JS/Obfuscated (trojan) ?

General BVS related area
User avatar
booboo
Posts: 429
Joined: Fri May 25, 2007 8:08 am
Location: Creepy Crawley,West Sussex
Contact:

JS/Obfuscated (trojan) ?

Postby booboo » Wed Dec 10, 2008 11:45 am

Anyone else getting a virus warning when flitting between this forum and the main BVS website ?

I have Mcafee installed and it generates a "JS/Obfuscated Trojan" warning ,looked it up as follows ;

Virus Profile: JS/Obfuscated
Risk Assessment
- Home Users: Low
- Corporate Users: Low
Date Discovered: 11/26/2008
Date Added: 11/26/2008
Origin: Unknown
Length: N/A
Type: Trojan
SubType: Script
DAT Required: 5446



Any suggestions ?
London to Brighton on a Sinclair C5 - 6/5/07 - what a trip !
Ford Explorer 4.0 v6 petrol for everyday abuse - thank God for LPG
Sinclair C5's (Plus "c5alive.co.uk" ) as a hobby

MalcolmB
Posts: 423
Joined: Sat Jun 23, 2007 8:07 pm

Postby MalcolmB » Wed Dec 10, 2008 12:44 pm

Yes, I still get the malware warning that I mentioned a while back when I navigate to the main site from this forum. This is on a Mac running the latest version of Safari. I've only ever had this warning for one other website.

Having said that I ignored the warning and have not suffered any ill effects yet from visiting the main site.

User avatar
ChrisB
Posts: 4657
Joined: Fri Jul 14, 2006 11:33 am
Location: Hampshire on the Southcoast
Contact:

Postby ChrisB » Thu Dec 11, 2008 8:52 am

Mmmm somewhat concerning I have to say, I have little to do with the main site so will give Tim a shout and see what he recons, having said that I'm using a corperate edition of Eset's NOD32 and have no such warnings on the main site :?


ChrisB
I reject reality and substitute my own !!!!!!

User avatar
timpootle
Posts: 1362
Joined: Wed Mar 14, 2007 12:13 pm
Location: Chorlton-cum-Hardy, UK

Postby timpootle » Thu Dec 11, 2008 9:58 pm

Found it! Nasty little obfuscated javascript thing.

The infection happened on the 15th of November. I will be going back through the logs to find out where it came from, and un-obfuscating the script to see what it does.

All is clear now. I will be watchful for any further infestation.

Tim

User avatar
ChrisB
Posts: 4657
Joined: Fri Jul 14, 2006 11:33 am
Location: Hampshire on the Southcoast
Contact:

Postby ChrisB » Thu Dec 11, 2008 10:03 pm

Interesting , so much for ESET's NOD32 corperate software :roll: well unless it was just blocking it anyway and didnt feel it was worth bothing me about :?

Thanks Tim

BTW that wouldnt have been what was causing all our issues a while back could it ???

ChrisB
I reject reality and substitute my own !!!!!!


Return to “General”

Who is online

Users browsing this forum: No registered users and 42 guests