Script Trojan * Tsikot Site

[chuaed]

just want to inform the moderators that there is a script trojan in embedded in the tsikot website...



Delete this thread after reading...

[ghosthunter]

I got hit myself... hopefully the admins get my message and find a fix quickly.

[[archie]]

kahit po ba safari infected? hindi nagshoshow up yung ganon sakin...

[jedi]

kahit po ba safari infected? hindi nagshoshow up yung ganon sakin...

nung nainfect ang tsikot.com portal ng virus, natrack instantly ng google

http://www.google.com.ph/search?q=si...ient=firefox-a

sa right side ng mga URL may check button, it means the website is safe, before nagkaroon ng question mark button dun because the site was infected....

for tsikot forums or tsikot.yehey.com pages

http://www.google.com.ph/search?q=si...ient=firefox-a

puro check marks din sa lahat ng pages... so it means safe ang site.

although i still have to double check everything dahil baka may nakalusot nga.

if eer may makaencounter ng ganito... kindly provide us with the exact thread or link kung saan lumabas yung virus.

[batangmahal]

kahit po ba safari infected? hindi nagshoshow up yung ganon sakin...

i don't think our safari would be infected. sana!

credit it to uncle MAC.
an "apple" a day keeps the doctor away!

[niky]

Please do check into it. It may be safe for Mozilla... but a lot of people who use iexplore have been complaining that they can't get on tsikot. One old-timer from kotse even said that tsikot was labelled an "attack site" on his computer, and some newbies to the web have told me they can't even get on tsikot for this reason.

[XTO]

nakita nga rin ng ad-aware ko sa bahay. dito sa office hirap maka pasok kundi error, matagal.

[Memphis Raines]

Ever since I switched to FireFox and updated it regularly my browsing has greatly improved compared to the slow loading iexplorer. But FireFox does consume a ton of memory (about 101,432k) which is the highest on my Pc when in average browsing use.

What brand of Anti-Virus could detect this Trojan? I'm currently using Avast and so far it hasn't detected this.

.

[ghosthunter]

Please do check into it. It may be safe for Mozilla... but a lot of people who use iexplore have been complaining that they can't get on tsikot. One old-timer from kotse even said that tsikot was labelled an "attack site" on his computer, and some newbies to the web have told me they can't even get on tsikot for this reason.

I'm using Mozilla firefox 2.016 and version 3.01 with AVG 8.01 ... the script/virus got through but AVG caught it from activating.

[woohoo]

Ever since I switched to FireFox and updated it regularly my browsing has greatly improved compared to the slow loading iexplorer. But FireFox does consume a ton of memory (about 101,432k) which is the highest on my Pc when in average browsing use.

What brand of Anti-Virus could detect this Trojan? I'm currently using Avast and so far it hasn't detected this.

.

Hurray for Firefox! We use Endian Firewall on our gateway PC, and its accompanying ClamAv antivirus doesn't want me to load up the main forum page (http://tsikot.yehey.com/forums) and all the subsequent links stemming from that page. HTML.Agent-19 daw ang virus. Lumitaw lang ito this morning. First time.

[kokey]

Kagabi e hindi ko nga ma-open ang tsikot, lumalabas ang warning ng AVIRA na may naka-embed na virus sa tsikot site.....

Thanks God! naka-DEEP FREEZE ako....

[Mschumacher]

Guys, I have known this for quite sometime now. I think the infection of this worm or malware has been present for quite sometime now. I have known this for as early as may. The only infected page is the main page of the site. The Tsikot.com site. That's why when I am browsing I use google to track the forum that I wanted to goto and not from the main page. BTW the main page contains a lot of downloaders that automatically downloads malicious files into your system. This malicious softwares and scripts only runs on windows platform only and it wont affect mac environment. This will infect any PC that uses Windows 98 and up. I suggest that you check the encoding of your main page. Thank you.

