Trojan Detected

[PDL]

FYI: Trojan detected by AVG. Trojan IDP.Trojan.49036BEE detected at about 9:26 today 7/11 It was found in Users\myuserid\appdata\local\temp\0.271127730438393
I had just backed out of a post in the lounge - Opinions on a Taurus by Bluegrassrules. Trojan was quarantined

No other websites open at the time

[greif]

It appears the lounge is infested with trojan virus the past several days, logged on this morning started reading bad temper post and Norton antivirus started detecting the trojan virus.

[SimpleWeaponSolutions]

I am getting the same thing this morning from my home computer using Avast, then this one this morning when going to the forum from google.

[VPNAVY]

Interesting - the IP address (89.187.53.203) is located in the Republic of Moldova (Ukraine). Looks like your software prevented a "redirect" from taking place. Also, if you search Google (sorry - that is all I use) with "google results" virus - you will see you aren't alone.

[45Wheelgun]

PDL - thanks for your post. Details like that really help in investigations of this type. We are attempting to track the issues you have reported.

[Exiled Cheesehead]

I too have had Trojans show up on my computer after visiting this forum. It has happened 4 different times over a several week period and has affected the ability of my anti-malware programs to detect, isolate, and get rid of them..

[Jswiney9]

I had one pop up too. was going to make a thread but alas, im not alone

[627 city hunter]

Avast is going crazy on this site saying "threat detected" when I search from google. Also malware defense from Windows is making the same statement. Just a heads up.

[45Wheelgun]

Originally Posted by 627 city hunter

Avast is going crazy on this site saying "threat detected" when I search from google. Also malware defense from Windows is making the same statement. Just a heads up.

I just uninstalled microsoft security essentials and installed avast to see where the issue is coming from. I am unclear why it is hitting on the google search. Coming directly here (to the front page) avast has no issue, searching for the forum and following a link to the main page creates an alert. Clearly this is an avast issue. Either the front page has an issue or it doesn't. Yet avast reports both.

We are working on this issue and have been for some time. On the surface these appear to be false positives. Having said that, we are continuing to both monitor the situation as well as taking proactive steps to ensure that our site is clean.

Those proactive measure include on going scanning from third party providers. At this point we have not found anything we could act upon.

If you have a report, please post it here, but only post if you can provide details. "My virus software complained" doesn't help much. Reports like the original posters are what we need.

Editorial comments along with speculative comments will be deleted.

[PDL]

Originally Posted by 45Wheelgun

PDL - thanks for your post. Details like that really help in investigations of this type. We are attempting to track the issues you have reported.

After 30 years of operating system support for mainframes, I know the more details the better. I try to give you all the info I can.

I have not had a repeat yet. I haven't done any searches on the site, just normal thread viewing.

[SimpleWeaponSolutions]

Received the same message, posted earlier, from malwarebytes again today about blocking a trojan.

[VPNAVY]

Originally Posted by That_Guy

Received the same message, posted earlier, from malwarebytes again today about blocking a trojan.

Do me a favor - check to see you have the latest version of Java installed.

[45Wheelgun]

Originally Posted by That_Guy

Received the same message, posted earlier, from malwarebytes again today about blocking a trojan.

There are several reports. Please post your exact detection message.

[DWalt]

For the last several weeks, I have been getting a virus alert message from my anti-virus software (I have Avast) every time I go into the S&W website. It indicates a rootkit. As the software blocks it, I am not too worried. Has this happened to anyone else? Would probably be good for someone who knows more than I to check it out.

[627 city hunter]

Infection: HTML:Script-inf

This is what avast! is claiming is the problem when searching from google.

I am trying to be descriptive and help.

[DWalt]

This is what AVAST says.


infection Details
URL: [U RL]http://www.pisezmakoons.org/ijr.js?esson[/U RL]...
Process: C:\Program Files (x86)\Mozilla Firefox\f...
Infection: URL:Mal

[Jswiney9]

DSDQILBL.DLL

0.963752039578819 is the source file

c:\users\jb\appdata\local\temp\nsm43eb.tmp\dsdqilbl.dllremoved

this file was reported at 1:48:34 am when I logged on to this site.

[PDL]

For what it's worth. I had Java 6.25(I think it was 25). Updated to 7,5.
Also had some strangeness with Google, not on this site, just normal Google searches. A click on a choice opened another window with an arrow that said, 'Redirect'. Closing that window, the one I was searching in went to the linked page.
Anyway, also found 'Butterfly Search' - malware, had been installed somewhere along the line.
Got rid of that thru Control Program.

Anyway, don't know which chicken hatched which egg. Just thought I'd update with the continuing saga.

[greif]

Norton antivirus blocked (Trojan.Zero access.B) on 7-20-2012, occured while in Lounge reading Ray ban thread.

[SimpleWeaponSolutions]

I am still receiving a warning from Malwarebytes when accessing the forums.

Also if it matters Java installed Version 7 Update 5

http://i.imgur.com/sKYuW.png