GW News
GW Articles
GW Gamers
GW Interviews
GW Photo Album
GW Guilds
GW Links
GW Forums
GW Auctions
GW Site FAQ
GW Screens Comp

Nightfall Map
Factions Map
Prophecies Map
GW Mission Maps
GW Collector Maps
GW Elite Skill Maps

GW Armor
GW Quests
GW Elites
GW Missions
GW Monsters
GW Runes
GW Skills
GW Maps
GW Zones
GW Uniques
GW Collectors
GW Titles
GW Inscriptions
GW Insignia
GW Hero FAQ
GW Classes
GW Tips & Hints
GW Guides
GW Commands

GW Videos
GW Screenshots
GW Signatures
GW Wallpapers

Guild Wars: Forum Topic

Guild Wars: Someone's snuck a trojan into your site

Forum >> Miscellaneous >> Site Section Errata >> Someone's snuck a trojan into your site

1 2 3 Next >

User

Message

The Ironwarrior

Posts: 6
Joined: 11/11/2006
Credibility: 39 pts

Someone's snuck a trojan into your site

I've used your site now for a very long time and really enjoy it. It's taken a few tries to finally complete, but perhaps one good thing from this is that it caused me to finally register...

Anyways, I wanted to let you know that the "Factions Map" you have posted is tainted with a trojan named "Exploit-MS06-014".

It doesn't seem hard to remove, I've gotten it and removed it several times just to be sure of this before I post it. I'm guessing it hasn't been mentioned before but I'm sure that someone has a 'clean' map to replace it with.

If your AV doesn't recognize it or cannot remove it, I'm using McAfee and it's does both.

Peace,

11/12/06 15:36

Xaviak

GameAmp Staff
Posts: 419
Joined: 02/25/2006
Credibility: 702 pts

RE: Someone's snuck a trojan into your site

eep.... O.o

EDIT: which browser are ye using?

***THIS POST HAS BEEN EDITED***

AmpWoW<-- Check it out if you need to find something. ^^
WoW@GA is looking for new staffers! More info HERE!

11/12/06 15:39

Lance Wrongbow

Posts: 433
Joined: 03/12/2006
Credibility: 531 pts

RE: Someone's snuck a trojan into your site

QUOTE

Ouch, thank god I never looked at that map. Never liked Factions. Thanks for telling us. + cred

***THIS POST HAS BEEN EDITED***

Thank you Maqulvent for this siggy

11/12/06 15:41

The Ironwarrior

Posts: 6
Joined: 11/11/2006
Credibility: 39 pts

RE: Someone's snuck a trojan into your site

I'm using IE7.

and the protections suite provided by comcast from McAfee, it recognized the trojan and removed it... the virus continues to attempt to put itself on your puter as long as the picture is open too.

11/12/06 15:44

mwpeck

GameAmp Staff
Forum Moderator
Posts: 3212
Joined: 11/24/2005
Credibility: 2568 pts

RE: Someone's snuck a trojan into your site

I find this hard to believe since all the maps are pictured, compiled and posted by admins.

Oh, and your using McAfee, so I wouldnt believe it 100%.....i've tried it before, and I found AVG(free) and NOD32(trial) BOTH find more than McAfee can. And McAfee also sometimes picks up stuff that isnt really a virus/trojan.

***THIS POST HAS BEEN EDITED***

Update in whenever I dont feel lazy.

11/12/06 15:44

One Swordsman

Posts: 1812
Joined: 11/21/2005
Credibility: 2878 pts

RE: Someone's snuck a trojan into your site

QUOTE

I find this hard to believe since all the maps are pictured, compiled and posted by admins.

No it's true, I've had the same issue, and the guys at the WoW site have been complaining about it - including the admins.

I have a flannel to wash my face
if it gets mucky i feel disgraced.
Do you like horlicks, do you like chips.
I'v got 100 pairs of lips
- Gotta love the Warlock forums xD

11/12/06 15:46

Xaviak

GameAmp Staff
Posts: 419
Joined: 02/25/2006
Credibility: 702 pts

RE: Someone's snuck a trojan into your site

QUOTE

I find this hard to believe since all the maps are pictured, compiled and posted by admins.

No it's true, I've had the same issue, and the guys at the WoW site have been complaining about it - including the admins.

We got Trojans on the WoW side too? :S

AmpWoW<-- Check it out if you need to find something. ^^
WoW@GA is looking for new staffers! More info HERE!

11/12/06 15:48

mwpeck

GameAmp Staff
Forum Moderator
Posts: 3212
Joined: 11/24/2005
Credibility: 2568 pts

RE: Someone's snuck a trojan into your site

QUOTE

I find this hard to believe since all the maps are pictured, compiled and posted by admins.