Guys I'll just make it clear ang safari hindi affected because yung os niyo ay mac. This will surely infect all windows 98 and up. I dont know for Linux yet but from the looks of it mukhang hindi siya tatakbo sa linux.

Reminder lang para hindi kayo tamaan ng malware na ito. Gamitin niyo na lang ang google to search the forum you wanted to go to and from there click mo and hindi na covered ng script worm yung forum page na papasukin niyo. Isolated lang ito sa main page. Once nasa sub pages ka na ng tsikot wala ng worm sa script encoding nito. Kung magulo ito. Just post your question.

[Mschumacher]

nung nainfect ang tsikot.com portal ng virus, natrack instantly ng google

http://www.google.com.ph/search?q=si...ient=firefox-a

sa right side ng mga URL may check button, it means the website is safe, before nagkaroon ng question mark button dun because the site was infected....

for tsikot forums or tsikot.yehey.com pages

http://www.google.com.ph/search?q=si...ient=firefox-a

puro check marks din sa lahat ng pages... so it means safe ang site.

although i still have to double check everything dahil baka may nakalusot nga.

if eer may makaencounter ng ganito... kindly provide us with the exact thread or link kung saan lumabas yung virus.

Master Jedi nasa main page po ng tsikot ang malware na script downloader. It has been residing there for what I think is 2 months + already. Please do reencode the script. The main page will download lots of irritating file and I think it is a worm that gets information from your PC to send it to the malware writer. If you are infected by this worm you can see some .com files present on your root directory. Nakalimutan ko na kasi yun mga details e. matagal na ako natamaan nito and manually ko lang siya dinelete sa system ko e. It will be infecting your flash drive or your jump drive as well. Hope this help.

[afrasay]

Kaya pala a month or so ago hirap pumasok sa tsikot and nag hang laptop ko everytime mag log ako dito.

[roninblade]

na-report na pala 'to. what's weird is i've been browsing the site since 5pm yesterday pero ngayon lang lumabas yung warning from Google (set as a security measure on my firefox)

This web site at tsikot.yehey.com has been reported as an attack site and has been blocked based on your security preferences.

from:http://safebrowsing.clients.google.c...sprune=30&f=11

Diagnostic page for tsikot.yehey.com/forums/

What happened when Google visited this site?

Of the 11 pages we tested on the site over the past 90 days, 2 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 07/23/2008, and the last time suspicious content was found on this site was on 07/23/2008.

Malicious software includes 2 trojan(s). Successful infection resulted in an average of 5 new processes on the target machine.

Malicious software is hosted on 1 domain(s), including 213.155.0.0.

[donski]

Eto naman ang sa Firefox version: 3.0.1





sa firefox lang naman

[Firefighter]

di ako makapasok pag firefox, ito lumalabas.




sa IE nakakapasok ako sa tsikot.

[redorange]

Google now says 3 malicious software on the site. If you Google tsikot forums and try to enter via this address tsikot.yehey.com/forums/ you'll get the message.

[Mschumacher]

Believe me hindi lahat n antivirus software ay nadedetect yun malware na dinodownload ng site na ito. For safety purposes na lang if your going to log in to your forums go directly to it using your history or cookies huwag na kayo pumasok sa main page.

[Hanren]

Napansin ko na everytime I browse tsikot from the main page, there are some instances na nag ha hang siya (at yung icon sa upper left hand corner sa title bar ng Iexplorer eh nagiging icon ng isang executable file). Pag naghang na yung page, hindi mo rin maclick yung close button sa may upper right hand corner ng title bar.

Ang ginagawa ko, I load tsikot.com from a bookmarked page in my bookmark kaya kahit na hindi siya sa main page, at last hindi siya naghahang.

Lately din napalitan na desktop background ko-there's a picture that's informing me that I need to install a spyware program since their is a detected malware/adware. I'm not sure if this came from tsikot.com but I have to double check the pages that I am constantly visiting.