Trojan virus on this website

Discussion of these forms, requests for forums, announcements about these forums

Moderators: povster, s1owpoke, cabernethy, coughcapkittykat

mountainhick
Posts: 15
Joined: Wed Aug 13, 2008 6:30 pm

Trojan virus on this website

Postby mountainhick » Thu Jan 22, 2009 4:11 pm

My internet security software is reacting to something on every web page of this website, possibly a trojan/virus. HUER:Trojan.Script.Iframer

Just thought you should know.

User avatar
Aanaddha
Posts: 1963
Joined: Sat Jan 14, 2006 6:41 am
Location: Big Sur, CA

Re: Trojan virus on this website

Postby Aanaddha » Thu Jan 22, 2009 5:42 pm

What security software and version are you using ? Nothing harmful here according to Ad-aware with latest update.
If he could sing, and nature to accompany him, what need would he have for an instrument?

mountainhick
Posts: 15
Joined: Wed Aug 13, 2008 6:30 pm

Re: Trojan virus on this website

Postby mountainhick » Fri Jan 23, 2009 12:09 am

Aanaddha wrote:What security software and version are you using ? Nothing harmful here according to Ad-aware with latest update.


Kaspersky

david
Site Admin
Posts: 496
Joined: Fri Jan 13, 2006 10:59 pm
Location: Houston, TX
Contact:

Re: Trojan virus on this website

Postby david » Fri Jan 23, 2009 5:12 am

I received a somewhat vague answer from the support team at my hosting service concerning this script: they said:

"Looking at this file I do see obfuscated Javascript that would could set off a warning. Toward the bottom of this file you can find the code that created the warning. It begins eval(function{p,a,c,k,e,d"

my response to them was:

"So what is the bottom line? I have Googled the matter up and down and have found no indication of any problem? Do I need to remove the code, if so does it effect the usability of the forums."


At this point I am still awaiting an answer.

So Brothers and Sisters. I know that there are users of the forum that are far more knowledgeable in these matters than myself. If it was a known trojan, I am sure that the security team would have immediately deleted the file. Are we in a peculiar situation where one group of "internet pandits" is trying to pontificate as to what "correct coding" is supposed to be?

Your input on the matter is greatly appreciated.

peace

David Courtney

User avatar
cwroyds
Posts: 2099
Joined: Thu Jun 07, 2007 1:06 am
Location: Los Angeles

Re: Trojan virus on this website

Postby cwroyds » Fri Jan 23, 2009 5:54 am

I am surprised that your host was not more helpful.
When this happened to me I was notified that there was a problem by my Host and they had already removed the offending bug and had replaced the site with a previous backup.
I only had to go to Google to get them to review the site and remove the warning.

Internet security is very necessary, but it is a total pain.

Shawn
Posts: 332
Joined: Sat Jan 14, 2006 2:59 pm
Location: Montreal, Quebec, Canada
Contact:

Re: Trojan virus on this website

Postby Shawn » Fri Jan 23, 2009 2:52 pm

I am using Kaspersky as well. I think it's probably one of the more extensive protection packages out there. It might be a little more suspicious than other programs, such as Norton. It is also updated far more frequently than other AV packages.
Shawn Mativetsky
http://www.shawnmativetsky.com
http://www.twitter.com/tablamontreal
http://www.facebook.com/tablamontreal

User avatar
Aanaddha
Posts: 1963
Joined: Sat Jan 14, 2006 6:41 am
Location: Big Sur, CA

Re: Trojan virus on this website

Postby Aanaddha » Fri Jan 23, 2009 6:41 pm

Just a note... I've used ALWIL Avast for years - it's free for home use, updates automatically (nearly every day), no need to purchase yearly subscriptions (it also picked up several trojans that the latent Norton that came with the new PC missed.) - and Ad_aware, also free for home use.
Unless you're opening junk mail, browsing porn or Chinese or Russian web-sites you don't need Norton or Kaspersky and their overwrought protections- IMO - Norton causes more problems than it fixes and I suspect the same with Kaspersky.

I'm also using Google Chrome Browser (IE is on par with Norton) - it gives me a warning when I visit Chandrakantha.com but allows me to choose to continue - not a problem.
If he could sing, and nature to accompany him, what need would he have for an instrument?

david
Site Admin
Posts: 496
Joined: Fri Jan 13, 2006 10:59 pm
Location: Houston, TX
Contact:

Re: Trojan virus on this website

Postby david » Fri Jan 23, 2009 10:56 pm

The Google Chrome issue I believe is a separate problem. It is my understanding that whenever Google chrome visits a site with Google Analytics, it flags this as suspicious. We can only presume that Google Chrome not liking Google Analytics is a bug that will shortly be resolved.

But that brings up another question.

I refuse to use Windows in ANY WAY SHAPE OR FORM. That also goes for the servers that I rent. My computers are all ether Mac or Linux. With a windows machine, are you always being warned and flagged about everything? If so do you just get to the point where you don't pay attention anymore? What goes here?

Peace

David Courtney

User avatar
Aanaddha
Posts: 1963
Joined: Sat Jan 14, 2006 6:41 am
Location: Big Sur, CA

Re: Trojan virus on this website

Postby Aanaddha » Sat Jan 24, 2009 3:25 am

david wrote: With a windows machine, are you always being warned and flagged about everything?


