SilverECR33 Posted February 25, 2007 Share Posted February 25, 2007 Hi admins, You have a trojan in ur counter on the main page, Technical Details below. Time Module Object Name Threat Action User Information 2/25/2007 11:15:55 AM IMON file http://bafumba.com/counter/dsb/dsb.exe a variant of Win32/TrojanDownloader.Tiny.NCA trojan cheers, Dale Holmes Network Engineer. Link to comment https://www.sau.com.au/forums/topic/158628-trojan/ Share on other sites More sharing options...
SilverECR33 Posted February 25, 2007 Author Share Posted February 25, 2007 Oh yea, if you need anymore info, It was detected By NOD32. if you have anything else you may not have detected it. If you need more info, Pm me and i can send you a copy of the Log file. Thanks. goodluck. Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2932554 Share on other sites More sharing options...
Revhead Posted February 25, 2007 Share Posted February 25, 2007 Thanks Dale, this has been passed onto the relevant people Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2932616 Share on other sites More sharing options...
PranK Posted February 25, 2007 Share Posted February 25, 2007 Should be all good now. Will be upgrading to IPB 2.2 soon which will resolve a lot of issues. Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2933284 Share on other sites More sharing options...
Jago Posted February 25, 2007 Share Posted February 25, 2007 i think there's some other crap on the forums pages too? Can't recall their names, but i was getting two different ones. I need to block active X and java to use the forums without getting it. Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2933428 Share on other sites More sharing options...
MKDR33 Posted February 25, 2007 Share Posted February 25, 2007 my NAV (norton antivirus) keeps on picking up Bloodhound.Exploit.96 which has a link to http://bafumba.com/counter/dsb/dsb.exe Downloader aswell, everytime i login to SAU.. and now i cant even upload on SAU or anywhere else for that matter... anyone got a removal tool for this? or manual instructions? Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2933435 Share on other sites More sharing options...
ix9 Posted February 25, 2007 Share Posted February 25, 2007 I was getting it while surfing last night around 11pm Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2934166 Share on other sites More sharing options...
ferni Posted February 26, 2007 Share Posted February 26, 2007 yeah, use firefox Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2934528 Share on other sites More sharing options...
Jago Posted February 26, 2007 Share Posted February 26, 2007 i was getting sysinfo.exe and 3156340348143.exe Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2935328 Share on other sites More sharing options...
R31Nismoid Posted February 26, 2007 Share Posted February 26, 2007 Same as above Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2935606 Share on other sites More sharing options...
Ronin 09 Posted February 26, 2007 Share Posted February 26, 2007 i was getting sysinfo.exe and 3156340348143.exe still here Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2935821 Share on other sites More sharing options...
MKDR33 Posted February 28, 2007 Share Posted February 28, 2007 i am still getting this people.. only now its not on the main page as it was in the pic shown below, but its on other pages on SAU.. Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2941089 Share on other sites More sharing options...
Naife Posted March 1, 2007 Share Posted March 1, 2007 just opened the SA section and the virus alert went off. files that were infected were index[8].htm VBS/Psyme trojan and index[9].htm JS/Exploit-BO.gen Trojan. was picked up by VET. Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2944990 Share on other sites More sharing options...
PranK Posted March 1, 2007 Share Posted March 1, 2007 f**k it... Ok... I need to get the updates done. Its coming through a hole in one of our modules... Sorry guys, I am trying to stop it. Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2945730 Share on other sites More sharing options...
R34 Posted March 3, 2007 Share Posted March 3, 2007 Yep Last two days get trojan virus alerts when opening SAU Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2950442 Share on other sites More sharing options...
subzeroR33 Posted March 3, 2007 Share Posted March 3, 2007 Yeah i keep getting the bloodhound exploit 96 when opening a topic. Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2950477 Share on other sites More sharing options...
Yidz Posted March 5, 2007 Share Posted March 5, 2007 I've been getting a few of them too. What's the best way to clear them?? Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2953516 Share on other sites More sharing options...
NewKleer Posted March 5, 2007 Share Posted March 5, 2007 dont visit SAU till its fixed (subscribe to this topic perhaps) as for clearing them, arent they caught by your anti-virus? you can always try boot in safe mode and delete them from wherever they are (c:\sysinfo.exe) and delete any references to them in startup (check msconfig from run prompt) Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2953544 Share on other sites More sharing options...
SilverECR33 Posted March 5, 2007 Author Share Posted March 5, 2007 looks like a few of you have it already in your computer. MKDR33 that shot shows you the file is located in your Temp files. Norton aint very good and stopping them, you will need to manually remove them if you can in safe mode. - recommend NOD32 ftw! Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2953692 Share on other sites More sharing options...
evil_weevil Posted March 5, 2007 Share Posted March 5, 2007 ouch - everytime I open NSW section only for me... Link to comment https://www.sau.com.au/forums/topic/158628-trojan/#findComment-2953775 Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now