Author Topic: Help requested  (Read 4967 times)

Offline boxerlover

  • Regulars
  • Jr. Member
  • **
  • Posts: 78
    • View Profile
    • http://
    • Email
Help requested
« on: December 15, 2006, 11:33:43 AM »
I am hoping that someone will be able to help me.  For the last week or so everytime I connect to the Plakias forum my Norton Antivirus  tells me that it has detected a virus on my computer   . It is a trojan horse and the object name is  C:\Document...\adv497[1].htm.  My Norton always detects it and resolves it.
This ONLY happens when I connect to the Plakias forum and no other.

Can anyone advise as to how to get rid of this completly ?

Many thanks

John

Offline Graham_and_Karen

  • Regulars
  • Hero Member
  • *****
  • Posts: 764
    • Facebook
    • Google+
    • View Profile
    • Email
Help requested
« Reply #1 on: December 15, 2006, 12:38:20 PM »
Quote from: boxerlover
I am hoping that someone will be able to help me.  For the last week or so everytime I connect to the Plakias forum my Norton Antivirus  tells me that it has detected a virus on my computer   . It is a trojan horse and the object name is  C:\Document...\adv497[1].htm.  My Norton always detects it and resolves it.
This ONLY happens when I connect to the Plakias forum and no other.

Can anyone advise as to how to get rid of this completly ?

Many thanks

John
I have seen messages of the same infection on another forum using INVISION Power Board. On that forum, some users were affected every time they visited, others not at all. One thought on that board was that it could depend on what link you used to enter the forum eg. a direct link or via the Plakias website.Javascript security settings will also make a difference.

Offline steven

  • Regulars
  • Jr. Member
  • **
  • Posts: 87
    • View Profile
    • http://members.ziggo.nl/steefbez/
    • Email
Help requested
« Reply #2 on: December 15, 2006, 12:38:58 PM »
I found a little info on the internet, it seems it's a problem with the FORUM software.

Another Forum had the same problem.

http://www.rollingthunderforums.com/index....amp;#entry29115


"Hello All,

Well, as some of you no doubt found out recently our forums here were infected by a virus and it was setting off everybody's virus detection software left and right  

The solution was to upgrade the board software to the latest version and have our hosting company clean things up to get rid of the virus. The board should still pretty much function the same way but let me know if you run into problems, etc. Hopefully the new version will have some nice new bells and whistles once we get a chance to look around a bit. Most importantly it should be more secure in the future.

With regards to the virus we had here. Make sure that your virus software is up to date and run a complete scan of your system as soon as you can just to be on the safe side. It's probably a good idea to clear out your Temporary Internet Files as well (for you Windows guys for sure - not sure about Macs and other). If you are using IE as a browser - use the Tools menu, Internet Options and you'll see a spot where you can delete the Temporary Internet Files. The virus involved a file in Temporary Internet files (adv497[1].htm) so make sure that sucker is gone and that you are getting the current stuff (not something from a cache) when you come here.

If you are using something else and need some technical advice you might start a thread here on the forums and see if anybody else here can help out - this community is pretty good about pitching in together to help and there are a lot of guys out there who are very good on technical issues.


Russ"


"Virus Encyclopedia: Exploit:Win32/Wmfap

http://safety.live.com/site/en-US/virusenc...?virusid=301512

Name:
Exploit:Win32/Wmfap

Type:
Exploit - Generic

Threat:

Medium


What threat level means


This detection flags files that are potentially exploiting the new WMF vulnerability in Windows. Details about this vulnerability are available in the security advisory: http://www.microsoft.com/technet/security/...ory/912840.mspx "


I would suggest to update your windows XP  and internet explorer, Also everyone on this board should do a full virus scan. ( it is a good habit to do that regularly.)

It isn't very new so all anti virus programs should now it by now.

Also I recommend you use a "pop up killer"

Good luck.   teven





















Quote from: boxerlover
I am hoping that someone will be able to help me.  For the last week or so everytime I connect to the Plakias forum my Norton Antivirus  tells me that it has detected a virus on my computer   . It is a trojan horse and the object name is  C:\Document...\adv497[1].htm.  My Norton always detects it and resolves it.
This ONLY happens when I connect to the Plakias forum and no other.

Can anyone advise as to how to get rid of this completly ?

Many thanks

John
No trees were killed in the posting of this message but a large number of electrons became terribly excited.

