[HardyGirl]

Someone earlier today left me an IM saying their anti-virus program detected a Trojan coming from this site. (whoever you are, I didn't have you added so all I saw was your email and I don't know who you are... but thanks )

Also, my SpySweeper had been blocking a file called bot.gribokk.com for a few weeks. So, I submitted a ticket to IPS support, and this is what was done:


Hello,

I found the problem, but there were complications removing it..

Basically, it wiped out any topic descriptions.. The topic TITLES are all still in place, but any of the descriptions were lost.. But.. The viral messages won't pop up anymore.

Jason
IPS Support



I asked what the problem was, and got this answer:

Hello,

Honestly.. It was a problem on our end.. And you've apparently had the issue for a while.. Back a month or more ago, there was an issue where someone on a site had been hacked, and the hacker left a file that allowed them access to other SQL databases.. We've removed that file and severely smacked around the user who allowed it to be uploaded in the first place.

Jason
IPS Support


Jason also suggested I give you these sites:

http://free.grisoft.com and http://www.lavasoftusa.com

In case any of you don't have an anti-virus program already. Those ones are free.

The main point of all this is... I just ran my SpySweeper and found a Trojan and a Trojan installer on my computer, which most likely came from this file. So everyone should run their anti-virus programs just to be safe.

[Star]

I'll have Ron run it on ours again.....cause Jesse and Luster can tell you last week when I was trying to post the EWA ppv my computer and the net were NOT getting along period. What should have taken 20 minutes once I had it all proofed and stuff....took 2 hours.

So thanks for the heads up, if you see me wander through this evening, its Ron looking into this. At least someone noticed it. I use a program that looks for "bad stuff" as Kathy calls it when you first boot the computer, and we did a virus scan and adaware scan after I DID get the EWA ppv up and it ran fine, but I've noticed some points is slick as can be....and other times I could go bake a 5 layer cake while waiting.

Thanks J

[Lusterwizard]

Hi HG, it was me that left that message. I was going to tell Paula but since she wasn't on if found your MSN and let you know since you're the board owner. Glad i could bring it to your attention. It only came up yesterday and ive been around here for a bit recently so im not sure if it was from here or not.

[Singin Hobo]

I had it pop up every now and then since I joined but thought nothing of it.

Oh joy I have to run a virus scan on 4 machines

You don't happen to have the name of the trojan lying about as that would be of great help.

[Nash]

I havent seen anything popup on mine, and I have Vista's Windows Defender thing, Spybot Search and Destroy, and Avira AntiVir. None of them popped up a virus. It couldve been while I was away reconstructing my other site. *shrugs*

[Lusterwizard]

i dont have the name of it sorry, i just got rid of it really quickly. I hadnt had it before a few days ago, so its strange. I was using AVG Free btw

[HardyGirl]

The file that SpySweeper kept blocking is bot.gribokk.com and the files my scan found are trojan.gen and trojan-dropper.gen. Hope that helps.

[Star]

I just read this to Ron (hey you got to get us in the same space at the same time) but thanks girl (and i hope you thanked the guys at IPS Support.......and Luster is one of my boys (who is as nice as can be, and he's great especially in pointing out stuff like this).

Ron said he'll run a virus scan again cause we went a bit sideways THIS week on tuesday or wednesday and i was getting pissed off. Course didnt help I had my migraine at that moment either.

[Star]

Just an update J......

Ron ran a virus scan last night....found 6, it deleted then, then today ran it again, and it found 3, cleaned up. Plus I just ran Previx wihich hanldes adaawre and spyware.

I just wanted to let you all know just in case your computer goes funky. WE KNOW we got one virus from the ESPN site, not sure bout the other two. But if you have virus scan and/or adaware scan available, I highly recommend running it over night tonight. The one virus found trhough ESPN....we talked a reputable site, just like I feel PWC is reputable site, but there have been some int he last couple days that are doozies.