• The TUGBBS forums are completely free and open to the public and exist as the absolute best place for owners to get help and advice about their timeshares for more than 30 years!

    Join Tens of Thousands of other Owners just like you here to get any and all Timeshare questions answered 24 hours a day!
  • TUG started 31 years ago in October 1993 as a group of regular Timeshare owners just like you!

    Read about our 31st anniversary: Happy 31st Birthday TUG!
  • TUG has a YouTube Channel to produce weekly short informative videos on popular Timeshare topics!

    Free memberships for every 50 subscribers!

    Visit TUG on Youtube!
  • TUG has now saved timeshare owners more than $24,000,000 dollars just by finding us in time to rescind a new Timeshare purchase! A truly incredible milestone!

    Read more here: TUG saves owners more than $24 Million dollars
  • Sign up to get the TUG Newsletter for free!

    Tens of thousands of subscribing owners! A weekly recap of the best Timeshare resort reviews and the most popular topics discussed by owners!
  • Our official "end my sales presentation early" T-shirts are available again! Also come with the option for a free membership extension with purchase to offset the cost!

    All T-shirt options here!
  • A few of the most common links here on the forums for newbies and guests!

Virus Blocked

jmurp62

Tug Review Crew: Rookie
TUG Member
Joined
Oct 11, 2011
Messages
233
Reaction score
14
Location
Nashville, TN
Resorts Owned
Wyndham points
This morning I am getting a notification of a threat blocked on EVERY page I go to on TUG! Anyone else having this problem? I use AVG and it says it is an exploit.exe virus?

I performed a complete scan using AVG, nothing found. I use Firefox and am no longer receiving the message. Weird!
 
Last edited:
Virus on TUG?

This morning I am getting a notification of a threat blocked on EVERY page I go to on TUG! Anyone else having this problem? I use AVG and it says it is an exploit.exe virus?

Yep. Just came up for me too. It said Trojan Horse. I use Avast so I guess it's not just an AVG thing.
 
No issue I've seen. My three PC's use Trend Micro Internet Security or Avast!. It sounds like a local machine problem.
 
This morning I am getting a notification of a threat blocked on EVERY page I go to on TUG! Anyone else having this problem? I use AVG and it says it is an exploit.exe virus?

I recommend you disconnect from the Internet and clean the infection from your computer, do not log in to any sites with password it could be logging your keystrokes. Your Internet Explorer is infected, it's not the tug bbs.
 
Ditto...

This morning I am getting a notification of a threat blocked on EVERY page I go to on TUG! Anyone else having this problem? I use AVG and it says it is an exploit.exe virus?

I use Avast and yes, when I went to the TUG site this morning it immediately provided a notification of Avast having successfully blocked a specifically identified Trojan Horse virus. Once identified as successfully "blocked", no subsequent "notices" were / are received.

This is actually the second time in the past month I've seen a "trojan horse virus" message when going to the TUG site. Aside from these two events, I've never seen any such things in at least 5 preceding years. The last time, I copied down all of the virus details provided by Avast and forwarded those identifying details to "TUG Brian". Whether that virus detail info was useful (or even actually read at all) I do not know. :shrug:
 
Last edited:
I'm getting this on pretty much every page on TUG:

attachment.php


I took a quick glance through the script (tugbbs.com/forums/clientscript/vbulletin_menu.js) and didn't see anything that looked malicious. It was 678 lines long, though, so I didn't look really close.

I'm guessing it's just a false positive.
 

Attachments

  • TUG AVG Message.JPG
    TUG AVG Message.JPG
    29.3 KB · Views: 33
Maybe, maybe not...

<snip> Your Internet Explorer is infected...<snip>

Fwiw, OP never indicated using Internet Explorer as his / her browser. I don't --- and I still got the "trojan horse blocked" notice from Avast. Complete scan thereafter indicated no infection to "clean". :shrug:
 
Last edited:
My company uses Symantec Endpoint and it said it blocked the virus, too.
Is it STILL saying this? It's possible you may still have a cached copy of the old file. You may need to clear your cache and/or reload your TUG pages.
 
No problems at this time. Is this the same problem that Timeshare Forum had last week on their web site?
 
FWIW - I use AVG Free version here, updated every day, and am not seeing this. Just forced an additional AVG update and still am not seeing this.


Nothing reported here either, using Windows 7 with MS Security Essentials and MalwareBytes, latest updates. I tried IE9, Chrome, and Safari.

I've cleaned a few machines this past month with this exploit, it came from the latest fake Facebook email about removing Timeline.

Hopefully its a false positive and the people affected just need to update their virus software.
 
Thanks for the report. I guess?!?!? I had no warning of anything threatening, but I was on my iPad earlier, so when I fired up the Windoze machine, I updated the AVG before opening anything. Seems OK.

Jim
 
I have just replaced the vbulletin_menu.js file with the backup from my home computer. Are you folks still seeing the alert?
I'm not seeing it anymore.

FWIW, I saved a copy of the original vbulletin_menu.js when I glanced through it earlier. I just compared it to the current one, and there's no difference (except an extra linefeed in the original).
 
anyone still getting this today?
 
No recurrence for me.

So was anything changed other than replacing the file? Seems pretty odd, since nothing changed in the file.
 
I was having the same problem. My scans were detecting no threats, but however I tried accessing TUG, the warning would pop up from AVG. This morning i disabled my AVG toolbar, and now all is good (I hope! :confused:).

Dori
 
all good

mine is also ok now. Sorry if I alarmed anyone
 
certainly dont want anyone to have to disable their antivirus just to browse TUG...but i think a few of us here use AVG (I do anyway) and are not getting the error preventing the site from coming up :(
 
I wonder if there was a specific version of the AVG database that gave false positives?

Those who are still getting the error message, have you updated your virus definitions?
 
I use AVG and never got a warning. Re TSForums, my AVG did pop-up warning messages resulting from the hack that took them down.
 
I did confirm from one member thats having hte issue still, that he/she is using the avg IE toolbar...vs just the avg virus program on their computer.

I personally dont use the toolbar (I have enough crap in my toolbar as it is)...just the AVG client.
 
Top