The forum of the forums
Welcome to the Official Support Forum of Forumotion!

To take full advantage of everything offered by our forum, please log in if you are already a member, or join our community if you've not yet.



Create a free forum like this one.

Malware in Gzip script = Avast blocking forum

View previous topic View next topic Go down

Solved Malware in Gzip script = Avast blocking forum

Post by ElMuggs on May 27th 2011, 5:05 pm

After turning on the attachment feature for users my co-admin got hit with this page when trying to load a topic at work.



Talking we where able to track it down to a script for Gzip files built into Forumotion.

The info we where able to get from Avast was as follows:
http/ wwb forum.com / gzip
infection HTML: Script-inf

I'm thinking it's either a false positive because of the file format (Gzip being a Linux standard format) or there really is some bad code in the file upload plugin.

She's using the latest Free Avast Antivirus, Firefox 4 and Windows XP and up until yesterday had no problem accessing the site. nor any issues of false positives on our site.

We're running phpbb2 and the error came up when loading this roleplay thread.

I've since disabled uploading for users but is there a way to better select what kind of files can/can't be uploaded? (if not.. there really should be for security) and can some forumotion guys please have a look at the gzip plugin to make sure it's safe?

ElMuggs
Forumember

Posts : 91
Reputation : 17
Language : CSS / HTML / BBcode / Javascript / Graphics and Tech Support yeech..
Location : Deep in the belly of the code

http://wizardswb.forumotion.com

Back to top Go down

Solved Re: Malware in Gzip script = Avast blocking forum

Post by MrMario on May 28th 2011, 3:02 am

I'm using Avast and have no issues.

MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1830
Language : test

http://test.com

Back to top Go down

Solved Re: Malware in Gzip script = Avast blocking forum

Post by ElMuggs on May 28th 2011, 5:41 am

That might be because your viewing as a visitor and unable to reply?

if you want i can pm you our testing account's details to try out.

ElMuggs
Forumember

Posts : 91
Reputation : 17
Language : CSS / HTML / BBcode / Javascript / Graphics and Tech Support yeech..
Location : Deep in the belly of the code

http://wizardswb.forumotion.com

Back to top Go down

Solved Re: Malware in Gzip script = Avast blocking forum

Post by BeBot on May 28th 2011, 5:54 am

That shouldn't be a issue. Attachments are on here too.

BeBot
Forumember

Male Posts : 136
Reputation : 40
Language : English

Back to top Go down

Solved Re: Malware in Gzip script = Avast blocking forum

Post by funwave on May 28th 2011, 7:27 am

...but I wonder that here are Hacker Forums are to see INSIDE of Forumofforum sites .....bad thing....
-->http://nimbuzzsol.bigforumpro.com/t270-web-flood-complete-guide-and-php-script-for-making-own-web-flood

funwave
New Member

Male Posts : 3
Reputation : 0
Language : german

Back to top Go down

Solved Re: Malware in Gzip script = Avast blocking forum

Post by ElMuggs on May 28th 2011, 9:10 am

it is certainly possible that it's a false positive caused by another forumotion forum having a exploit.

Either way i don't feel comfortable until i know 100% since i certainly don't want any users getting malware.

I have to wait till Monday to get another chance to get her to test out the site and see if Avast is still blocking forumotion, and to see if it blocks all forumotion sites (like this one) or just the one.

ElMuggs
Forumember

Posts : 91
Reputation : 17
Language : CSS / HTML / BBcode / Javascript / Graphics and Tech Support yeech..
Location : Deep in the belly of the code

http://wizardswb.forumotion.com

Back to top Go down

Solved Re: Malware in Gzip script = Avast blocking forum

Post by MrMario on May 28th 2011, 7:13 pm

Might be her settings that she has on. If it wasn't, I would be getting the same message and wouldn't be able to get on this site.

MrMario
Helper
Helper

Male Posts : 22186
Reputation : 1830
Language : test

http://test.com

Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum