AVG Anti-Virus 2012 Starting to Block TUGBBS webpages!

[T_R_Oglodyte]

Just logged on today for the first time since last night. My AVG is reporting the Phoenix threat almost every time I open a page.

Using Firefox.

 

[Tacoma]

I too was getting that message every page. My husband switched my browser th google chrome and it seems to be working fine. So try a new browser. Thank heavens my husband is a techie.

Joan

 

[amycurl]

I'm running Firefox on a Mac. I also checked TUG at the end of the work day on my brand-new Lenovo laptop, running Chrome and Norton 360, and didn't have a problem.

 

[Passepartout]

Just switched to Chrome. AVG is showing active threats here, but no pop-ups appear. Formatting, underling, bold is working with Chrome- which doesn't seem to work using Firefox.

Jim

 

[mas]

I haven't seen the problem here, using Chrome and AVG, however, it took about five tries and about 5 minutes to open a thread on the Marriott board--buying back timeshares. I kept seeing pages that google couldn't open the page or that it was taking too long.

 

[Talent312]

I use IE9 and Avast!... and just got the message:
avast! blocked the virus:
http://www.tugbbs.com/forums/clientscript/vbulletin_global.j...

But so far, no ill effects seen.

 

[easyrider]

I feel left out, since I have not gotten it!

Me too !!! Everything is fine. Im not using AVG or Norton. Im using microsoft security esentials and chrome.

Bill

 

[debraxh]

I was getting the error using IE, and in fact could not even read the message because the thread wouldn't load! Switched to Chrome -- same computer same AVG -- no problem now.

 

[Ron98GT]

No problems here.

One computer runs Windows 7 Professional, IE9, Firefox 15.0, and McAfee antivirus.

Two computers than run Windows XP Professional, IE7, Firefox 15.0, and Trend Micro antivirus.

So far, so good.

 

[ricoba]

Me too !!! Everything is fine. Im not using AVG or Norton. Im using microsoft security esentials and chrome.

Bill

I am using IE 9, Windows 7 and Norton 360.

 

[TUGBrian]

very bizarre indeed.

 

[TUGBrian]

I use IE9 and Avast!... and just got the message:
avast! blocked the virus:
http://www.tugbbs.com/forums/clientscript/vbulletin_global.j...

But so far, no ill effects seen.

this file doesnt even exist on the server...so weird

 

[TUGBrian]

our host claims they have run a malware scan twice now and come up with nothing wrong with the server....we will however continue to dig into this as something is certainly triggering your antivirus software.

 

[KauaiMark]

Same here...

My antivirus/firewall software just started reporting a Trojan every time I do anything here. Here's the info:

Type: Trojan program (1)
HEUR:Trojan.Script.Iframer Inactive 9/5/2012 8:52:38 PM

It shows it as coming from:
http://tugbbs.com/forums/clientscript/vbulletin_global.js?v=364

HEUR:Trojan.Script.Iframer

Accessed Using FireFox V14-1.0
funnecake Jul 2012

triggers using either FireFox or IE9

Was able to access TUG using Chrome browser w/o triggering the Kasperski Trojan warning.

...Mark

 

[PearlCity]

Getting the same thing. It actually infected my other computer that didnt have a firewall. I'm on one with a firewall now..

 

[TUGBrian]

so bizarre...my av software picks up nothing on firefox or chrome browsers...both spybot and MBAM scans show nothing infected (and i even disabled av and browsed)...

i can only guess this at the moment is a false positive...but id still like to find out whats causing it and fix it.

 

[theo]

Still there a day later...

Detected again today, indicated by Avast Anti-Virus software as a Trojan Horse virus JS:Redirector-MA. Successfully blocked, but obviously still an issue. Meanwhile, can't access "smilies" (not a huge problem)...

P.S. Fwiw, I use IE8 and Windows XP --- in my quest to stay a decade behind the times.

 

[Htoo0]

I'm getting it too. Each time I change pages. www.tugbbs.com/forums/clientscript/vbullentin_global.js?v=364 Threat name: Exploit Phoenix Exploit Kit (type 769) AVG, Firefox and XP

 

[GetawaysRus]

Guess I'm not alone. I also use Avast. Got a "Trojan Horse blocked" message. It refers to something called JS:Redirector-MA

 

[TheWizz]

I get the AVG blocks on IE and FF, but not Chrome. However, on all the browsers, the "Quick Links" menu bar for seeing your posts, new posts, etc. is missing.

 

[Passepartout]

I 'upgraded' my AVG to the paid version this morning in the hope that it might do a better job dealing with this Phoenix threat. Reporting no difference. The 'Quick Links' above disappears when clicked on. Still can't change formatting like, underlining, bolding. Smilies don't work. Spell check seems to work, though.

If your AVG freebie seems to be working, it's probably as good as the paid one. The above is using a PC/Win7/Firefox. Chrome reports risks and reports them, but seems functional- except that Quick Links is AWOL entirely.

Jim

 

[Fern Modena]

I'm using Chrome and AVG Paid for virus, and Previx for malware. No problems at all.

I think Firefox is part of the problem. I've pretty much quit using Firefox because it is a huge memory hog and doesn't seen to return memory when you close tabs. Chrome development is far enough along that they have every extension, etc. that I want.

I do a full virus scan weekly and update my definitions automatically so they are always current. If you guys are having problems, have you done both of those things since the "problem" has started?

This isn't the first time we've had this, btw.

Fern

 

[klpca]

I'll add my little data points.

No issues on iPad (safari) or iPhone

No issues at work yesterday using Firefox. I'm not sure what antivirus were using. It used to be kaspersky but I think the IT guy changed it recently. I'll see if I can figure it out later.

I get the warning at home using firefox/avast.

 

[timeos2]

Running Firefox almost exclusively on my PC, Opera / Internal browsers on my Android and the internal browser on my Touchpad (WebOS). All but the Touchpad have Trend Micro Internet Security, which I have used for over 10 years and never had a malware or virus get by on any of my 6+ family PC's or phones. No reported errors on any of the various access OS/hardware for this site.

Just to see what would happen I opened IE (HELP!!) & logged into the BBS. Have all the various menus, etc - no problem and no warnings.

I have noticed that over time the cookies, or whatever sets the state of your current session, on virtually any access method can "lose" the ability to display the "Quick Links" option. If I clear everything when that happens the menu returns (usually). I'm really not sure why that can occur. I've seen it where one PC will have lost the menu if I log in while another uses it just fine so I believe it is a local machine issue.

As for the current error being reported I am guessing that it is due to an outdated Java version. The errors/warnings appear to point to that. If someone getting the error can make sure they have updated their Java version AND removed all prior versions I'll bet it goes away.

Keeping your Java up to date is very important for security as it holds high user rights. It is basically far more secure and reliable than the various MS scripting disasters but you must apply the security upgrades as they are released to be protected.

Closing IE now (thankfully) so that threat to my pc is now mostly removed. If it weren't for the many & frequent MS patches I'd get rid of it entirely.

 

[timeos2]

UPDATE:

Interesting that on my Trend Micro Log two "web threats" were blocked when I opened TUGBBS.COM under IE - not Firefox - a few minutes ago. I did not get a pop up only a log entry. Here is the link it blocked - once when I clicked on the "Quick Links" menu and once when I clicked "New Posts" in IE:

[FONT=Arial, sans-serif]ttp://presider.pro/d77bsczxwvebzam[/FONT]
(left off the leading h so link is dead - don't go there!)

Maybe this will help track down whatever is occurring.