Site Info Open forum for the discussion of the S2K International site and organization. If you like what we're doing, post it here. If you don't, post it here too. Get answers to site related questions.

trojan.exe from s2ki

Old Apr 24, 2010 | 07:22 AM
  #1  
flyingelbowz's Avatar
Thread Starter
Registered User
 
Joined: Jan 2010
Posts: 282
Likes: 0
Default trojan.exe from s2ki

You guys might want to run a solid scan on your comps. My system protection software I use just picked up and blocked a trojan from this site.

exploit.agent.NBA trojan.exe


Be on alert. Can't trust anyone these days.
Reply
Old Apr 24, 2010 | 08:03 AM
  #2  
Harpoon's Avatar
20 Year Member
 
Joined: Mar 2005
Posts: 2,402
Likes: 7
From: Oregon
Default

What system protection software are you using? It could be over-protective. You're not a member on this site, so you get the ads members don't get. Your software could be mid-identifying the ads as trojans.
Reply
Old Apr 25, 2010 | 02:18 AM
  #3  
fatjoe10's Avatar
15 Year Member
 
Joined: Mar 2008
Posts: 1,424
Likes: 95
From: NOVA
Default

I'm a member and my Symantec auto-protect went ballistic after opening a thread. I got the PDF exploit worm. This happened on the 24th as well, and I had no other pages open at the time. Right as I opened that thread there was an alert for a self installer, followed by Norton's warning.
Reply
Old Apr 25, 2010 | 08:08 AM
  #4  
cthree's Avatar
Administrator
20 Year Member
 
Joined: Oct 2000
Posts: 20,274
Likes: 4
From: Toronto, Canada
Default

Do you think somebody could post a link to said thread or shall I guess?

We don't run Windows (anywhere) and we don't allow file uploads to the server except for images and they are checked to ensure they they are actually images. This "alert" is likely due to a link someone posted but without more information I have no hope of finding it.

Thanks
Reply
Old Apr 25, 2010 | 06:29 PM
  #5  
mxt_77's Avatar
Registered User
 
Joined: Jan 2003
Posts: 8,482
Likes: 3
From: Wylie, TX
Default

The first time I tried opening the following thread, I got an alert from Norton:
https://www.s2ki.com/forums/index.php?showtopic=784124

Errors were:
kav4%20[1].html contained threat Trojan.Malscript!html

oh1b920a37v0100f080006r32277624102td06a77ec201l040 9kdf08f2ee317[1].pdf
Bloodhound.PDF!gen

avorp1kay4[1].html
{Trojan.Malscript!html)

I went to the thread a 2nd time and didn't get the error. I suspect it has something to do with the ads, since I'm guessing those are the things that change each time a thread is reloaded.
Reply
Old Apr 25, 2010 | 07:06 PM
  #6  
Steponme's Avatar
Banned
 
Joined: Oct 2009
Posts: 2,825
Likes: 1
Default

My computer also picked up a couple of trojans on this site: PDFJs and JavaDL.
Reply
Old Apr 25, 2010 | 08:01 PM
  #7  
cthree's Avatar
Administrator
20 Year Member
 
Joined: Oct 2000
Posts: 20,274
Likes: 4
From: Toronto, Canada
Default

I'm not actually sure what that is right now. I did see something suspicious but then it was gone.

If you see other threads where this comes up please post them.

Make sure you're 3rd party cookies setting is disable/unchecked/disallowed/whatever. You MUSt accept cookies from s2ki.com but there is a second option to reject third-party cookies.

One possibility is that you are accepting 3rd party cookies and seeing Flash ads, one of which might have issues. I don't know for sure but if you disable 3rd party cookies you browser should reject flash/rich media ads.

I'm only guessing at this point. Let me know if any other threads pop up.
Reply
Old Apr 25, 2010 | 10:17 PM
  #8  
Steponme's Avatar
Banned
 
Joined: Oct 2009
Posts: 2,825
Likes: 1
Default

^ How do I disable 3rd-party cookies? Thanks!

Oh, I'm using Firefox.
Reply
Old Apr 25, 2010 | 11:48 PM
  #9  
modMonkey's Avatar
15 Year Member
 
Joined: Nov 2006
Posts: 4,961
Likes: 1
From: SF Bay Area, CA
Default

http://support.mozilla.com/en-US/kb/Disabl...d+party+cookies
Reply
Old Apr 26, 2010 | 04:44 AM
  #10  
cthree's Avatar
Administrator
20 Year Member
 
Joined: Oct 2000
Posts: 20,274
Likes: 4
From: Toronto, Canada
Default

Originally Posted by Steponme,Apr 26 2010, 02:17 AM
^ How do I disable 3rd-party cookies? Thanks!

Oh, I'm using Firefox.
^ What he said and *normally* it is the default setting (allow cookies from sites you visit, disable cookies from 3rd parties)
Reply


All times are GMT -8. The time now is 03:06 PM.