Storing Cookies (See : http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm ) help us to bring you our services at overunity.com . If you use this website and our services you declare yourself okay with using cookies .More Infos here:
https://overunity.com/5553/privacy-policy/
If you do not agree with storing cookies, please LEAVE this website now. From the 25th of May 2018, every existing user has to accept the GDPR agreement at first login. If a user is unwilling to accept the GDPR, he should email us and request to erase his account. Many thanks for your understanding

User Menu

Custom Search

Author Topic: Trojan Alert  (Read 19856 times)

Ergo

  • Sr. Member
  • ****
  • Posts: 280
Trojan Alert
« on: January 07, 2008, 04:25:09 PM »
WARNING!

My virus protection alerted against "s e x.exe" that was sneaked into my system on this site.
I used IE at the time being. I have now switched to Firefox.

Stefan, please check your AD suppliers for any suspicious Trojans.....

Carl.

  • Newbie
  • *
  • Posts: 15
Re: Trojan Alert
« Reply #1 on: January 07, 2008, 05:09:00 PM »
I had the same experience today, several Ad's tried to install a trojan downloader, antivirus caught it but we should not have to be wary of OU's website do we?

Stefan,

Please investigate your ad suppliers, they are playing dirty. or at least seem to be.

b0rg13

  • Hero Member
  • *****
  • Posts: 651
Re: Trojan Alert
« Reply #2 on: January 08, 2008, 12:51:08 AM »
some 1 set up a pole and lets remove the damn adds ....come on stef..F***K the adds

TheOne

  • Hero Member
  • *****
  • Posts: 985
    • Amanatsu Games
Re: Trojan Alert
« Reply #3 on: January 08, 2008, 01:30:53 AM »
At home I use firefox with Adsblock, all the crap is removed :) but at office I got the same problem with IE I got attacked by trojan today to....

Also they are some problem with the size, I am configurated to expand the view. but 50% of the time its not expanded, its frustating, I reload the page sometime 3-4 times to get it right, so many bandwidth lost!

And I get (User 'hartiberlin1' has exceeded the 'max_questions' resource (current value: 100000)) so many time like right now when I want to post.....

huhh

  • Newbie
  • *
  • Posts: 15
Re: Trojan Alert
« Reply #4 on: January 08, 2008, 04:28:34 AM »

  OMG.. You mean people are still using Internet Explorer.. l-o-l  good old internet newbies...lol
  ( no offense for people at work.) Although you should tell your company to use firefox for security.

  USE Mozilla FIREFOX with the plugins: NOscript and adblock.

 ==============================================================
 If you feel firefox seems slow about loading webpages.. then do this tweak here:
 It was a must do.... Although the latest firefox download may already have these set.
===============================================================

1.Type "about:config" into the address bar and hit return.
Scroll down and look for the following entries:

network.http.pipelining network.http.proxy.pipelining network.http.pipelining.maxrequests

Normally the browser will make one request to a web page at a time. When you enable pipelining it will make several at once, which really speeds up page loading.

2. Alter the entries as follows:

Set "network.http.pipelining" to "true"

Set "network.http.proxy.pipelining" to "true"

Set "network.http.pipelining.maxrequests" to a number like 30.
This means it will make 30 requests at once.

3. Lastly right-click anywhere and select New-> Integer. Name it "nglayout.initialpaint.delay" and set its value to "0".
This value is the amount of time the browser waits before it acts on information it recieves.
-----------------------------------------------------------------------------------------------------------------------------------------------



=========================================================================
Want more tweaks: How bout a small registry tweak for faster webpage requesting:
=========================================================================
* If you don't know how to get to the registry, then you probably shouldn't. You've been warned newbies.
* And be sure your changing the correct entries. I will not be held liable for your silly mistakes.
* Create a system restore point if you feel you may make a silly mistake.
*  Or right down the values that your changing.
=========================================================================
Navigate to this registry entry and change the following settings:

For XP & 2K and VISTA
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\ServiceProvider

For 98, 98SE & ME
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\MSTCP\ServiceProvider

On the right for ALL OS's change these entries: (ALL values are HEXIDECIMAL)

Class - 1
DnsPriority - 1
HostsPriority - 1
LocalPriority - 1
NetbtPriority - 1

MY Default settings for XP Home/ and Vista Home Premium 32bit were: ( In HexDicemal )

Class - 8
DnsPriorty - 7d0
HostPriorty - 1f4
LocalPriority - 1f3
NetbtPriorty - 7d1

You are changing those five to 1. Can't be any simplier than that.
After that, you must re-start your pc for the changes to take effect.

