malware attack through the orchid board?

[RosieC]

I would also ask... has anyone had this happen again THIS week.

It is possible it has gone, I only got it one evening and the next morning. I will check with Hubby about reports of it again on our work server from arround now as I have not updated Java on this machine.

[mormodes]

Originally Posted by RosieC

I would also ask... has anyone had this happen again THIS week.

It is possible it has gone, I only got it one evening and the next morning. I will check with Hubby about reports of it again on our work server from arround now as I have not updated Java on this machine.

Happened just a few seconds ago when I entered this site. Short, fleeting screen before OB loads, too short even to read much less screen capture. Then antiviral software cleans it up. I have the latest Java update too.

Bye

[RosieC]

Mormodes, do you enter the site on the home page, or do you have a link straight to somewhere in the forums or somewhere else on the site... if you go in at anywhere other than www.orchidboard.com can you send Marty the link you enter the site through?

Also, do you have a report/log from your antivirus? If so can you send that to Marty as well.

[Oscarman]

Hurray for Windows! That was my pro windows based computers cheer! Now don't everyone get all uptight about the Mac vs. Windows debate, I am not trying to start one and please don't you.

I had many virus and Trojan warnings with the past few visits to the OB. I use Google.ca extensively, browsing with IE8 and use Shaw Secure a security suite provided free by my ISP. The software is actually developed by F-Secure and licensed to Shaw.

Anyway, I cleared my browsing history, temporary internet files and cookies and all is fine now. No further issues.

Maybe that will help some.

[Triffid]

Originally Posted by Oscarman

Hurray for Windows! That was my pro windows based computers cheer! Now don't everyone get all uptight about the Mac vs. Windows debate, I am not trying to start one and please don't you.

No I'm not going to start a "Which OS is Best" debate.

I would just like to remind everyone that there is no OS that is 100% secure!

Only by making sure you have your root password set up and that it is suitably complex will you help make your home PC more secure. Even then there are ways for those who know how to get round it. Making sure your anti-virus software is up to date also helps.

I have had no virus problems from this site. I don't use Windows, or Mac. I use Linux, but I will state categorically that even Linux machines can become victim to malicious programmers.

I say, use what you are happy with. Just be aware that if it was made by a human it can be broken by one!

[prem]

I just had it happen again to me moments ago. I followed the link from my e-mail client:

malware attack through the orchid board? - Page 5 - Orchid Board - Most Complete Orchid Forum on the web !

and got a blank page with some garbled php code errors on the top of the page, no ads of any type and an attempt to install plug-ins on my browser which didn't succeed because I updated my Java.

---Prem

[Marty]

damn...I can't duplicate this...can somone post the actual message/garbled php? or a screen capture?

[RosieC]

I've had something like that... I previously PM'd you Marty with some weird code I got instead of the page I was expecting... but I hadn't associated it with this Trojon because the only time I've had a warning from the virus checker the page had NOT done this but had drawn correctly.

Still not sure if the one's I've seen ARE related, but if I get them again I will send them to you again (I have had more more of that in the past few days... but I go back to the previous page and try again and it works fine).

[prem]

Marty, by the time I tried to get the screen capture, it had refreshed again to a completely blank page...I was trying to get either a screen cap or a view of the source code of the page. It is very intermittent...I'd say once every 20 or 30 tries.

It doesn't appear to be limited to any particular page, either...sometimes a partial page will load with garbled text within one of the center <div>s, sometimes it's a blank page with only garbled text.

q: can you ftp down an image of all your phpBB files and do a diff against the original install? This would help ensure that someone hasn't hacked the site and added some sleeper code that runs very intermittently. It might not show up as a virus with a scanner, as a simple header change to a different site may pass the scan.

---Prem

[Oscarman]

Marty this is all I can find out from my security software about what was blocked on my computer. I am not having any further issues.