vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB3 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=111)
-   -   Heur / Kaspersky (https://vborg.vbsupport.ru/showthread.php?t=237377)

goshalim 03-03-2010 01:05 PM

Heur / Kaspersky
 
1 Attachment(s)
Can someone please help me with this issue.

quarantined: virus Heur.Trojan.Generic ...etc

This has infected my pc. I am not sure how to get rid of it.. I had to reformat my laptop as well with the same issue only on the laptop it says

Heur.Trojan.Generic (modification) I was trying to do a test check on my laptop and got the same file on it as well. I really do not want to have to do a complete destructive reformat on both systems again.

Is there anyway i can get rid of it and if so how? How can I keep it from getting onto both my desktop and laptops? Kaspersky found both of them when both adware programs I have did not. I have Spy Bouncer and Lavasoft AdWare SE Professional. Please help me.

HELP
Sincerely,

ChopSuey 03-03-2010 01:08 PM

Hi this has nothing to do with vBulletin 3, try installing a free anti-virus program and remove them all.

goshalim 03-03-2010 01:10 PM

Thanks for your reply.
The fact is that i have this message only in my forum and not in any other pages

ChopSuey 03-03-2010 01:22 PM

So you get the messages when viewing your forum? If you do tell your host to check the firewall and make sure its enabled. Along with that ask them to scan your server.

goshalim 03-03-2010 01:27 PM

Thanks !!!

Brandon Sheley 03-03-2010 01:28 PM

is it from a google ads?
disable your advertisers and see if you still get the alert

goshalim 03-03-2010 01:31 PM

I do not have any !!

Speysider 03-03-2010 02:26 PM

The screenshot tells me that you have a virus in your version of Internet Explorer.

It is most likely, that your virus has ended up getting onto your forum server and started infecting people. Do others on your site get the same reports?

goshalim 03-04-2010 04:43 AM

YEs they do !!

but only those they use Kaspersky.

Those that they are using other antivirus they are Ok !!!
I have a second computer with Symantec and everything is Ok !!

Marco van Herwaarden 03-04-2010 08:41 AM

Not ytour PC is infected, but Kaspersky finds something on your website that it marks as a virus.

goshalim 03-08-2010 05:49 AM

Μarco ,

The funny thing is that.Since i have uploaded the original vb files i do not have a problem at all and not any of my users in my country .

The majority of my users from another country they are receiving messages form their antivirus.

Isnt that strange ??

ChopSuey 03-08-2010 09:39 AM

Must be your server. Tell your host.

Marco van Herwaarden 03-08-2010 10:24 AM

My guess is that Kaspersky is giving a (false?) positive on an advertisement on your site. It could be that a different ad is shown to users form different countries and because of this only members from some countries have this problem.

The only real way to find what is going on is to get the page source of the page such a user is viewing when he gets this warning.

goshalim 03-10-2010 07:48 AM

Hi Marco

For every friend here i would like to say this.

It was a virus at the end of the day. My hosting provider contacted his hosting provider whos at the end informed us that he found this ( It appears that malicious code has been uploaded to your account via FTP using a stolen username and password .At this time, I have removed the malicious code from the account.

From our experience with malware of this nature, the account passwords are stolen using viruses/malware located on your local computer. This malware sniffs out passwords used and stored by FTP and other programs. In order to protect against future attack, you will need to run full virus and malware scans on your computers to ensure that they are clean. I recommend using multiple scanners as we have found that some scanners do not detect the malware.
)

Now everyboday is workng without any alarms.

The only thing i want to say is that the default style is not repsonding but the other 5 styles i a have are working perfectly .

What can i do please because o lot of people are used to work on the default

Marco van Herwaarden 03-10-2010 11:03 AM

How is the default style not working? Link?

goshalim 03-10-2010 11:34 AM

When i said is not workin i mean the navabar and the submenus ,the quick links , the usercp battom.

Also when i click on a member , i can go into his profile.

Hope its clear now.

I can give you a link but the forum is open only for members so it would be difficult to understand.

Marco van Herwaarden 03-11-2010 09:49 AM

Sorry but i have no clue based on only your description.

Would make it a lot easier with a link (and if needed a test login) so we can see what is going on.


All times are GMT. The time now is 04:49 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01210 seconds
  • Memory Usage 1,738KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (17)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete