Pulaski County Insider - Forum

Pulaski County Insider - Forum (http://www.pulaskicountyinsider.com/forum/index.php)
-   PulaskiCountyInsider Feedback (http://www.pulaskicountyinsider.com/forum/forumdisplay.php?f=45)
-   -   Possible trojan on this site (http://www.pulaskicountyinsider.com/forum/showthread.php?t=5345)

darrellmaurina 05-20-2009 07:56 AM

Possible trojan on this site
 
Bruce, you may want to do a thorough check of the Pulaski County Insider code.

When I attempt to check new messages, I am getting a message from McAfee that a trojan has been blocked. The trojan is called ExploitObscuredHtml and appears only when using the Pulaski County Insider.

FYI ...

river_rat 05-20-2009 09:04 AM

Quote:

Originally Posted by darrellmaurina (Post 56277)
Bruce, you may want to do a thorough check of the Pulaski County Insider code.

When I attempt to check new messages, I am getting a message from McAfee that a trojan has been blocked. The trojan is called ExploitObscuredHtml and appears only when using the Pulaski County Insider.

FYI ...

Wouldn't everyone get that message?

whoguest 05-20-2009 02:13 PM

Darrell you may want to try this________

Please go to this page and follow the instructions carefully on the removal tab link: http://vil.nai.com/vil/content/v_131453.htm

Meanwhile you could try the following. If you have XP or ME then disable system restore, reboot into safe mode and conduct a virus scan there.


HOW TO DISABLE SYSTEM RESTORE for Windows ME or XP
http://forums.mcafeehelp.com/viewtopic.php?t=668

HOW TO START YOUR PC IN SAFE MODE
http://forums.mcafeehelp.com/viewtopic.php?t=601

river_rat 05-20-2009 03:56 PM

Well, gawrsh, WG .... I'm impressed!!!!

marge 05-20-2009 05:42 PM

Quote:

Originally Posted by river_rat (Post 56282)
Well, gawrsh, WG .... I'm impressed!!!!

Yep.....who knew?!! LOL

bruuuuce 05-20-2009 05:52 PM

Quote:

Originally Posted by darrellmaurina (Post 56277)
Bruce, you may want to do a thorough check of the Pulaski County Insider code.

When I attempt to check new messages, I am getting a message from McAfee that a trojan has been blocked. The trojan is called ExploitObscuredHtml and appears only when using the Pulaski County Insider.

FYI ...

Thanks Darrell I will look into it.

darrellmaurina 05-20-2009 08:05 PM

Quote:

Originally Posted by river_rat (Post 56279)
Wouldn't everyone get that message?

Not necessarily.

There are a long list of ways that malicious code on websites will activate only when the computer reading the site has certain features -- usually ones which will allow the code to transmit more quickly. And I update my virus definitions and anti-virus program daily, which is more often than most people do it, so I've had some cases in the past where I was the first person to catch a problem.

No need to identify "offenders," but malicious code got attached to two different Pulaski County organizational websites with the result that they were flagged by Google as sites that could potentially damage computers. Obviously that is NOT what people want to have happen, but in both cases I was the first person to alert the organization to a problem they previously knew nothing about. (This isn't happening with the Pulaski County Insider, by the way.)

Before posting this alert publicly I'd already done the standard things -- making sure my anti-virus program is updated, that I have the most recent updates to Windows, and that I'd performed a full system scan. The problem continued, but ONLY with one specific feature on the Pulaski County Insider, and only when I access it in one specific way. I've been using a different method to access that feature since then.

Let's hear what Bruce has to say after he does a check of his code.

bruuuuce 05-20-2009 09:22 PM

DTM sent you a PM.

darrellmaurina 05-20-2009 11:01 PM

Thanks for your PM, Bruce...

For other people's informatiion, while Bruce can give the details if he chooses, there was apparently a problem on the Pulaski County Insider site with some older files that my virus detection software found. Bruce thinks the problem is fixed and I'm not getting notification messages anymore, either.

I normally use Norton Utilities which I have set to block and log trojan attempts, but unless I read the logs, which I don't always do, I may not notice I had a blocked attempt to access my computer, download a trojan, or do something else. However, I have a brand-new computer that came with McAfee virus protection software that notifies me with popups on everything until I turn them off. I'll eventually change to Norton but since I have a free 60-day subscription to McAfee I might as well keep it for now, and while I'm sure McAfee has a way to turn them off, I'll probably leave the popups enabled just out of curiosity until my free subscription expires.

For those who are interested, my primary laptop had a defective motherboard and needed to be sent in for warranty work, my backup laptop has major problems and is barely usable, and I made the mistake of getting rid of my old desktop computer when I moved to our new home a couple of months ago, so I have been almost totally out of commission since last week Wednesday. That problem should be fixed very soon. And yes, I am very, very, very frustrated.

river_rat 05-20-2009 11:21 PM

Thanks for the update, Darrell! :clapp:


All times are GMT -5. The time now is 03:18 AM.

Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
Copyright 2007 - 2013 - Pulaski County Insider, LLC