DeeZire Online - View Single Post

EvilViking · 10-11-2003, 02:16 PM

Update: I've done some research, and this trojan is NOT very threatening. If your anti-virus detects it, most likely you have NOT been infected, it's just warning you. "Notification of infection does not always indicate that a machine has been infected; it only indicates that a program included the viral class file. This does not mean that it made use of the malicious functionality."

Second, is you ARE infected, all it does is add a few pronographic links to your favorites and changes your homepage. Now, don't get me wrong, that ticks me off, but IT DOES NOT THREATEN YOUR SYSTEM.

According to those links, here is how threatening it is:
Geographical distribution: Low
Threat containment: Easy
Removal: Easy

As you can see, it's not a big deal. I'm going to go over the HTML on the site with a fine-tooth comb and see if I can find it. I apologize to anyone that this may have inconvenianced. :/
- PCTeen1

EDIT: I FOUND IT! There is a java script on the downloads page, a standard one that asks you if you want to make that page your homepage. If you've noticed, the script doesn't work! :tard: I think this is how the trojan got in. I'm removing the script & re-uploading the downloads page. Thanks for your help, FlyBy!

10-11-2003, 02:16 PM	#9 (permalink)
EvilViking Senior Member Join Date: Jul 2003 Location: USA Posts: 442	Update: I've done some research, and this trojan is NOT very threatening. If your anti-virus detects it, most likely you have NOT been infected, it's just warning you. "Notification of infection does not always indicate that a machine has been infected; it only indicates that a program included the viral class file. This does not mean that it made use of the malicious functionality." Second, is you ARE infected, all it does is add a few pronographic links to your favorites and changes your homepage. Now, don't get me wrong, that ticks me off, but IT DOES NOT THREATEN YOUR SYSTEM. According to those links, here is how threatening it is: Geographical distribution: Low Threat containment: Easy Removal: Easy As you can see, it's not a big deal. I'm going to go over the HTML on the site with a fine-tooth comb and see if I can find it. I apologize to anyone that this may have inconvenianced. :/ - PCTeen1 EDIT: I FOUND IT! There is a java script on the downloads page, a standard one that asks you if you want to make that page your homepage. If you've noticed, the script doesn't work! :tard: I think this is how the trojan got in. I'm removing the script & re-uploading the downloads page. Thanks for your help, FlyBy!