UltraBB Forums Home 
Home Search search Menu menu Not logged in - Login | Register
UltraBB Forums > UltraBB > Troubleshooting > FLASH CHAT WARNING

Welcome to the UltraBB public support forum! Did you know there is an inexpensive totally integrated gallery available for UltraBB? Read more here: Gallery Details

 Moderated by: Fake Mod Page:  First Page Previous Page  1  2   
New Topic Reply Printer Friendly
FLASH CHAT WARNING  Rate Topic 
AuthorPost
 Posted: Mon Dec 28th, 2009 09:58 pm
  PM Quote Reply
21st Post
Jim
I work here


Joined: Wed Apr 11th, 2007
Location:  
Posts: 6649
Status: 
Offline
Mana: 
User Gallery
Yes delete the entire folder.

Back To Top PM Quote Reply  

 Posted: Tue Dec 29th, 2009 01:12 am
  PM Quote Reply
22nd Post
sol
Member
 

Joined: Fri Aug 22nd, 2008
Location: Evanston Gardens, South Australia, Australia
Posts: 76
Status: 
Offline
Mana: 
User Gallery
martin_wynne wrote: Hi Bob,

Forget everything I just said. :whatever:

The index.php file in your /avatars/ folder (which should be empty) is infected, and my ESET NOD32 AV has now found it.

More to the point, the virus is actually called: JS/TrojanDownloader.Agent.NRL

which means that at long last I can search for some meaningful information about it. So thanks for that at least. See attached.

regards,

Martin.


I had the same thing as Martin this morning from the same post as Bob ,  my time around 8AM on Tuesday as  I too use ESET NOD32.

But what does this virus actual do outside of saying Trojan, etc ? Does it delete files, killl the PC, etc ?

Back To Top PM Quote Reply

 Posted: Tue Dec 29th, 2009 01:25 am
  PM Quote Reply
23rd Post
Jim
I work here


Joined: Wed Apr 11th, 2007
Location:  
Posts: 6649
Status: 
Offline
Mana: 
User Gallery
It redirects your google searches to sites with worse trojans.

It actually redirects your search to a pretty blue search looking page with the same string in the box that you originally searched for.

Then anything you go to has more malware.

It happens about one in 30 searches to be sneaky.

Attached Image (viewed 95 times):

allt_search.gif

Back To Top PM Quote Reply  

 Posted: Tue Dec 29th, 2009 01:36 am
  PM Quote Reply
24th Post
sol
Member
 

Joined: Fri Aug 22nd, 2008
Location: Evanston Gardens, South Australia, Australia
Posts: 76
Status: 
Offline
Mana: 
User Gallery
Thanks Jim,  can I assume that if my anti-virus stops it, I do not get re-directed?

  So far,  I have had no problems with Google & I have not tried Yahoo or the Microsoft search engines for a while.

Back To Top PM Quote Reply

 Posted: Wed Dec 30th, 2009 12:47 am
  PM Quote Reply
25th Post
bhyder
License holder


Joined: Wed Aug 19th, 2009
Location: South Carolina USA
Posts: 143
Status: 
Offline
Mana: 
User Gallery
:cool: questions 

could the js virus be embedded in a zip file for flash chat, even tho its not in use and has never been opened ?

 

Last edited on Wed Dec 30th, 2009 10:48 pm by bhyder

Back To Top PM Quote Reply  

 Posted: Wed Dec 30th, 2009 03:02 am
  PM Quote Reply
26th Post
Jim
I work here


Joined: Wed Apr 11th, 2007
Location:  
Posts: 6649
Status: 
Offline
Mana: 
User Gallery
The virus has been known to infect avatars also and change their content. Usually adds a large cigar also though.

Back To Top PM Quote Reply

 Posted: Wed Dec 30th, 2009 05:17 am
  PM Quote Reply
27th Post
bhyder
License holder


Joined: Wed Aug 19th, 2009
Location: South Carolina USA
Posts: 143
Status: 
Offline
Mana: 
User Gallery
i have deleted the file so its no big deal now.

jim 

how did you know i had almost added the cigar  lol

smile jim,

 after what you have been through the past few days you need to smile. :)

Back To Top PM Quote Reply  

 Posted: Sat Jan 2nd, 2010 01:30 am
  PM Quote Reply
28th Post
TVDinner
Go UCONN!


Joined: Wed May 9th, 2007
Location: North Carolina USA
Posts: 1618
Status: 
Offline
Mana: 
User Gallery
Jim - this program was suggested to me by a local server/computer/IP administer as an upgrade to AVG and AVAST. i know nothing about it but wanted to pass along the info.

http://www.superantispyware.com/

Back To Top PM Quote Reply

 Posted: Sat Jan 2nd, 2010 01:47 am
  PM Quote Reply
29th Post
Jim
I work here


Joined: Wed Apr 11th, 2007
Location:  
Posts: 6649
Status: 
Offline
Mana: 
User Gallery
AVG is not considered protection IMO. superantispyware seems to be a real product from the reading I did in the past 10 minutes.

It seems like if it was notable as long as it has been out I would have heard of it at all. I have not.

I'm giving it a "it's not a false program".

Beware though, there are an array of products that are real that act exactly like the fake ones.

You download the free version.

You scan your computer.

It finds problems (in the real companies cases.. real threats)

You hit the "get rid of problem" button of the day.

It says to do so you have to purchase the professional version.

Yes there are real companies that do this. SpywareDoctor is one of them. A real company that still tries to rope you in to a purchase.

Back To Top PM Quote Reply  

 Posted: Sat Jan 2nd, 2010 07:26 pm
  PM Quote Reply
30th Post
wingnutter
Forever Learning


Joined: Wed May 14th, 2008
Location: Ireland
Posts: 1843
Status: 
Offline
Mana: 
User Gallery
I found an interesting post on the Flashchat forum that explains hacker tricks to get in;

http://forum.tufat.com/showthread.php?t=55277&highlight=allow+rooms

Back To Top PM Quote Reply

Current time is 10:41 am Page:  First Page Previous Page  1  2     
UltraBB Forums > UltraBB > Troubleshooting > FLASH CHAT WARNING Top



Hosting

UltraBB 1.17 Copyright © 2007-2011 Data 1 Systems, INC.
Page processed in 0.2137 seconds (14% database + 86% PHP). 26 queries executed.