Guys:

Please make sure your anti-virus software is working and up to date. In the past week, I’ve picked up three virus threats from the website. Two were while I was in the office and the third was just a few moments ago. My anti-virus software successfully intercepted the attacks and fixed the problems

One of the viruses looked as if it was coming in from a graphic on the forum. Twice my office machine intercepted it. I asked my IT department to trace it – and it was coming from a graphic. I assume the third attempt at an infection (I was at the view new post page) is also a graphic.

If you do not have an updated software program (that is one whose virus definition file is being updated), I know of a free program that works very well. I can give you a link to this program so you can install it on your computer.

Mark

That is a problem happening now on all the ForumUp forums, in all the over 30 ForumUp domains, even the ForumUp support forums.

Quote:

I asked my IT department to trace it – and it was coming from a graphic.

Our webmaster can't figure out how this is happening to all the thousands of ForumUp forums.

Maybe you and your IT department can help shed some light. I can't imagine it is from any image on this forum.

Do read my post below to the Webmaster Raulken. (I am gg'ssimon on the ForumUp support forums.) Maybe what I found about the Windows .ani trojan and the response from Microsoft to release 7 emergency patches will be of help.

Rauken, our Webmaster told the ForumUp staff:

Raulken wrote:

on ForumUp.it many user help me, but at now I not found a solution... Is very fantasy... All code are clean a no virus presence detect All server are good... Can Be a special virus on PC users and not on forumup? A virus modify http data on trasnfer for try to use bug of broser for load toher virus?! Continue to work on this...

My reply:

gg'ssimon wrote:

Yes, it could be that. The Microsoft Windows Animated Cursor (ANI) Code Execution is a major problem now. One of the virus/trojan warnings people have been getting IS the "Exploit-ANIfile.c" Trojan Look here at this very significant article: April 3rd, 2007 Microsoft fits 7 patches into .ANI emergency update Only registered users can see links on this forum! Register or Login on forum! And read this: Only registered users can see links on this forum! Register or Login on forum! Quote: The official Web site of Asustek Computer has been hijacked and used to serve up exploit code for the recently-patched animated cursor (.ani) vulnerability. An embedded iFrame HTML element was planted on the Asus.com site (currently offline) and used to point visitors to other malicious sites hosting the ANI exploit code. And, evil people have made a "trick" download button for the new Internet Explorer 7. It loads a trojan. See: Only registered users can see links on this forum! Register or Login on forum! Quote: Spammers are using fake Internet Explorer 7 (Beta 2) downloads to lure Windows users into downloading a nasty backdoor Trojan . So certainly many people have gotten tricked. What to do about it all is the question. Certainly, everyone with IE7 needs to download the new emergency updates from Microsoft. My computer just finished downloading them. Needs more research and thought as to how to help ForumUp in relation to this.

Everyone, Microsoft has found an exploit being used by bad people so they have issued 7 emergency, critical updates. All of you need to update Internet Explorer to get those important new patches!

Maybe that will help us not get those Virus/trojan warnings anymore. I never got those warnings from my antivirus program on this forum, but I have for the past few days on the various ForumUp forums I had to go to as part of my job as ForumUp staff.

If you use Firefox and have gotten the virus/trojan warnings, please post about it. It had been seeming from what people on the support forums posted, that is happens to those using Internet Explorer.

Hello... I received much the same info from Microsoft but they traced the source trojan to IE5, odd since I use IE6.0... but maybe the person who created the trojan/virus used Explorer 5 ?? I was also advised to load the Microsoft security patch... which I did but it apparently didn't work since I am still getting the virus warnings. I don't believe it is a problem with the user's PCs (as Raulken said in the message you posted) because I also got it on my PDA and my laptop.

But it is definitely not just on this forum, it is on most forumup forums that I have visited. Is it possible it may be originating from phpBB and on any forums using phpBB? Boy it sure would be great if Raulken can isolate it to the point of getting the source or IP of the person who did it!

It's a shame and very sad that some individuals resort to such things as sending viruses or disrupting public websites and forums. I will never understand what motivates people to do such things or what they could possibly gain from it.

I have IE6 but I have not seen any kinds of warnings or update information..... I also use Firefox to view the internet and have not seen any problems with those either. Maybe I'm just lucky????

I have not seen any updates to the Firefox program but I will certainly keep an eye out and install them should any come up.

Thanks for the info/suggestions.

Our Webmaster Raulken has found and fixed the virus/trojan problem! ForumUp is now virus and trojan free!