Jump to content
BC Boards
Sam'smom

Norton virus alert warning???

Recommended Posts

Heather, I'd suggest speaking with the hosting company and have them scan the /uploads directory. It may not be something that can be dealt with remotely from the server.

 

FWIW, I don't get any warnings on this site unless I specifically click one of the links. If people are getting it consistently after the first time, I'd look at caching setup on the browser, perhaps they've cached the pages.

Deleting all temp internet files might help.

 

 

Nope, did that and the notification came on after doing it. Cleared cookies etc, Came up after reinitiating the Norton after doing some computer changes.

Share this post


Link to post
Share on other sites

As this seems related just to Norton, could it be a problem with that?.... i don't get why none of the other anti virus things are picking it up.

 

I am still getting the same threat on here and to be honest it really puts me off being here. I only click on this thread now.

 

It didn't come up for anything in particular on here for me so i don't know what i did to get it to come up to start with, it is always just there and doesn't change. I don't get this with any other site.

 

I hope someone can come up with a reason for it and it can be put right. I miss looking round on here.

Share this post


Link to post
Share on other sites

Samantha, I'm using Symantec Antivirus 10.2.0.276 with definition files from yesterday, and I do not get any warnings unless I click the links at the beginning of this thread. And even clicking that, SAV simply detects and deletes any threat. So not a SAV thing, unless there's a common link with older products. What version of Norton are you using, and what is the date on your def files?

I'll install the newest Symantec Endpoint Protection product later and see what comes up.

 

ETA. Also, what is everyone else using that gets this? Program version and def files, maybe there is a pattern.

Share this post


Link to post
Share on other sites

I've got Norton and have been getting the warning every time I come on. Plus I'm getting some warnings with gmails.

Share this post


Link to post
Share on other sites

Try doing an online scan if your antivirus offers one. Also try doping a clean up againg, cache, cookies, temp internet files everything then reinstall your anti-virus, update and do a complete system scan.

Share this post


Link to post
Share on other sites

Heather did her own scan of the site and no virus was found. However, we decided to have a more sophisticated scan done by the web host. It is currently in progress, and we are assured that if a virus is found it will be cleared by tomorrow night. I will keep y'all posted.

Share this post


Link to post
Share on other sites
Samantha, I'm using Symantec Antivirus 10.2.0.276 with definition files from yesterday, and I do not get any warnings unless I click the links at the beginning of this thread. And even clicking that, SAV simply detects and deletes any threat. So not a SAV thing, unless there's a common link with older products. What version of Norton are you using, and what is the date on your def files?

I'll install the newest Symantec Endpoint Protection product later and see what comes up.

 

ETA. Also, what is everyone else using that gets this? Program version and def files, maybe there is a pattern.

 

 

I don't really want to put any other info on here other than it is the newest version of Norton that i am using. :rolleyes:

Share this post


Link to post
Share on other sites
Heather did her own scan of the site and no virus was found. However, we decided to have a more sophisticated scan done by the web host. It is currently in progress, and we are assured that if a virus is found it will be cleared by tomorrow night. I will keep y'all posted.

 

 

Thank you Eileen. :rolleyes:

Share this post


Link to post
Share on other sites

Hi, Everyone:

 

Thanks for your patience--the problem (we hope!) has been found and corrected. Here's what our web host had to say:

 

>>There was a lot of encrypted php files on your site so I have removed those. The html files that was in the upload/thumb directory all have viral in them. Because there are so many files and they appeared to be randomly created I have moved them to a safe location on the server. I did some programming with .htaccess to prevent scripts from executing in your uploads directory and cleaned up a lot of php issues on your site.

 

I am running another viral scan and we should be good to go. Could you have somebody with norton re-visit the site?

 

So could you guys who have Norton (I don't) check it out and post what you find to this thread? That way I can respond to the tech. Thanks again!

Share this post


Link to post
Share on other sites

I turned off the computer, restarted, deleted temp internet files and browsing history (not cookies), and am still getting the same message. I have Norton, up to date.

 

Here's a sample of the report, which looks the same as before:

 

Viruses (what's this?)

