Virus on PoD fixed!

blackbox_dev · Post by **blackbox_dev** » Fri Oct 06, 2006 6:46 pm

There is a trojan which is on PoD. It downloads many other viruses to your computer. I have had two computers become victim to this trojan (one PC has been fully recovered, the other is being recovered as we I type). You have been warned!

P.S. Could the admin (gannon?) for PoD get rid of it? It's probably a good idea.

EDIT: Ok, the problem has been fixed, let's just all be happy now...

demonofaj · Post by **demonofaj** » Fri Oct 06, 2006 6:52 pm

DARN YOU! Now I'm sooo curious, better turn on Norton!

Post by **gannon** » Fri Oct 06, 2006 6:52 pm

I have yet to see any on it, what file is it in?

vb_master · Post by **vb_master** » Fri Oct 06, 2006 6:54 pm

Is it in any subdomains?

Post by **gannon** » Fri Oct 06, 2006 6:56 pm

Also, http://www.siteadvisor.com/sites/portablesofdoom.org says it's clean

vb_master · Post by **vb_master** » Fri Oct 06, 2006 6:59 pm

iam7805 you tracked it to the wrong site.

Harshboy · Post by **Harshboy** » Fri Oct 06, 2006 7:03 pm

It sais Benheck has spyware...it has to be wrong.

vb_master · Post by **vb_master** » Fri Oct 06, 2006 7:03 pm

Harshboy wrote:It sais Benheck has spyware...it has to be wrong.

One of "the book" files has something bad.

blackbox_dev · Post by **blackbox_dev** » Fri Oct 06, 2006 7:31 pm

Really, it's right on the home page of PoD. I was looking at PoD on one computer when it happened, and then I was looking at PoD on another computer and I got the same virus.

Post by **bicostp** » Fri Oct 06, 2006 7:34 pm

Yeah one of the template companion files for the book has some Microsoft vulnerability/bug/whatever.

I went to my subdomain to try to remember how I got a couple pages working, and so far AVG hasn't found anything. (It updated this morning when I booted the PC.)

7805, what browser are you using? If it's IE, then maybe your browser is messed up. If you're using Firefox, then either an interface image is infected or something like that.

Did PoD look funny at all, or did you just get an advisory from your antivirus software when you went there?

gannon, could this have anything to do with that "vulnerability" you mentioned in a recent news update?

Post by **gannon** » Fri Oct 06, 2006 7:35 pm

I'm not getting anything from it, so unless I can get a list of specific files it's not going to help.

blackbox_dev · Post by **blackbox_dev** » Fri Oct 06, 2006 7:55 pm

bicostp wrote:did you just get an advisory from your antivirus software when you went there?

That's pretty much exactly what happened. But it happened on two computers.

blackbox_dev · Post by **blackbox_dev** » Sat Oct 07, 2006 1:27 pm

Ok, I tried visiting PoD on yet another computer. Got the same virus, luckily AVG got rid of it.

The virus is called BackDoor.Generic3.OAQ. It appears that it is coming from a page on the website http://x-joy.info . I can't get the full address because it's just a big string of text after. It looks like after all of the PoD homepage is finished loading, this site starts to load for no apparent reason.

-iam7805

totokan · Post by **totokan** » Sat Oct 07, 2006 1:30 pm

your LAN/WLAN is f'ed up, 7805.

blackbox_dev · Post by **blackbox_dev** » Sat Oct 07, 2006 1:33 pm

totokan wrote:your LAN/WLAN is f'ed up, 7805.

How? No other site does this except PoD.