Help - Search - Members - Calendar
Full Version: Pop-ups with Trojan Viruses?
Outsports Discussion Board > Outsports > About the Board
Maddog
Just a heads up guys because this might just be a coincidence.

I just logged on and have only been on two sites; msn.com (my homepage) and Outsports.

While on Outsports, my pop-up blocker block some ad on the Outsports homepage and then I got two McAfee VirusScan notices for two different trojans. One called EMF and and one called Exploit-ByteVerify. My software immediately quarantined and deleted them and then highly recommended a thourough scan which I'm doing now. BTW I was using Explorer at the time.

My research has found...

Exploit-ByteVerify Virus Characteristics
This detection covers Java applets that attempt to exploit the Microsoft Security Bulletin MS03-011 vulnerability. This severity of this vulnerability is considered to be critical. It allows an attacker to execute malicious code, simply by visiting an infectious website.

Detections of this exploit do not necessarily mean that any malicious code was executed. It simply means that a Java applet was found to contain the exploit code.

Conversely malicious code may have been run, which could result in any number of modifications to the system. All vulnerable systems should apply the patch from Microsoft. Patched systems are immune from the effects of the exploit code. However, detection will still occur on files attempting to make use of this exploit.

Here's the full link. Exploit-ByteVerify

If those pop-ups on the front page are Java, it looks like they may be the culprit.
Jim at Outsports
We will check on this.
ITJock
I had this happen to me yesterday, but my security programs handled it and just notified me that they had taken care of the problem and quarantined the code attempt.

I had no idea where it might have come from since I have been many different places.

Truthfully since the security software handled it on its own I did't think to track the specific source.

R
Jim at Outsports
We are not sure this is us, but just in case, we have disabled the ad service that might be causing it. We will call them Monday and see what's going on.

Let us know if anything else occurs.

Thanks!
Jim
Itsplaytym
Yes, the same thing happened to me as well yesterday. This was the first sight I went to, and was here when it happened.
hockeyTom
Well after being hit with that Trojan thing, twice earlier this morning, the coast seems to be clear, but I am still getting a weird noise, like a clucking or something on occasion. Is anyone else getting this?????
Shytownmofo
I got the same thing. I have a pop up blocker in XP SP2, and it also blocks Active X stuff, and I got a Virus, don't remember what exactly it was, and I also got a notice saying that this site used an active X control or installed it or something. (sorry for being vague, I was working on something else at the time, and I saw virus and I freaked a bit.) All seems okay now, but I'm pretty sure it came from this site due to the active X thing.
santana57
i use spyware blaster, spybot search and destroy, windows defender, and yahoo anti-spy.

i have zero spywares and pop ads.
Jim at Outsports
I think I killed the offending ad: It was for Louis Vitton bags and wanted to download a Java applet.

We take these things very seriously, so if anyone sees anything, try and note what the ad is at the top and any other details.

Sorry for any inconvenience!

Thanks biggrin.gif
hockeyTom
Thanks Jim. I haven't heard that chicken clucking sound this morning so maybe somebody killed the bird. wink
Tom Brooks
I enter the Outsports board, I click on and view about three topics, then simultaneiously:
* small window box appears to prompt me to download "SystemDoctor"
* Outsports board shuts down
I have screen captured the "SystemDoctor" window; let me know if you want me to send it as attachment.
Jim at Outsports
Send as an attachment. We had eliminated popups a couple of weeks ago.
Tom Brooks
Jim, I sent as Word attachment. I think SystemDoctor is a spyware on my computer, a low-level risk. I assume it is on my computer and will try to remove it here. I don't think it is Outsports related, only in that it seems to close the Outsports site when it appears; and only when I'm at the Outsports site.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.