The forum of the forums
Welcome to the Official Support Forum of Forumotion!

To take full advantage of everything offered by our forum, please log in if you are already a member, or join our community if you've not yet.



Create a free forum like this one.

*Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

View previous topic View next topic Go down

Completed *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 17th 2012, 7:46 pm

Below is a message from several of the people that have gone to the site and tried to enter. I have several other sites, and this one was created for totally different topics unrelated to the original site. All of my other sites work just fine with no unsafe error codes coming up. I have had as many as 10 different people sending me an "unsafe report". There are no ads, I paid to have them removed for members and guests, and have walked them through adding the site to trusted sites within the internet options... to no avail.

Not sure of where to go from here?

This is the message from microsoft?
''This website has been reported as unsafe"

There shouldnt be anything unsafe about it, I have done nothing different with this one than the other 4 sites that I have with forumotion.


Last edited by Miskebam on January 29th 2012, 11:27 pm; edited 3 times in total

Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by MrMario on January 18th 2012, 1:41 am

Hello,

Is sounds like a script you installed on your forum. Any smiles, images or codes just installed?

MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1830
Language : test

http://test.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 19th 2012, 6:02 am

Actually yes, I did install some smileys, but I downloaded them to my computer first, and then I also installed a widget with an image that clicks to go back to our original forum.

Will scout around to see if these are the problem. Will let you know.

Thank you!

Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 19th 2012, 6:11 am

OK. I installed one smiley, I just deleted it, but other than that there is nothing different that I have done, other than the skin, I went from originally using Phpbb3 to phpbb2.

Is it possible that a script error occured?
Do I need to resync the forum?
Is it possible the site was hacked? I have always thought that forumotion runs the most upto date security, but someone mentioned that, so I thought I would pose the question.

Thank you!




Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Guest on January 19th 2012, 6:19 am

http://help.forumotion.com/t103243-

You probably have a GIF image that contains malicious code. Normally you wouldn't have a problem with images, but phpBB2 had a bug that allowed people to insert code into GIF images, and that code would get executed. So there are a lot of smileys (and other GIF images) floating around which contain malicious code.

Delete all GIF images you are using on your board, and I'll bet the problem goes away.

Guest
Guest


Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 19th 2012, 7:38 am

I will look at those too, and thank you for being so helpful... this has me very upset and perplexed.

Would a gif cause the following? I just got this from one of my mods in a pm:

I did have Trend AV report a spyware on my lap top after visiting OOM2. I hadn't really been anywhere but on OOM and OOM2 that day or the day before.

OOM2 is the forum in question.

Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by kirk on January 19th 2012, 12:08 pm

Well the Microsoft message is fake and is a virus,
Please listen to what Dion is saying because it is most likely caused by a bad GIF as he stated above.

And as far as i know this only appears for people using IE8,

Anyway this member had the same problem for over a week and as of now we think he got rid of it by deleting a image he had on his home page.

http://help.forumotion.com/t103243-trojanjs-redirectore

kirk
Forumaster

Male Posts : 11037
Reputation : 651
Language : English,Vulcan,Klingon, Romulan,& Gorn

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 19th 2012, 7:11 pm

EXCELLENT! THANK YOU! I WILL LET THE MEMBERS KNOW!

That makes sence, because its only happening to a few members and not all of them...

Most greatful for the help!

Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 27th 2012, 4:14 pm

OK, I received this back from microsoft, but I can not find where to remove the problem .gif, I have been to every corner of admin panel and can not find it, possible to get an idea of where to look?



We did identify a download on your site that has malware:
www.oom2.com/users/2911/13/13/79/smiles/573335.gif

This gif file hosts the threat: Trojan:JS/Redirector.E

This looked like user 2911, but I only have 579 members...

I didnt put the .gif on the site, so either a user did, or it was part of the skin that I used.

Any help would be appreciated, am exhausted from looking.

Thank you!

Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 28th 2012, 4:23 pm

24 hour. Bump.

Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Guest on January 28th 2012, 9:28 pm

That image is a smiley. Go to your ACP and delete the smiley which has this: users/2911/13/13/79/smiles/573335.gif as part of its file name.

If the smiley doesn't exist, then someone added it into a post using IMG BBcode. You'll need to find that post and remove the tag.

Either way, you should alert the staff. The techs need to remove that image from wherever it's currently stored, because this problem will happen again and again until the image is removed.



Guest
Guest


Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by lobosoll on January 29th 2012, 10:15 pm

you shud also check that you have not picked up something that has planted its self in your browser and acting in your forum the same way
scan pc with malwarebytes and antivirus/or aswell uninstall your browser and re-boot then re-install browser .

lobosoll
Forumember

Male Posts : 58
Reputation : 2
Language : english
Location : uk wolverhampton

http://neonappz.forumotion.co.uk

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 29th 2012, 10:41 pm

I have been through every ACP area and can not locate this smiley.

How do you alert the staff?

and thank you for suggesting the running for malware... It might be that I need to suggest that to the members as well...

what a pain this has been Sad


Last edited by Miskebam on January 29th 2012, 11:03 pm; edited 1 time in total

Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by lobosoll on January 29th 2012, 10:42 pm

whers your site url ill come and sign up and see bro

lobosoll
Forumember

Male Posts : 58
Reputation : 2
Language : english
Location : uk wolverhampton

http://neonappz.forumotion.co.uk

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by SLGray on January 29th 2012, 11:01 pm

@Miskebam wrote:I have been through every ACP area and can not locate this smiley.

How do you alert the staff?

and thank you for suggesting the running for malware... It might be that I need to suggest that to the members as well...

what a pain this has been Sad

Please don't use bold or color. Please keep to the default text. This is reserved for the staff for moderation.





When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36673
Reputation : 2445
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 29th 2012, 11:05 pm

sorry about the bold, and thank you for the reminder, it was purely out of habit.

my site url is http://www.oom2.com

Thank you!

Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by SLGray on January 29th 2012, 11:08 pm

I just tried the link. I did not get a warning message.


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36673
Reputation : 2445
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 29th 2012, 11:17 pm

Microsoft removed the warning for unsafe site this last monday, but told me they found the .gif with the virus attached, but some of the members are still reporting that they are getting a warning.

Problem is I unable to locate that .gif to remove it. Sad

Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by SLGray on January 29th 2012, 11:19 pm

Have you gone through the whole forum topic by topic to see if someone added it to a post?


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36673
Reputation : 2445
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by Miskebam on January 29th 2012, 11:26 pm

No, I have not, thought maybe someone here could tell me how to remove it without going through all 2207 messages, since I thought maybe it was an issue that might have been gone over before, but I could not find.

Thanks for your help, I will go through them until I find it.

Thank you!

Miskebam
New Member

Female Posts : 19
Reputation : 2
Language : English

http://www.changesxchange.com

Back to top Go down

Completed Re: *Need help locating this file - Microsoft is reporting my site as unsafe? (updated, there is a virus)

Post by SLGray on January 29th 2012, 11:28 pm

Sorry but you will have to check each topic one by one.

You could try to use your browser finder to locate the smiley.


When your topic has been solved, ensure you mark the topic solved.
Never post your email in public.


SLGray
Administrator
Administrator

Male Posts : 36673
Reputation : 2445
Language : English
Location : United States

http://ztwds.forumotion.com/

Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum