IPB

Welcome Guest ( Log In | Register )

 Forum Rules 
Hotpart.comUMI PerformanceUnbalanced EngineeringSolo PerformanceBlaine Fabrication.com
3 Pages V   1 2 3 >  
Reply to this topicStart new topic
> Virus at this site?, JS/Wonka
teamDFL
post Dec 13 2005, 01:03 PM
Post #1


Member
*

Group: Advanced Members
Posts: 38
Joined: 13-November 05
From: Apex, NC
Member No.: 967



The last two times I have logged in to this site from my work computer, Virus Scan has picked up a JS/Wonka virus. I am about as computer savvy as the Pope is Casanova, so I was hoping someone can tell me what this means and perhaps if I have anything to worry about since my home computer software (AVG) detected nothing. Thanks?
Go to the top of the page
 
+Quote Post
trackbird
post Dec 13 2005, 01:13 PM
Post #2


FRRAX Owner/Admin
********

Group: Admin
Posts: 15,394
Joined: 13-February 04
From: Ohio
Member No.: 196



I have seen the same thing the last two days and one of our members had an exchange with his IT department about some other issues (or the same one, not sure yet).

I have no answers yet, but I'm looking into it.
Go to the top of the page
 
+Quote Post
pknowles
post Dec 13 2005, 03:27 PM
Post #3


Experienced Member
***

Group: Advanced Members
Posts: 1,427
Joined: 12-February 04
From: Huntingtown, MD
Member No.: 193



Are you using McAfee? I get a pop up sometimes for this virus, I'm not sure if it's valid.

http://us.mcafee.com/virusInfo/default.asp...&virus_k=135834
Go to the top of the page
 
+Quote Post
beuke23
post Dec 13 2005, 03:45 PM
Post #4


Member
*

Group: Advanced Members
Posts: 166
Joined: 25-December 03
From: nYc
Member No.: 39



I got the J/S Wonka trojan twice. Yeasterday, and just now. McAffee picked it up.

Aria
Go to the top of the page
 
+Quote Post
Ojustracing
post Dec 13 2005, 06:33 PM
Post #5


Advanced Member
**

Group: Advanced Members
Posts: 919
Joined: 30-December 03
From: Northern NY
Member No.: 66



Add me to the list too..

Last 2 days hear too!!

John
Go to the top of the page
 
+Quote Post
bsim
post Dec 13 2005, 06:38 PM
Post #6


Race Driver
**

Group: Advanced Members
Posts: 382
Joined: 14-February 04
From: SoCal
Member No.: 205



No problems here, but I DO have "script blocking" turned on...
Go to the top of the page
 
+Quote Post
2manyfbods
post Dec 13 2005, 07:01 PM
Post #7


Advanced Member
**

Group: Advanced Members
Posts: 322
Joined: 22-January 04
From: Arizona
Member No.: 144



QUOTE (beuke23 @ Dec 13 2005, 09:45)
I got the J/S Wonka trojan twice. Yeasterday, and just now. McAffee picked it up.

Aria


I have McAfee at home and I get the alert too. It doesn't happen from work.
Go to the top of the page
 
+Quote Post
trackbird
post Dec 13 2005, 07:08 PM
Post #8


FRRAX Owner/Admin
********

Group: Admin
Posts: 15,394
Joined: 13-February 04
From: Ohio
Member No.: 196



Has it just been recently or how long have you guys been getting the alert?
Go to the top of the page
 
+Quote Post
GM01SS
post Dec 13 2005, 07:15 PM
Post #9


Nitto Destroyer!
*

Group: Advanced Members
Posts: 248
Joined: 24-December 03
From: Rochester NY
Member No.: 29



I have been notified of the Virus for the last 3 days!

Gary
Go to the top of the page
 
+Quote Post
trackbird
post Dec 13 2005, 07:18 PM
Post #10


FRRAX Owner/Admin
********

Group: Admin
Posts: 15,394
Joined: 13-February 04
From: Ohio
Member No.: 196



I've seen it the last two days. The question is, did McAffe update or did we catch something?

I'll have to get after it tonight. I can't do anything from work.

That link has a place to refer "invalid occurences" for them to look at. Did anyone send them the frrax link for their input? (I can't do it from work) and see if they see it?
Go to the top of the page
 
+Quote Post
teamDFL
post Dec 13 2005, 08:19 PM
Post #11


Member
*

Group: Advanced Members
Posts: 38
Joined: 13-November 05
From: Apex, NC
Member No.: 967



The sum total of my knowledge is in the first post. I am sorry that I cannot be more helpful but the brand of software is determined by my corporation and my level of computer knowledge is generously described as limited.

This post has been edited by teamDFL: Dec 13 2005, 08:29 PM
Go to the top of the page
 
+Quote Post
trackbird
post Dec 13 2005, 08:29 PM
Post #12


FRRAX Owner/Admin
********

Group: Admin
Posts: 15,394
Joined: 13-February 04
From: Ohio
Member No.: 196



QUOTE (teamDFL @ Dec 13 2005, 15:19)
The sum total of my knowledge is in the first post. I am sorry that I cannot be more helpful but the brand of software is determined by my corporation and my level of computer knowledge is limited.

