Storing Cookies (See : http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm ) help us to bring you our services at overunity.com . If you use this website and our services you declare yourself okay with using cookies .More Infos here:
https://overunity.com/5553/privacy-policy/
If you do not agree with storing cookies, please LEAVE this website now. From the 25th of May 2018, every existing user has to accept the GDPR agreement at first login. If a user is unwilling to accept the GDPR, he should email us and request to erase his account. Many thanks for your understanding

User Menu

Custom Search

Author Topic: Trojan ByteVerify  (Read 13166 times)

hydrocontrol

  • Sr. Member
  • ****
  • Posts: 281
Trojan ByteVerify
« on: February 14, 2007, 09:16:07 PM »
While at home I came to the this site to check the forums and my Nortons intercepted this Trojan ByteVerify trojan horse. Did not give it much of a thought then I came to visit again from work and the Nortons at work intercepted the Trojan ByteVerify again. So two different machines at two different locations running Nortons have interecepted this Trojan ByteVerify trojan horse. Both showed up in the cache area after I came here. This looks a little more questionable. Like a possible problem. Anyone else notice this ?

Nortons info on this
http://www.symantec.com/security_response/writeup.jsp?docid=2003-090514-4048-99

ResinRat2

  • elite_member
  • Hero Member
  • ******
  • Posts: 1242
    • Hydrogen Reactor Vids
Re: Trojan ByteVerify
« Reply #1 on: February 14, 2007, 10:15:41 PM »
My McAfee detected one the other day too.

Maybe this is where it came from?

I couldn't say exactly where it was detected though.

amos3v7

  • Newbie
  • *
  • Posts: 7
Re: Trojan ByteVerify
« Reply #2 on: February 14, 2007, 10:17:59 PM »
I've been coming to this site for several weeks now and haven't had a problem but when I signed in this time My nortons also picked up the same trojan right off the bat

FreeEnergy

  • Hero Member
  • *****
  • Posts: 2014
    • The Freedom Cell Network
Re: Trojan ByteVerify
« Reply #3 on: February 14, 2007, 10:18:19 PM »
this is probably coming from third party ads on this website.

hydrocontrol

  • Sr. Member
  • ****
  • Posts: 281
Re: Trojan ByteVerify
« Reply #4 on: February 14, 2007, 10:38:29 PM »
Good. glad it was not just me... well sort of.... I am sure others here do not need a trojan... Hope everyone has their antivirus up to date.. I also figured it was some 3rd party ads... Just not sure which one since I did not pay that much attention to what was being displayed... Maybe next time I will take note of what ads are being displayed to try to help narrow it down.

After I posted this I noticed that the side ads where offering Anti trojan and Anti virus links.. Interesting.. Have a anti-virus ad link that provides a virus.. Ironic...

Moab

  • Sr. Member
  • ****
  • Posts: 303
Re: Trojan ByteVerify
« Reply #5 on: February 15, 2007, 12:11:51 AM »
I am haveing the same issues! ???





gyulasun

  • Hero Member
  • *****
  • Posts: 4117
Re: Trojan ByteVerify
« Reply #6 on: February 15, 2007, 12:27:17 AM »
Hi,

Yes I can also confirm Trojan virus and I managed to locate its link where it is:
http://www.rock-spirit.de/templ......(Link removed for safety !admin) and
http://www.rock-spirit.de/templ.... (Link removed for safety !admin)

Stefan, please try to contact them.

Gyula
« Last Edit: February 15, 2007, 02:23:40 AM by hartiberlin »

hartiberlin

  • Administrator
  • Hero Member
  • *****
  • Posts: 8154
    • free energy research OverUnity.com
Re: Trojan ByteVerify
« Reply #7 on: February 15, 2007, 12:29:10 AM »
Okay, can
anyone located the exact page where it is inserted ?

I have already emailed this webmaster from Rock-Spirits.de
but have no answer yet...

Somebody must have hacked my site and inserted it somewhere...
Please stay tuned..
I will try to fix it.
Many thanks.

hartiberlin

  • Administrator
  • Hero Member
  • *****
  • Posts: 8154
    • free energy research OverUnity.com
Re: Trojan ByteVerify
« Reply #8 on: February 15, 2007, 12:44:11 AM »
Shit,
another webmaster wrote me:


Code:
(Code removed for safety !admin)


Wenn Du entweder die Zeichen decodierst, oder das ganze einfach mal nach Google eingibst

(Link removed for safety !admin)

Kommst Du auf die Seite und der Quelltext ist:
http://www.rock-spirits.de/tem....(Link removed for safety !admin)

Code:

(coderemoved for safety !admin)

Hast Du das vielleicht selber eingebunden?

Ciao,
Mike


===


Howcan I get this Iframe out of the database,
as all the pages are generated out of the database and it is
not in any Tinyportal block or something like this...

Can anyone help please ?

Many thanks...
« Last Edit: February 15, 2007, 02:25:03 AM by hartiberlin »

hartiberlin

  • Administrator
  • Hero Member
  • *****
  • Posts: 8154
    • free energy research OverUnity.com
Re: Trojan ByteVerify
« Reply #9 on: February 15, 2007, 01:16:42 AM »
Okay, it was an Iframe at the end of the index.php
file inserted by someone...

NowI have deleted this.

Please can everyone check his PC if this was infected with this Trojan horse?

Tommorow I will phone the webmaster of the rock-spirit.de
site and ask him,what was happening.

I also installed now the new forum update with all the new fixes...

Please let me know, if you will find still some issues.

Many thanks.

Regards, Stefan.
P.S : Now posting in a minute the new working magnet motor from Mike
with a video ! It is amazing, Stay tuned..
Regards, Stefan.

FreeEnergy

  • Hero Member
  • *****
  • Posts: 2014
    • The Freedom Cell Network
Re: Trojan ByteVerify
« Reply #10 on: February 15, 2007, 03:48:08 AM »
hartiberlin weren't you going to change hosting companies or something? or did you already do that? anyways if you are still looking here is a good guide www.TheHostingChart.com

also check out these Content Management Systems for your website :)
http://linuxlinks.com/Web/Portal/Content_Management_System

www.SubDreamer.com is also very good.

peace
« Last Edit: February 15, 2007, 04:59:36 AM by FreeEnergy »

argona369

  • Sr. Member
  • ****
  • Posts: 315
Re: Trojan ByteVerify
« Reply #11 on: February 15, 2007, 07:36:29 AM »
.
« Last Edit: September 11, 2007, 03:09:09 AM by argona369 »

FreeEnergy

  • Hero Member
  • *****
  • Posts: 2014
    • The Freedom Cell Network
Re: Trojan ByteVerify
« Reply #12 on: February 15, 2007, 07:45:48 AM »
@argona369 and everyone else.

maybe you can try these free software...

anti-virus:
 http://free.grisoft.com

and

firewall:
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp

or start using linux:
www.xubuntu.org

argona369

  • Sr. Member
  • ****
  • Posts: 315
Re: Trojan ByteVerify
« Reply #13 on: February 15, 2007, 09:12:21 AM »
.
« Last Edit: September 11, 2007, 03:07:33 AM by argona369 »

hartiberlin

  • Administrator
  • Hero Member
  • *****
  • Posts: 8154
    • free energy research OverUnity.com
Re: Trojan ByteVerify
« Reply #14 on: February 15, 2007, 09:16:41 AM »

[Sign of "VBS:Malware [Gen]" has been found]

hartiberlin, don't you have a  Adequate firewall?
shit, do i have to rebuild now?

pissed off.

ok, so now have a virus? what do i do now?



It was not coming from my computer.

Somebody unknown to me seems to have hacked my
forum and inserted into the index.php file an Iframe script,
so all forum pages were loading this trojan script.

Please ALL check your PCs now with a free antivirus
software as:

http://de.trendmicro-europe.com/consumer/housecall/housecall_launch.php

Or www.bitdefender.com

or simular free online scanners.

Sorry for the trouble, but this was a real attack.

Regards, Stefan.