Gaming Webmaster www.ironworksgaming.com The Great Escape Studios - 2D/3D Modeling www.tgeweb.com & Ziroc's Facebook Page Visit My Flickr Photo Album

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
BG2 Mod Virus	Lord	Baldurs Gate II: Shadows of Amn & Throne of Bhaal	14	01-31-2004 11:42 AM
Virus	Lars3096	General Conversation Archives (11/2000 - 01/2005)	3	05-23-2003 05:20 PM
New virus to look out for!	\Conan/	General Conversation Archives (11/2000 - 01/2005)	7	03-06-2002 09:58 AM
Virus is GONE	Lavindathar	General Conversation Archives (11/2000 - 01/2005)	9	11-09-2001 08:56 AM
VIRUS-ALERT get anti virus patch here	TheCrimsomBlade	General Conversation Archives (11/2000 - 01/2005)	2	09-20-2001 12:17 AM

06-23-2004, 12:15 PM	#5
philip Galvatron Join Date: June 24, 2002 Location: aa Posts: 2,101	Thanks for deleting it (my sig) [img]smile.gif[/img] Sorry for the trouble I thought I saw something like that happen but I didn't know if it was my site or something else and when I tried to recreate I didn't get it. Seemed that the too good offer was too good (had a thread about it a few weeks ago). Thanks for the info, up to another host for me. Any suggestions? edit: did i have the .tk address in my sig? I deleted the link there to be sure as well and my site. About how long does it take for links to get through? edit2: for the host preferably one that allows ftp access [ 06-23-2004, 12:35 PM: Message edited by: philip ]

06-23-2004, 12:29 PM	#6
philip Galvatron Join Date: June 24, 2002 Location: aa Posts: 2,101	O and it wasn;t me who added the program stupid host. Think I'll make a site at freewebs.com, someone I know has a site there as well and I haven't seen anything like this there, shame of no ftp access but I'd ratehr don't have it than have it with a virus.

06-23-2004, 02:25 PM	#7
philip Galvatron Join Date: June 24, 2002 Location: aa Posts: 2,101	I uploaded to my ISP's webspace. I hope they don't do any of this stuff I added a news link to the NWvault and here in the NWN fora. I deleted the domain name and my site and scanned the folder before I uploaded (so I didn't get any virus from the old host). That's the most I can do isn;t it ?

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)