trojan horse

[mrspepsisi]

When I click on FSI to open it or look at a post I get a Trojan Horse blocked by Avast. Any ideas?

FSICREW.info/forums/java/menu.js

js:Redirector-MX[Trj]

Thats the info I have.

[deadlywill]

..not getting that here - am trialing Webroot Secure anywhere anti virus.

There is some info here - http://forum.avast.com/index.php?action=printpage;topic=90296.0

http://blog.sucuri.net/2011/09/mass-spam-infection-from-wplinksforwork-com-50k-wordpress-sites-hacked.html

One for the admin...

[bazzer]

Got the warning here also, must have been one on site and Admin shut down till they fixed it ,ALL CLEAR NOW

[zola]

I'm getting it with internet explorer but not with chrome.
mine is using microsoft security essentials:-

Trojan:JS/BlacoleRef.N

Alert Level Severe

[zola]

Might also add that MSE cleans it up without a problem.

[mrspepsisi]

I'm still getting it too, I also am using Internet Explorer.

I didn't put this before.

Process file://C:\ProgramFiles\InternetExplorer.exe

[bazzer]

I'm getting it with internet explorer but not with chrome.
mine is using microsoft security essentials:-

Trojan:JS/BlacoleRef.N

Alert Level Severe

Java is having probs ,iv had loads of trojans lately .not a techie what is java for and do I need it ,can I uninstall and use something different

Im on MSE and constantly update it ,but still keep having to do a full Scan every day now :x
PS - using Firefox ,for some reason I cant log onto v/bulletin sites with chrome

[zola]

Java is having probs ,iv had loads of trojans lately .not a techie what is java for and do I need it ,can I uninstall and use something different

Im on MSE and constantly update it ,but still keep having to do a full Scan every day now :x
PS - using Firefox ,for some reason I cant log onto v/bulletin sites with chrome

Bazzer, does MSE tell you that you haven't done a scan recently when you know you did one yesterday? If so I have that too, I literally reinstalled MSE today and will await tomorrow and see if it asks.

[zola]

As for Java, many programs use it to run games, show pictures etc. I say programs, should say sites, java IS a program

[bazzer]

,and constantly hit the update on Bazzer, does MSE tell you that you haven't done a scan recently when you know you did one yesterday? If so I have that too, I literally reinstalled MSE today and will await tomorrow and see if it asks.
Yes Zola ,I get that ,Please keep us updated how you get on ,what iv read through google these can be nasty trojans that are very difficult to remove even for MSE ,I run a full scan everyday now and hit the update regular.
Deaders or Mike might have a fix :lol:

[zola]

No probs, like Mrspepsisi said, MSE clears the prob ok (until you click something again), hers being Avast.
I didn't or don't have any issues with MSE. least if it flags something it's working, just pisses me off that it keeps wanting to scan and I have no idea why. No one seems to report it either, so at the moment I'm not finding info on it as to why.

[bazzer]

No probs, like Mrspepsisi said, MSE clears the prob ok (until you click something again), hers being Avast.
I didn't or don't have any issues with MSE. least if it flags something it's working, just pisses me off that it keeps wanting to scan and I have no idea why. No one seems to report it either, so at the moment I'm not finding info on it as to why.

Ye same here ,I like MSE ,I went onto their tekhelp page yesterday and was talking to on of their IT guys,He passed me on to another guy ,he downloaded a scanner then ran it ,showed me a page that said I had over 1000 errors ,to clear the errors they wanted me to subscibe for a year at £100 ODD QUID or 5 years for think was £300 hahaha ,dont know where he downloaded the scanner on my pc I cant find it Felt all they wanted was money ,so no further forward on the issue

[zola]

Don't blame you, I'd rather go pro with advanced system care, they have been running for years (first knew them when they were just iolo or something like that. Used to edit the registry and delete a date key then reinstall it to keep the thing running. It's got a lot more sophisticated nowadays!):lol:

If I find anything out I'll pass it on, in the meantime I'll log on to FSI with Chrome.