Not so; only when you couple Norton or McAfee or any other paranoid on-line security with IE, Yahoo, AOL, and your browser security setting is at peak will you get bogged down with redundant warnings. Otherwise I've never had a serious problem with windows os - just with IE and some of windows most blatant yet avoidable options.


david wrote: so do you just get to the point where you don't pay attention anymore? What goes here?


I visit Chandrakantha several times a day and the warning only comes up only after I've cleared the cache. I know there's no Trojans here and I'd be highly suspicious of any security software that says there is - I certainly wouldn't be paying $$$ a year for such a program. I don't have anything against Apple - I don't like having to buy an expensive Mac machine to use their os...talk about monopolies. And as much as Linux has improved it's still has it's limits. Yes, you can choose, and with a little research you can avoid a lot of problems and save a lot of money and headaches at the start.
If he could sing, and nature to accompany him, what need would he have for an instrument?

User avatar
cwroyds
Posts: 2099
Joined: Thu Jun 07, 2007 1:06 am
Location: Los Angeles

Re: Trojan virus on this website

Postby cwroyds » Sat Jan 24, 2009 3:37 am

I use windows machines at work as we have to log into retail link systems for retailers, but my art computers are all Macs.
Having used both I must say I would gladly pay twice as much for a Mac system so that I never have to use a Windows machine.
Windows is a tragedy of an OS. (Regardless of XP or Vista)
OS x is awesome. Far superior in every way.
It is stable, clear, beautifully designed, not attacked by virus and trojan horses, and it all just works.
When I start working on a windows machine my blood starts to boil and I end up saying out loud "I HATE WINDOWS!!!"

I know it is a matter of opinion, but from experience I can say without hesitation that Macs absolutely kill PCs.

User avatar
Aanaddha
Posts: 1963
Joined: Sat Jan 14, 2006 6:41 am
Location: Big Sur, CA

Re: Trojan virus on this website

Postby Aanaddha » Sat Jan 24, 2009 4:45 am

cwroyds wrote:I use windows machines at work as we have to log into retail link systems for retailers, but my art computers are all Macs.
Having used both I must say I would gladly pay twice as much for a Mac system so that I never have to use a Windows machine.
Windows is a tragedy of an OS. (Regardless of XP or Vista)
OS x is awesome. Far superior in every way.
It is stable, clear, beautifully designed, not attacked by virus and trojan horses, and it all just works.
When I start working on a windows machine my blood starts to boil and I end up saying out loud "I HATE WINDOWS!!!"

I know it is a matter of opinion, but from experience I can say without hesitation that Macs absolutely kill PCs.


And twice as much is what you'll pay for a Mac - at least some of us are thankful there are a few less expensive alternatives that work well enough.

- and what's this 'Bonjour' crap I keep getting for signing up for Quicktime and iTunes ???? ... for what it's worth I didn't want iTunes, only the iPod, but like most apple products there's always a catch. :?
If he could sing, and nature to accompany him, what need would he have for an instrument?

User avatar
cwroyds
Posts: 2099
Joined: Thu Jun 07, 2007 1:06 am
Location: Los Angeles

Re: Trojan virus on this website

Postby cwroyds » Sat Jan 24, 2009 4:55 am

:lol: :lol: :lol:
"To each his own" as they say.
At least you appreciate the ipod.
I love my ipod and iphone.
Good stuff.

Shawn
Posts: 332
Joined: Sat Jan 14, 2006 2:59 pm
Location: Montreal, Quebec, Canada
Contact:

Re: Trojan virus on this website

Postby Shawn » Wed Jan 28, 2009 3:52 pm

I did some digging at kaspersky.com and it seems that this may be a 'false positive', due to a recent upgrade to their software, which is perhaps too aggressive. I sent them an e-mail about this, and hopefully they will respond and/or this will be fixed in the next update of the software.

The HEUR: Trojan.Script.Iframe is a detection of suspicious scripts, such as hidden frames that may redirect to other websites, etc.

Shawn
Shawn Mativetsky
http://www.shawnmativetsky.com
http://www.twitter.com/tablamontreal
http://www.facebook.com/tablamontreal

david
Site Admin
Posts: 496
Joined: Fri Jan 13, 2006 10:59 pm
Location: Houston, TX
Contact:

Re: Trojan virus on this website

Postby david » Mon Feb 02, 2009 5:36 am

Dear Brothers and Sisters.

The events of last Saturday have completely settled the argument as to what I am going to do about the script under question. And this is it:

nothing!!

It is a legitimate script, it provides functionality, it is harmless, and if Google or Kaspersky does not like the way that it is written, then "tough s##t". I am not going to reduce the functionality of the forums just because someone does not like the way it is coded. It is clear that they have a long way to go in terms of improving their ability to decide what sites do, and what sites do not contain malware!

peace

David Courtney

Shawn
Posts: 332
Joined: Sat Jan 14, 2006 2:59 pm
Location: Montreal, Quebec, Canada
Contact:

Re: Trojan virus on this website

Postby Shawn » Thu Feb 05, 2009 8:01 pm

Hi David,

This is Kaspersky's response to my false positive submission e-mail:

Hello.

This is not false alarm.
New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.


I don't know what to make of this, but I thought I'd pass on the information to you.

Shawn
Shawn Mativetsky
http://www.shawnmativetsky.com
http://www.twitter.com/tablamontreal
http://www.facebook.com/tablamontreal


Return to “THESE FORUMS”

Who is online

Users browsing this forum: No registered users and 1 guest