View Single Post
  #1  
Old 04-07-10, 05:37 PM
Scxeezy's Avatar
Scxeezy Scxeezy is offline
SpursReport Rookie
 
Join Date: May 2003
Location: Los Angeles
Posts: 248
Unsafe website/virus

I saw another thread on this when I did a search, but it was locked. I too get the site is unsafe message sometimes when I come to SpursReport.com through InternetExplorer. This has happened to me both at home and at work. Since it does not happen all the time, I think it has to do with the ads, which are ever-changing.

Today, however, when I went to SpursReport (@11:07AM PDT), my virus scan popped up a whole lot of warnings about viruses and my browser and whole computer became very slow and unresponsive. Once I closed the browser everything eventually calmed down and later I was able to open SpursReport again and type this message.



Here are excerpts from the logs from my virus protection software (Eset NOD32):

http://91.188.59.52/x/midi.jar
a variant of OSX/Exploit.Smid.B trojan
connection terminated
quarantined
Threat was detected upon access to web by the application: C:\Program Files\Java\jre6\bin\java.exe.

http://91.188.59.52/x/midi.jar » ZIP » AppletX.class
a variant of OSX/Exploit.Smid.B trojan


http://91.188.59.52/x/jar.jar
multiple threats
connection terminated
quarantined
Threat was detected upon access to web by the application: C:\Program Files\Java\jre6\bin\java.exe.

http://91.188.59.52/x/jar.jar » ZIP » myf/y/AppletX.class
Java/TrojanDownloader.OpenStream.NAJ trojan

http://91.188.59.52/x/jar.jar » ZIP » myf/y/LoaderX.class
Java/TrojanDownloader.Agent.NAI trojan



Can somebody in IT please double-check that there is nothing (including, and especially, advertisments) trying to run malicious code on the client computers?

Thanks!
Reply With Quote