[bazzer]

Ok cheers Zola

[roller coaster]

I am on IE. Norton anti-virus records it as a web attack and blocks it. First time i have seen it though.

[manUdave]

Zola, bazz & Mrs P watching porn again;););)

[jake robinson]

http://www.malwarebytes.org/ will get rid of it. If you use their link make sure you decline the toolbar option that cnet give you I think, been a while since I downloaded it.
It will be a file buried somewhere but that should pick it up.

[deadlywill]

Java is having probs ,iv had loads of trojans lately .not a techie what is java for and do I need it ,can I uninstall and use something different

Here's an example. Say i use the New York Times to check my share prices - they may have a little window in the corner with the scrolling stock prices and that may use Java but if i go to the Los Angeles Times website they use Flash for their little window. If i really only want to get my stock prices from the New York Times then i would have to have Java installed. If your happy to use the LA Times site for your stock prices then you don't need it. Some sites may use it for weather news etc. Mostly nowadays it's flash. Might need to check if the chatroom needs Java though not sure.


Check your plugins are up to date in -

Firefox - http://www.mozilla.org/en-US/plugincheck/
Chrome - chrome://plugins (Chrome should update automatically)

I went the whole of last year without Java Baz, No bother. You can still play games and watch Youtube as they converted to Flash years ago. More relevant on mobile phones now i think.

However if you don't want to uninstall it you can just disable Java in your browser to see what happens - In Firefox go to Tools-Add-ons and select plugins. Scroll and Disable any Java plugins. Use the above Chrome link and just click enable/disable(Adam Ayres, Begbie etc:D);)

[zola]

http://www.malwarebytes.org/ will get rid of it. If you use their link make sure you decline the toolbar option that cnet give you I think, been a while since I downloaded it.
It will be a file buried somewhere but that should pick it up.

Its not on the computer Jake, its from FSI, the Anti Virus programs are picking it up when you log into here. Also I have Malwarebytes and that's clear. I don't understand why IE gets picked up on but not Chrome though, after all it's the same Anti Virus program when either runs.:-/

[bazzer]

Thanks Deadly I,ll give that a go - as for these two -Tools-Add-ons and select plugins. Scroll and Disable any Java plugins. Use the above Chrome link and just click enable/disable(Adam Ayres, Begbie etc,seemingly only Admin can delete TOOLS :lol:

[Begbie]

Use the above Chrome link and just click enable/disable(Adam Ayres, Begbie etc:D);)Are you encouraging people to disable me?

[deadlywill]

Are you encouraging people to disable me?

Incorrect.

I'm saying that you are in fact disabled (most likely by beer)8)

[deadlywill]

seemingly only admin can delete tools :lol:

..How the fuck am i still on here then lol?

[scudd]

the trojan warning was probably a false positive.. we've turned off the hover menu for the time being!

[jake robinson]

Its not on the computer Jake, its from FSI, the Anti Virus programs are picking it up when you log into here. Also I have Malwarebytes and that's clear. I don't understand why IE gets picked up on but not Chrome though, after all it's the same Anti Virus program when either runs.:-/
That will teach me for not reading the whole story.Woops.

[stenelly]

when trying to log on using chrome you get the message below ??? what the fucks wrong lads.


Warning: Something's Not Right Here!
www.fsicrew.info contains content from www.footballstreaming.info, a site known to distribute malware. Your computer might catch a virus if you visit this site.
Google has found that malicious software may be installed onto your computer if you proceed. If you've visited this site in the past or you trust this site, it's possible that it has just recently been compromised by a hacker. You should not proceed. Why not try again tomorrow or go somewhere else?
We have already notified www.footballstreaming.info that we found malware on the site. For more about the problems found on www.footballstreaming.info, visit the Google Safe Browsing diagnostic page.

