Pam Wolf Posted January 20, 2010 Report Share Posted January 20, 2010 Heather, I'd suggest speaking with the hosting company and have them scan the /uploads directory. It may not be something that can be dealt with remotely from the server. FWIW, I don't get any warnings on this site unless I specifically click one of the links. If people are getting it consistently after the first time, I'd look at caching setup on the browser, perhaps they've cached the pages. Deleting all temp internet files might help. Nope, did that and the notification came on after doing it. Cleared cookies etc, Came up after reinitiating the Norton after doing some computer changes. Quote Link to comment Share on other sites More sharing options...
Samantha J Posted January 20, 2010 Report Share Posted January 20, 2010 As this seems related just to Norton, could it be a problem with that?.... i don't get why none of the other anti virus things are picking it up. I am still getting the same threat on here and to be honest it really puts me off being here. I only click on this thread now. It didn't come up for anything in particular on here for me so i don't know what i did to get it to come up to start with, it is always just there and doesn't change. I don't get this with any other site. I hope someone can come up with a reason for it and it can be put right. I miss looking round on here. Quote Link to comment Share on other sites More sharing options...
Brad Posted January 20, 2010 Report Share Posted January 20, 2010 Samantha, I'm using Symantec Antivirus 10.2.0.276 with definition files from yesterday, and I do not get any warnings unless I click the links at the beginning of this thread. And even clicking that, SAV simply detects and deletes any threat. So not a SAV thing, unless there's a common link with older products. What version of Norton are you using, and what is the date on your def files? I'll install the newest Symantec Endpoint Protection product later and see what comes up. ETA. Also, what is everyone else using that gets this? Program version and def files, maybe there is a pattern. Quote Link to comment Share on other sites More sharing options...
NorthfieldNick Posted January 21, 2010 Report Share Posted January 21, 2010 FWIW, I'm using Norton, up-to-date, and Google Chrome, and I've never gotten a warning. Quote Link to comment Share on other sites More sharing options...
Sue R Posted January 21, 2010 Report Share Posted January 21, 2010 I've got Norton and have been getting the warning every time I come on. Plus I'm getting some warnings with gmails. Quote Link to comment Share on other sites More sharing options...
desertranger Posted January 22, 2010 Report Share Posted January 22, 2010 Try doing an online scan if your antivirus offers one. Also try doping a clean up againg, cache, cookies, temp internet files everything then reinstall your anti-virus, update and do a complete system scan. Quote Link to comment Share on other sites More sharing options...
Eileen Stein Posted January 23, 2010 Report Share Posted January 23, 2010 Heather did her own scan of the site and no virus was found. However, we decided to have a more sophisticated scan done by the web host. It is currently in progress, and we are assured that if a virus is found it will be cleared by tomorrow night. I will keep y'all posted. Quote Link to comment Share on other sites More sharing options...
Samantha J Posted January 23, 2010 Report Share Posted January 23, 2010 Samantha, I'm using Symantec Antivirus 10.2.0.276 with definition files from yesterday, and I do not get any warnings unless I click the links at the beginning of this thread. And even clicking that, SAV simply detects and deletes any threat. So not a SAV thing, unless there's a common link with older products. What version of Norton are you using, and what is the date on your def files? I'll install the newest Symantec Endpoint Protection product later and see what comes up. ETA. Also, what is everyone else using that gets this? Program version and def files, maybe there is a pattern. I don't really want to put any other info on here other than it is the newest version of Norton that i am using. Quote Link to comment Share on other sites More sharing options...
Samantha J Posted January 23, 2010 Report Share Posted January 23, 2010 Heather did her own scan of the site and no virus was found. However, we decided to have a more sophisticated scan done by the web host. It is currently in progress, and we are assured that if a virus is found it will be cleared by tomorrow night. I will keep y'all posted. Thank you Eileen. Quote Link to comment Share on other sites More sharing options...
Heather Posted January 23, 2010 Report Share Posted January 23, 2010 Hi, Everyone: Thanks for your patience--the problem (we hope!) has been found and corrected. Here's what our web host had to say: >>There was a lot of encrypted php files on your site so I have removed those. The html files that was in the upload/thumb directory all have viral in them. Because there are so many files and they appeared to be randomly created I have moved them to a safe location on the server. I did some programming with .htaccess to prevent scripts from executing in your uploads directory and cleaned up a lot of php issues on your site. I am running another viral scan and we should be good to go. Could you have somebody with norton re-visit the site? So could you guys who have Norton (I don't) check it out and post what you find to this thread? That way I can respond to the tech. Thanks again! Quote Link to comment Share on other sites More sharing options...
Sue R Posted January 24, 2010 Report Share Posted January 24, 2010 I turned off the computer, restarted, deleted temp internet files and browsing history (not cookies), and am still getting the same message. I have Norton, up to date. Here's a sample of the report, which looks the same as before: Viruses (what's this?) Threats found: 298 Here is a sample: Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page1702.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page2034.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page1278.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page920.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page913.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page123.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page2535.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page282.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page1918.html Threat Name: Trojan.Malscript!html Location: http://bordercollie.org/boards/uploads/thumbs/page193.html Quote Link to comment Share on other sites More sharing options...
Brad Posted January 24, 2010 Report Share Posted January 24, 2010 I have Norton and never got anything, unless I clicked one of the links above. Clicking one now gives me no warning.... Quote Link to comment Share on other sites More sharing options...
Heather Posted January 24, 2010 Report Share Posted January 24, 2010 Sue, I think your virus software must be still working off of a cache. If you click on any of those links, you'll see that those files don't exist anymore--they were the ones that were removed. Quote Link to comment Share on other sites More sharing options...
Heather Posted January 24, 2010 Report Share Posted January 24, 2010 I have Norton and never got anything, unless I clicked one of the links above. Clicking one now gives me no warning.... The tech came to the same conclusion that I did--here's what he wrote to me this morning. I removed those files yeasterday. If you visit the URL it gives you a 404 page not found. I think Norton is caching the attack and can now be ignored. Norton needs to update there cache now. The user should open a ticket with Norton to get them to re-scan the site and update there DB. If you get any other warnings send me the URL so I can check them out. I think we can consider this problem put to bed--please let me know if you have any further concerns about viruses. Thanks! Quote Link to comment Share on other sites More sharing options...
Valhalla Posted January 25, 2010 Report Share Posted January 25, 2010 I got the same message and it also said 298 threats.... and I have not logged in for months. Quote Link to comment Share on other sites More sharing options...
Valhalla Posted January 25, 2010 Report Share Posted January 25, 2010 I am still getting the same threat messages as Sue posted. How do I stop getting Norton to stop working off a cache? Sue, I think your virus software must be still working off of a cache. If you click on any of those links, you'll see that those files don't exist anymore--they were the ones that were removed. Quote Link to comment Share on other sites More sharing options...
Heather Posted January 25, 2010 Report Share Posted January 25, 2010 I am still getting the same threat messages as Sue posted. How do I stop getting Norton to stop working off a cache? Christine, from what my tech wrote, it appears to me that Norton itself has a cache (a cache in the software, not one on your browser). The files that it's flagging as being infected don't exist anymore in that location--if you click on the links, you'll just get a "not found" error. He suggested calling Norton and having them rescan the site and update their database. I'll try to do that, but since I'm not a Norton user I'm not sure how far I'll get with them. But I'll have a go at calling them tomorrow and report. For the record, I'm quite confident that the site is safe and virus-free, but I know that Norton users would feel a lot more comfortable if their software would stop screaming at them! Quote Link to comment Share on other sites More sharing options...
Samantha J Posted January 25, 2010 Report Share Posted January 25, 2010 Christine, from what my tech wrote, it appears to me that Norton itself has a cache (a cache in the software, not one on your browser). The files that it's flagging as being infected don't exist anymore in that location--if you click on the links, you'll just get a "not found" error. He suggested calling Norton and having them rescan the site and update their database. I'll try to do that, but since I'm not a Norton user I'm not sure how far I'll get with them. But I'll have a go at calling them tomorrow and report. For the record, I'm quite confident that the site is safe and virus-free, but I know that Norton users would feel a lot more comfortable if their software would stop screaming at them! Mine is still the same too and i have cleared all i can.(i think) I do trust that the site is okay now but i would feel a lot more comfortable without the site unsafe pop up everytime i come on here. Thank you for trying to put it right with Norton, Heather. Quote Link to comment Share on other sites More sharing options...
Samantha J Posted February 8, 2010 Report Share Posted February 8, 2010 Just thought i would bring this back as i am now getting site is safe. So i presume Norton has cleared something and now it is showing as a safe site again. Quote Link to comment Share on other sites More sharing options...
Sue R Posted February 8, 2010 Report Share Posted February 8, 2010 Glad you posted this because I just looked and, for the first time, I am getting safe, also. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.