=======================================================================
 * Both of those tweaks made my dial-up a heck of a lot better in loading webpages.
   Those two tweaks are the first thing I do on a new pc. Tested on: XP Home and Vista Home Premium 32bit.
  I know my vista was ungodly slow for loading webpages... I even had to take the dial-up modem from my old xp pc.
  The factory modem was just junk..only connecting at 28800bps..lol .while my xp pc factory modem was pretty good.
 ------------------------------------------------------------------------------------------------------------------------------------------------


hartiberlin

  • Administrator
  • Hero Member
  • *****
  • Posts: 8154
    • free energy research OverUnity.com
Re: Trojan Alert
« Reply #5 on: January 10, 2008, 02:17:47 AM »
Please let me know, which ad block did this ?
Please check the source code of the page and let me know.
As I only have text mode wap access right now, I can not see it myself.
Thanks.

Ergo

  • Sr. Member
  • ****
  • Posts: 280
Re: Trojan Alert
« Reply #6 on: January 10, 2008, 04:05:33 PM »
Sorry. There is no way to see where it gets access to ones system.
I use Symantec and the only clue I get is this warning window.
And right now the trojan is active on my computer. It keeps coming back by itself.
Symantec can't find and desinfect the source and I cannot find it either.
Very annoying.


turbo

  • Guest
Re: Trojan Alert
« Reply #7 on: January 10, 2008, 06:52:58 PM »
people ,this forum is not safe anymore.

LEAVE WHILE YOU CAN IF NOT TOO LATE

make sure you use good anti virus/spyware protection.
i have just recieved this warning and not even on my own computer.
this is verry uncomfortable.





hartiberlin

  • Administrator
  • Hero Member
  • *****
  • Posts: 8154
    • free energy research OverUnity.com
Re: Trojan Alert
« Reply #8 on: January 10, 2008, 10:03:31 PM »
Hi Marco,
I don?t see this trojan horse
as I am back  now at home.
Please let me know,
which forum page exactly tried to load the trojan.
Also this IP adress you listed is not my server,
so it must have been loaded from somewhere else.

I just have scanned my PC and it clean.
Did this trojan only occur with IE or also with Firefox ?
Thanks.
Regards, Stefan.

Grumpy

  • TPU-Elite
  • Hero Member
  • *******
  • Posts: 2247
Re: Trojan Alert
« Reply #9 on: January 10, 2008, 10:17:32 PM »
I noticed the trojan on the "index page" - using IE

Yeah my stuff was out of date and it got me...shame on me.

hartiberlin

  • Administrator
  • Hero Member
  • *****
  • Posts: 8154
    • free energy research OverUnity.com
Re: Trojan Alert
« Reply #10 on: January 10, 2008, 10:25:04 PM »
Hi Grumpy
do you still see it on the Homepage ?
I am using Firefox and all seems to work okay right
now without any Trojan.
Also there is no code in any page to this:
http://88.xxxx address that Marco posted...

Grumpy

  • TPU-Elite
  • Hero Member
  • *******
  • Posts: 2247
Re: Trojan Alert
« Reply #11 on: January 10, 2008, 10:36:32 PM »
Was on a different system when I encountered the trojan. 

My current system is much tougher. 

It may be opportunistic - infecting only the weak systems.

Pirate88179

  • elite_member
  • Hero Member
  • ******
  • Posts: 8366
Re: Trojan Alert
« Reply #12 on: January 10, 2008, 11:45:59 PM »
I picked up a Trojan yesterday off of the index page.  I am using ie and 2 firewalls and 2 active virus scanners.  One picked it up and warned me, and I told it not to run the script, but it got through and it took me like 4 hours to get rid of it.

Trojan: Java.dl.Open Conn.C

It was finally removed with PC Tools.  It hit me as the index page was loading. (which usually only takes like 1 second or so)

Has anyone else seen this one here too?

Bill

Tink

  • Full Member
  • ***
  • Posts: 222
Re: Trojan Alert
« Reply #13 on: January 11, 2008, 12:16:42 AM »
I am using Gutsy Gibbon Ubuntu with Firefox and ClamTk virusscanner, so far so good.
Are there Linux users having problems with this Trojan?

Pirate88179

  • elite_member
  • Hero Member
  • ******
  • Posts: 8366
Re: Trojan Alert
« Reply #14 on: January 11, 2008, 01:05:27 AM »
I have ubuntu here.