If you understand that visiting this site may harm your computer, proceed anyway.

[fishtoast]

Dont get anything with chrome which is all i use FSI on,works perfect

[stenelly]

when clicking this http://www.footballstreaming.info/ i get warning shown above [im using Microsoft security essentials]

[fishtoast]

when clicking this http://www.footballstreaming.info/ i get warning shown above [im using Microsoft security essentials]I get that warning though via chrome-infact just front page,nothing on any part of forum etc-[wasnt taking notice lol]-it must be something on the front page

[stenelly]

no problem using IE

doing full malware scan now

[Robenhood]

I am on Mozilla firefox. Norton anti-virus records it as a web attack and blocks it. First time i have seen it though.
:x:x:x

[derbyhd]

same to me warning on Google Chrome !

[Robenhood]

Begbie we hope that you can solve this prob as fast as you can to keep the great FSI running:(:(

[Begbie]

It is being looked into. There is absolutely no reason for it to be happening. Nothing has changed.

[Robenhood]

It is being looked into. There is absolutely no reason for it to be happening. Nothing has changed.
Begbie...this link is infected now...this will decrease the number of visitor
www.footballstreaming.info/streams/todays-links/ (http://www.fsicrew.info/forums/www.footballstreaming.info/streams/todays-links/)

[zola]

Well I'm completely lost, others getting it and I'm ok now.:-/

[mrspepsisi]

I'm ok too, no error here now.

[Sharky]

Aye, I get the same warning.

[Robenhood]

I'm ok too, no error here now.
Ok friend..try to ignore this warning and every thing will be ok...i did that and it worked normaly

[bazzer]

Iv had to use the FSI link on ICE SPORTZ to get here :x Google Warning and they wont connect to here Thats on FF and Chrome

I scanned my pc this morning after being on here 5 trojans were found ,Google are saying trojans are on site WTF

[fishtoast]

Iv had to use the FSI link on ICE SPORTZ to get here Google Warning and they wont connect to here Thats on FF and Chrome

Always save the forum part baz to get here :lol: [not the front page]

[stenelly]

when trying to log on using chrome you get the message below ??? what the fucks wrong lads.


Warning: Something's Not Right Here!
www.fsicrew.info contains content from www.footballstreaming.info, a site known to distribute malware. Your computer might catch a virus if you visit this site.
Google has found that malicious software may be installed onto your computer if you proceed. If you've visited this site in the past or you trust this site, it's possible that it has just recently been compromised by a hacker. You should not proceed. Why not try again tomorrow or go somewhere else?
We have already notified www.footballstreaming.info that we found malware on the site. For more about the problems found on www.footballstreaming.info, visit the Google Safe Browsing diagnostic page.

If you understand that visiting this site may harm your computer, proceed anyway.

Iv had to use the FSI link on ICE SPORTZ to get here :x Google Warning and they wont connect to here Thats on FF and Chrome
when you get the red warning page click proceed anyway

[stenelly]

Safe Browsing
Diagnostic page for footballstreaming.info

What is the current listing status for footballstreaming.info?
Site is listed as suspicious - visiting this website may harm your computer.

Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 2 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2011-12-16, and the last time suspicious content was found on this site was on 2011-12-16.
Malicious software includes 2 trojan(s), 2 exploit(s). Successful infection resulted in an average of 9 new process(es) on the target machine.

Malicious software is hosted on 1 domain(s), including nl.ai/.

This site was hosted on 1 network(s) including AS16265 (LEASEWEB).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, footballstreaming.info did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:
Return to the previous page.
If you are the owner of this website, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Centre.

[bazzer]

when you get the red warning page click proceed anyway

Cant they have stopped the link working on both FF and Chrome

[stenelly]

Cant they have stopped the link working on both FF and Chrome

see post above yours

[bazzer]

Ye been to that page also no FSI link works

[stenelly]

admin are on the case and be assured there is no problem with FSI. the warnings are being dealt with. the warning page will still appear until Google are 100% assured all risks have been removed/explained.