Offline boxerlover

  • Regulars
  • Jr. Member
  • **
  • Posts: 78
    • View Profile
    • http://
    • Email
Help requested
« Reply #3 on: December 15, 2006, 06:03:19 PM »
Quote from: Graham_and_Karen
Quote from: boxerlover
I am hoping that someone will be able to help me.  For the last week or so everytime I connect to the Plakias forum my Norton Antivirus  tells me that it has detected a virus on my computer   . It is a trojan horse and the object name is  C:\Document...\adv497[1].htm.  My Norton always detects it and resolves it.
This ONLY happens when I connect to the Plakias forum and no other.

Can anyone advise as to how to get rid of this completly ?

Many thanks

John
I have seen messages of the same infection on another forum using INVISION Power Board. On that forum, some users were affected every time they visited, others not at all. One thought on that board was that it could depend on what link you used to enter the forum eg. a direct link or via the Plakias website.Javascript security settings will also make a difference.

Many thanks for your advice Graham and Karen and Steven.

I have done exactly what you have advised me to do....I have an uptodate Norton antivirus and have run a full check. Then I have deleted my Tempoary internet files as well as cookies. Also have updated Windows XP and have the latest internet explorer.  Yet when I still connect to the Forum  ( which is via " my favourites " I am still receiving this virus alert!!!!!!!!!!!!!!!

However when I connect to the forum by using my search engine the " virus alert " does not activate.    I am confused as I am not very computer literate.

I have also done a full search in all files of my pc to try and find this c:\documen...\adv497[1].htm ..............but nothing was found..........

Any further advice/information would be greatly appreciated

John

Offline compage

  • Regulars
  • Sr. Member
  • ****
  • Posts: 455
    • View Profile
    • http://www.compage.com
    • Email
Help requested
« Reply #4 on: December 16, 2006, 01:35:08 PM »
I'd try deleting the favourite and re-creating it.
John Page

Offline boxerlover

  • Regulars
  • Jr. Member
  • **
  • Posts: 78
    • View Profile
    • http://
    • Email
Help requested
« Reply #5 on: December 16, 2006, 05:11:28 PM »
Quote from: compage
I'd try deleting the favourite and re-creating it.
Why Oh Why did I not think of that before.  I have just done what you have advised and the problem has been resolved.    Many many thanks.

John.

Offline compage

  • Regulars
  • Sr. Member
  • ****
  • Posts: 455
    • View Profile
    • http://www.compage.com
    • Email
Help requested
« Reply #6 on: December 18, 2006, 08:59:03 PM »
It's a pleasure to be able to help.
John Page

Offline MR P

  • Newbie
  • *
  • Posts: 7
    • MSN Messenger - e2e100@hotmail.com
    • View Profile
    • http://
    • Email
Help requested
« Reply #7 on: December 20, 2006, 10:47:06 AM »
Quote from: boxerlover
I am hoping that someone will be able to help me.  For the last week or so everytime I connect to the Plakias forum my Norton Antivirus  tells me that it has detected a virus on my computer   . It is a trojan horse and the object name is  C:\Document...\adv497[1].htm.  My Norton always detects it and resolves it.
This ONLY happens when I connect to the Plakias forum and no other.

Can anyone advise as to how to get rid of this completly ?

Many thanks

John


The only thing i can think that might help, is to Defrag your computer, i would advise to do this while you go to bed, because when i have started defragging my computer during the day i have been wothout it for the full day, well a couple of hours at least.

Let me know if this is good advise or not

Mr P

Offline steven

  • Regulars
  • Jr. Member
  • **
  • Posts: 87
    • View Profile
    • http://members.ziggo.nl/steefbez/
    • Email
Help requested
« Reply #8 on: December 20, 2006, 03:40:23 PM »
Quote from: MR P
Quote from: boxerlover
I am hoping that someone will be able to help me.  For the last week or so everytime I connect to the Plakias forum my Norton Antivirus  tells me that it has detected a virus on my computer   . It is a trojan horse and the object name is  C:\Document...\adv497[1].htm.  My Norton always detects it and resolves it.
This ONLY happens when I connect to the Plakias forum and no other.

Can anyone advise as to how to get rid of this completly ?

Many thanks

John


The only thing i can think that might help, is to Defrag your computer, i would advise to do this while you go to bed, because when i have started defragging my computer during the day i have been wothout it for the full day, well a couple of hours at least.

Let me know if this is good advise or not

Mr P


Defrag does not fix any computer problems, It ony makes your computer run less slow.
If you do it regularly it will not take very long.

Steven.
No trees were killed in the posting of this message but a large number of electrons became terribly excited.