No sweat. I got it first yesterday, a few others have seen it since Sunday. I use Norton at home, and McAffee at work. So, we know that McAffee will pick it up and it started 3 days ago. That's good information to start with. I'll get with some people tonight and start turning over rocks and see what I can find out.
Go to the top of the page
 
+Quote Post
pknowles
post Dec 13 2005, 08:37 PM
Post #13


Experienced Member
***

Group: Advanced Members
Posts: 1,427
Joined: 12-February 04
From: Huntingtown, MD
Member No.: 193



QUOTE
No sweat. I got it first yesterday, a few others have seen it since Sunday. I use Norton at home, and McAffee at work. So, we know that McAffee will pick it up and it started 3 days ago. That's good information to start with. I'll get with some people tonight and start turning over rocks and see what I can find out.


I have McAffee and I've seen the notice on my laptop, my desktop, and at work since Sunday. I scanned the hard drives on my laptop and desktop and it found nothing. FWIW.
Go to the top of the page
 
+Quote Post
SexOnWheels
post Dec 13 2005, 09:35 PM
Post #14


Member
*

Group: Advanced Members
Posts: 47
Joined: 8-September 05
From: Canada
Member No.: 883



QUOTE (beuke23 @ Dec 13 2005, 09:45)
I got the J/S Wonka trojan twice. Yeasterday, and just now. McAffee picked it up.

Aria

Me too. At work we use McAffee.

I will try it tonight at home where I use Norton and see if there is still a warning.
Go to the top of the page
 
+Quote Post
RedHardSupra
post Dec 13 2005, 10:53 PM
Post #15


Advanced Member
**

Group: Advanced Members
Posts: 452
Joined: 12-January 04
From: Charleston, SC
Member No.: 121



let's have a tally, who's still using IE vs Firefox/Mozilla/Safari?
IE right now has a FULL REMOTE HOLE, as in go to a 'bad' site and they can run whatever they want on your computer!!!!
MS of course refused to patch it for the past 6-7 months...
i have no problems, but than again, i don't even know where IE is these days...
Go to the top of the page
 
+Quote Post
trackbird
post Dec 13 2005, 11:19 PM
Post #16


FRRAX Owner/Admin
********

Group: Admin
Posts: 15,394
Joined: 13-February 04
From: Ohio
Member No.: 196



QUOTE (RedHardSupra @ Dec 13 2005, 17:53)
let's have a tally, who's still using IE vs Firefox/Mozilla/Safari?
IE right now has a FULL REMOTE HOLE, as in go to a 'bad' site and they can run whatever they want on your computer!!!!
MS of course refused to patch it for the past 6-7 months...
i have no problems, but than again, i don't even know where IE is these days...

I was on IE.

Marcin, this is part of that stuff I sent you last night. I'm not sure it's all related, but it's what I was looking to bug you about.
Go to the top of the page
 
+Quote Post
bsim
post Dec 14 2005, 12:27 AM
Post #17


Race Driver
**

Group: Advanced Members
Posts: 382
Joined: 14-February 04
From: SoCal
Member No.: 205



IE, XP, Norton IS, script blocking on, behind a NAT router. No issues.

This post has been edited by bsim: Dec 14 2005, 12:27 AM
Go to the top of the page
 
+Quote Post
bsim
post Dec 14 2005, 12:40 AM
Post #18


Race Driver
**

Group: Advanced Members
Posts: 382
Joined: 14-February 04
From: SoCal
Member No.: 205



BTW, the description I get is:
QUOTE
JS.Wonka is a generic detection of web pages or e-mail messages that contain a certain functionality for encrypting scripts that may have malicious intent. This does not necessarily mean that a virus has been found.  It merely means that HTML code was found which attempts to activate additional executable code without the user's express permission.

Note: this detection may be triggered by merely visiting a web page that contains malicious code. It does not necessarily mean your machine has been compromised.
So, I guess if the site software has HTML code that points to a script that doesn't get a user permission to execute, it flags the potential for malicious code, not that it found any per se. Am I reading that right?

If that's true, I would assume that because I've blocked JS execution, that's why I don't get the notice?
Go to the top of the page
 
+Quote Post
LS1FIRE
post Dec 14 2005, 01:00 AM
Post #19


Member
*

Group: Advanced Members
Posts: 36
Joined: 24-April 05
Member No.: 728



My virus protector picked it up as well.

This post has been edited by BadBird: Dec 14 2005, 01:06 AM
Go to the top of the page
 
+Quote Post
Formula WS6
post Dec 14 2005, 01:58 AM
Post #20


Advanced Member
**

Group: Advanced Members
Posts: 697
Joined: 25-December 03
From: Athens, GA
Member No.: 45



im on IE6 and i only have microsoft antispyware. nothing has shown up on my comp and i havent had anything odd happening.
Go to the top of the page
 
+Quote Post

3 Pages V   1 2 3 >
Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 27th April 2024 - 07:21 PM