FSI service resumed as normal. http://www.fsicrew.info/forums/images/icons/icon14.gif

[stenelly]

Ye been to that page also no FSI link works

this is only a precautionary measure.

[Allochtony]

Missed that.

I logged on to FSi on wednesday on a friends computer, using an NL version of chroom, I hope it wasn't that?

[zola]

For Bazzer, No scan asked for with MSE today (thats a first this week), will let you know if tomorrow is the same.

[bazzer]

For Bazzer, No scan asked for with MSE today (thats a first this week), will let you know if tomorrow is the same.

Cheers Zola

[fishtoast]

Front page is 100% working/normal today for me :lol: no warnings etc :lol: I hardly ever look at the front page though till people said the problem here

[stenelly]

admin have solved the glitch in FSI software. as said last night, back to normal service.

[deadlywill]

admin have solved the glitch in FSI software

...yeah i heard that when one of the admin was reaching for his second pie, he knocked his beer over spilling it into the server thus killing said trojan immediately. We know this to be true from past experience - beer fixes everything...

For the record - i haven't had a single warning on either chrome or ffox??? Running Webroot Secure Anywhere Complete...

[manUdave]

...yeah i heard that when one of the admin was reaching for his second pie, he knocked his beer over spilling it into the server thus killing said trojan immediately. We know this to be true from past experience - beer fixes everything...

For the record - i haven't had a single warning on either chrome or ffox??? Running Webroot Secure Anywhere Complete...

Me nether on symantec. But mybe my computers hammered with trojans & I
don't know:lol::lol::lol::lol::lol::lol:

[Allochtony]

I had no probs, with two computers, does that help?

[Robenhood]

admin have solved the glitch in FSI software. as said last night, back to normal service.
Thanks for Mr admin 4 his nice work

[Sharky]

Good work Stenelly. ;).

[zola]

For Bazzer, been a week now and no problems with MSE if your still having issues, try reinstalling it, its obviously worked for me.

[bazzer]

For Bazzer, been a week now and no problems with MSE if your still having issues, try reinstalling it, its obviously worked for me.

Cheers Zola, everything has been good here since Admin fixed the issue
MSE was doing its job thats good enough for me 8)

[stenelly]

when trying to log on using chrome you get the message below ??? what the fucks wrong lads.


Warning: Something's Not Right Here!
www.fsicrew.info contains content from www.footballstreaming.info, a site known to distribute malware. Your computer might catch a virus if you visit this site.
Google has found that malicious software may be installed onto your computer if you proceed. If you've visited this site in the past or you trust this site, it's possible that it has just recently been compromised by a hacker. You should not proceed. Why not try again tomorrow or go somewhere else?
We have already notified www.footballstreaming.info that we found malware on the site. For more about the problems found on www.footballstreaming.info, visit the Google Safe Browsing diagnostic page.

If you understand that visiting this site may harm your computer, proceed anyway.

when you get the red warning page click proceed anyway

Safe Browsing
Diagnostic page for footballstreaming.info

What is the current listing status for footballstreaming.info?
Site is listed as suspicious - visiting this website may harm your computer.

Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?
Of the 2 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2011-12-16, and the last time suspicious content was found on this site was on 2011-12-16.
Malicious software includes 2 trojan(s), 2 exploit(s). Successful infection resulted in an average of 9 new process(es) on the target machine.

Malicious software is hosted on 1 domain(s), including nl.ai/.

This site was hosted on 1 network(s) including AS16265 (LEASEWEB).

Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, footballstreaming.info did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?
No, this site has not hosted malicious software over the past 90 days.

How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:
Return to the previous page.
If you are the owner of this website, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Centre.

sorry people, but we seem to have the same problem back again. admin are aware and are sorting it as i text.

edit. sorted out. ok using chrome now.