Threats found: 298

Here is a sample:

 

Threat Name: Trojan.Malscript!html

Location: http://bordercollie.org/boards/uploads/thumbs/page1702.html

 

 

 

Threat Name: Trojan.Malscript!html

Location: http://bordercollie.org/boards/uploads/thumbs/page2034.html

 

 

 

Threat Name: Trojan.Malscript!html

Location: http://bordercollie.org/boards/uploads/thumbs/page1278.html

 

 

 

Threat Name: Trojan.Malscript!html

Location: http://bordercollie.org/boards/uploads/thumbs/page920.html

 

 

 

Threat Name: Trojan.Malscript!html

Location: http://bordercollie.org/boards/uploads/thumbs/page913.html

 

 

 

Threat Name: Trojan.Malscript!html

Location: http://bordercollie.org/boards/uploads/thumbs/page123.html

 

 

 

Threat Name: Trojan.Malscript!html

Location: http://bordercollie.org/boards/uploads/thumbs/page2535.html

 

 

 

Threat Name: Trojan.Malscript!html

Location: http://bordercollie.org/boards/uploads/thumbs/page282.html

 

 

 

Threat Name: Trojan.Malscript!html

Location: http://bordercollie.org/boards/uploads/thumbs/page1918.html

 

 

 

Threat Name: Trojan.Malscript!html

Location: http://bordercollie.org/boards/uploads/thumbs/page193.html

Share this post


Link to post
Share on other sites

I have Norton and never got anything, unless I clicked one of the links above. Clicking one now gives me no warning....

Share this post


Link to post
Share on other sites

Sue, I think your virus software must be still working off of a cache. If you click on any of those links, you'll see that those files don't exist anymore--they were the ones that were removed.

Share this post


Link to post
Share on other sites
I have Norton and never got anything, unless I clicked one of the links above. Clicking one now gives me no warning....

 

The tech came to the same conclusion that I did--here's what he wrote to me this morning.

 

I removed those files yeasterday. If you visit the URL it gives you a 404 page not found. I think Norton is caching the attack and can now be ignored. Norton needs to update there cache now. The user should open a ticket with Norton to get them to re-scan the site and update there DB. If you get any other warnings send me the URL so I can check them out.

 

I think we can consider this problem put to bed--please let me know if you have any further concerns about viruses. Thanks!

Share this post


Link to post
Share on other sites

I am still getting the same threat messages as Sue posted. How do I stop getting Norton to stop working off a cache?

 

 

Sue, I think your virus software must be still working off of a cache. If you click on any of those links, you'll see that those files don't exist anymore--they were the ones that were removed.

Share this post


Link to post
Share on other sites
I am still getting the same threat messages as Sue posted. How do I stop getting Norton to stop working off a cache?

 

Christine, from what my tech wrote, it appears to me that Norton itself has a cache (a cache in the software, not one on your browser). The files that it's flagging as being infected don't exist anymore in that location--if you click on the links, you'll just get a "not found" error. He suggested calling Norton and having them rescan the site and update their database. I'll try to do that, but since I'm not a Norton user I'm not sure how far I'll get with them. But I'll have a go at calling them tomorrow and report. For the record, I'm quite confident that the site is safe and virus-free, but I know that Norton users would feel a lot more comfortable if their software would stop screaming at them!

Share this post


Link to post
Share on other sites
Christine, from what my tech wrote, it appears to me that Norton itself has a cache (a cache in the software, not one on your browser). The files that it's flagging as being infected don't exist anymore in that location--if you click on the links, you'll just get a "not found" error. He suggested calling Norton and having them rescan the site and update their database. I'll try to do that, but since I'm not a Norton user I'm not sure how far I'll get with them. But I'll have a go at calling them tomorrow and report. For the record, I'm quite confident that the site is safe and virus-free, but I know that Norton users would feel a lot more comfortable if their software would stop screaming at them!

 

 

Mine is still the same too and i have cleared all i can.(i think)

 

 

I do trust that the site is okay now but i would feel a lot more comfortable without the site unsafe pop up everytime i come on here. Thank you for trying to put it right with Norton, Heather. :rolleyes:

Share this post


Link to post
Share on other sites

Just thought i would bring this back as i am now getting site is safe. So i presume Norton has cleared something and now it is showing as a safe site again. :rolleyes:

Share this post


Link to post
Share on other sites

Glad you posted this because I just looked and, for the first time, I am getting safe, also.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...