Topic: Trojan Horse reported by Avast antivirus today (Read 20956 times)

TJK · « **Reply #25 on:** December 26, 2009, 20:48:36 »

Quote from: Minime on December 26, 2009, 20:44:34

haven't been there for a couple of days, wouldn't dream of going there now, a virus is the last thing I want to deal with today.

batter to be smart yes

TJK · « **Reply #26 on:** December 26, 2009, 20:49:22 »

Quote from: gibby12 on December 26, 2009, 20:47:16

i have the mainsite as my homepage when i got to the enternet i better change it. and last night right before i exited out of ship sim my pc said the homepage had a trojan in it.

P.S i have AVG

change it to the forum site then or something else

gibby12 · « **Reply #27 on:** December 26, 2009, 20:50:22 »

i tried to change it to the forum site bu it takes me straight to the home site $:-\$

Minime · « **Reply #28 on:** December 26, 2009, 20:56:28 »

Quote from: gibby12 on December 26, 2009, 20:50:22

i tried to change it to the forum site bu it takes me straight to the home site $:-\$

just change it to google.com, that should be safe, or any other site.

TJK · « **Reply #29 on:** December 26, 2009, 20:56:45 »

go to the front page of the forum
click on the homepage house on the menu line and those the add or change the home page, those add this as the only homepage and then it fixed
Tore

gibby12 · « **Reply #30 on:** December 26, 2009, 20:58:58 »

k ill give it it try and remember i have vista

TJK · « **Reply #31 on:** December 26, 2009, 21:03:28 »

Quote from: gibby12 on December 26, 2009, 20:58:58

k ill give it it try and remember i have vista

its the same on IE 6 7 and 8 for all os wp, vista and win 7

gibby12 · « **Reply #32 on:** December 26, 2009, 21:06:15 »

Quote from: TJK on December 26, 2009, 21:03:28

its the same on IE 6 7 and 8 for all os wp, vista and win 7

i got it thx tore

TJK · « **Reply #33 on:** December 26, 2009, 21:07:19 »

Quote from: gibby12 on December 26, 2009, 21:06:15

i got it thx tore

my pleasure my friend

Captain Cadet · « **Reply #34 on:** December 27, 2009, 12:43:26 »

The site may have been edited with a other computer and it may had put a vies in and it took a wire for it to be remove.
or someone had open up a e male and went they were editing the site and may have had a vires.
the list is long.

Aad The Pirate · « **Reply #35 on:** December 27, 2009, 14:33:33 »

Ahoy to all,
There's something strange happening.
When I go to the shipsim homepage by using my bookmarks or when I enter the address directly into my browsers address line no strange behaviour at all.
Only when I try to reach the site from a hotlink in this forum I got a virus warning the moment the Shipsim homepage closes (see attachment)
Best regards
Aad

BTW, the hotlink in the preview was for testing only

Stuart2007 · « **Reply #36 on:** December 27, 2009, 20:25:07 »

having just looked at the source 'code' for the homepage, there isn't any references to any third party sites except youtube.

Is it possible to embed nasties in a video?

Other than that the only references are on vsteps server. I can't see anything to get upset about. That said, this is my opinion only and not defacto.

Firestar · « **Reply #37 on:** December 27, 2009, 21:09:34 »

Quote from: Stuart2007 on December 27, 2009, 20:25:07

having just looked at the source 'code' for the homepage, there isn't any references to any third party sites except youtube.

Is it possible to embed nasties in a video?

Other than that the only references are on vsteps server. I can't see anything to get upset about. That said, this is my opinion only and not defacto.

Thank you for doing that Stuart, except something I might add:

VSTEP Shipsim(dot)com uses PHP, which, is NOT visible when looking at the source code. For example, this script, written in PHP:

<?php
echo "Hello everyone who reads this"
?>

When you look at the source code, will only appear as:

Hello everyone who reads this

Which is the same with almost all PHP tags. For all we know, there is much in there we don't know about.

Stuart2007 · « **Reply #38 on:** December 27, 2009, 21:18:22 »

So??? it just means it is server side processing rather than client side.

It is irrelevant what is going on internally in the server- only its output is relevant. And I can see nothing dodgy in it.

There is also talk of third party adverts on the homepage- can you see any, as I can't....?

Firestar · « **Reply #39 on:** December 27, 2009, 21:39:58 »

If someone was able to edit the original Index.php who knows what's happening.

I don't see any either, this is very confusing. If I get the chance I could run Windows in a virtual machine on Linux and see if it installs any viruses...Maybe

Stuart2007 · « **Reply #40 on:** December 27, 2009, 21:50:20 »

But the output is benign. What you see on the screen is what is received from the server; if there were any nasties on the server it would manifest itself in the apparent static html

TerryRussell · « **Reply #41 on:** December 27, 2009, 21:57:34 »

I'd suggest that it is best to stop trying to second guess. For now, follow my advice and don't go to that page.

I find it absolutely astonishing that so many people are "going for a look", having been told very clearly that there might be a problem.

Sheesh....

PS Nothing wrong with any of the Super Packs. I've downloaded and checked each and every one of them.

TerryRussell · « **Reply #42 on:** December 27, 2009, 22:06:09 »

As I have already said all that needs to be said here, i.e. "Don't go to that page until we know what is going on", I will lock this thread.

Any further threads on this subject will be deleted.

Thanks.

Please note the words in the posting guidelines about what is acceptable in the Technical Support area.
http://80.95.161.114/shipsim/forum/index.php/topic,11578.0.html

I will be enforcing that from now onwards, as people are finding it hard to find facts amongst the chatter these days.

Thanks.

TerryRussell · « **Reply #43 on:** December 27, 2009, 23:25:15 »

The problem on www.shipsim.com has now been fixed and you should no longer receive the warnings from your antivirus program.

Sorry for the disruption.

Firestar · « **Reply #44 on:** December 27, 2009, 23:26:19 »

Thanks to whoever fixed it!

Terry, are you allowed to tell us what the actual problem was?

--tractorman-- · « **Reply #45 on:** December 27, 2009, 23:26:32 »

What was the problem? Just out of interest..

Edit, damn you firestar

Stuart2007 · « **Reply #46 on:** December 27, 2009, 23:48:13 »

Hmm... For those of us who have seen the page and possibly have downloaded something sinister, it would not be unreasonable to be told what that might be...

grampsmorris · « **Reply #47 on:** December 28, 2009, 03:03:53 »

Thanks Terry for all the help. I'm sorry it stirred up such a hornets nest, but glad it has been fixed.

Keep the missions coming please.

Gordon

Jayshum · « **Reply #48 on:** December 28, 2009, 03:17:53 »

Out of curiosity, how long was the site infected? My PC has recently been blue-screening, and won't stay on for more than 10 minutes before freezing. I've been trying my hardest to get it working, to no avail. Just wondering if this could be related (as it's only happened very recently)?

Stuart2007 · « **Reply #49 on:** December 28, 2009, 03:20:12 »

My car wouldn't start this morning and my toaster burned my breakfast. could it be related?

Jayshun, sorry. I'm *not* extracting the urine out of you...

I tried to find out earlier on what was wrong- as I also have concerns about my laptop after visiting the site. But like Superman, Terry comes in, saves the world and hops it without so much as a by your leave.

Author Topic: Trojan Horse reported by Avast antivirus today (Read 20956 times)

TJK

TJK

TJK

TJK

TJK

Firestar

Firestar

TerryRussell

TerryRussell

TerryRussell

Firestar