No it's true, I've had the same issue, and the guys at the WoW site have been complaining about it - including the admins.

interesting.....so someone has hacked the site and placed a few trojans? I wonder if Opera is that good cause I havnt picked up anything.(then again Opera has the most secure browser)

Update in whenever I dont feel lazy.

11/12/06 15:48

benjef

Posts: 910
Joined: 01/15/2006
Credibility: 819 pts

RE: Someone's snuck a trojan into your site

What do trojans do exactly cause i don wanna loose my Passwords >>

11/12/06 15:53

Xaviak

GameAmp Staff
Posts: 419
Joined: 02/25/2006
Credibility: 702 pts

RE: Someone's snuck a trojan into your site

QUOTE

What do trojans do exactly cause i don wanna loose my Passwords >>

I'm not sure at all but I think they're supposed to go all sneaky like to your comp and open ports so the nastier viruses and worms can get in?O.o

11/12/06 15:55

mwpeck

GameAmp Staff
Forum Moderator
Posts: 3212
Joined: 11/24/2005
Credibility: 2568 pts

RE: Someone's snuck a trojan into your site

All ya need to know about trojans.

Update in whenever I dont feel lazy.

11/12/06 16:00

binarydumb

Posts: 1396
Joined: 09/12/2005
Credibility: 1943 pts

RE: Someone\'s snuck a trojan into your site

First off: Welcome to Gameamp, The Ironwarrior!!

Thank you for giving us a heads up but I scanned the picture with 3 separate PC's (2 desktops plus my laptop) and could not detect this trojan you mentioned.

My gaming desktop is a 64bit rig using Avast. My 2nd desktop is uses XP Pro and uses AVG for its protection. My laptop runs on XP Pro with McAfee for its security.

I downloaded the picture on each of the 3 pc's and scanned the file in question. I came up with it being clean on all 3 tries. Could it be that it was your machine that was tainted? I don't want to trivialize anything with regards to this matter since it can be quite harmful in it's maliciousness. I also made sure that all 3 anti-virus programs were updated before I scanned.

Could you let us know what you find? Incidentally, I have all three PC's set to scan at least once a day in the wee hours of the morning. And so far, I have been lucky. Also I avoid using IE7 or IE6. I primarilly use Opera and Firefox.

Whatever the case may be, I am letting the powers that be know.

***THIS POST HAS BEEN EDITED***

11/12/06 16:02

Albino Monktress

Posts: 933
Joined: 04/09/2006
Credibility: 484 pts

RE: Someone's snuck a trojan into your site

i had a trojen the other day deleted itand hurd nothing else from it
and bianary im callin the police ur post number is 911

Albino Monktress Mo/N*-----Julie Bowmaster R/W*-----Glissa Algon E/Me*-----Chunin Kunoichi A/R*-----Albino Minion Fiend N/Mo-----Not So Albino Mes Me/*-----Albino *** (PVP)

Check out my Fan Fic^ Sig made by me!
LEADER of [ToD]Togo Dies Always accepting new members :)
Disclamer My spelling SUXS

11/12/06 16:11

Sunrunner

Posts: 537
Joined: 09/27/2005
Credibility: 1299 pts

RE: Someone's snuck a trojan into your site

i use mcafee, norton, and zonealarm, so if anything so much as looks at my computer the wrong way i find it and i have never had a problem with gameamp.

tho it is scary to realize that if a corrupt admin stuck a keylogger or something on the site how many people would be affected

11/12/06 16:28

KnightHawk81

GameAmp Staff
Posts: 254
Joined: 08/22/2006
Credibility: 166 pts

RE: Someone's snuck a trojan into your site

I'll poke through it too. I've got several AV/Syware programs I can run it through. I would like to bring up a possibility that hasn't been brought up...Ads. While Google (and other ad promoters) screen the ads placed, they don't always catch everything. I have 8-10 sites I've created on Angelfire for various games/personal reasons. Since I can't afford to pay a monthly for each one, I run their free service, which means Angelfire placed Ad Javascripts. My Dad and Stepmother check my personal site on occasion. Well, long story short, one of the ads in the Angelfire rotation contained a NASTY virus...and my Dad was forced to re-format to fix it.\

I'm NOT saying that's what it was, just bringing up the possibility.

If Death takes me now I shall not fear, for I have lived and life is good.

WoW Client Download Support Page

11/12/06 16:30

Defense Offenise

Posts: 20
Joined: 06/05/2006
Credibility: 10 pts

RE: Someone's snuck a trojan into your site

guys, do not be sure my cousions cpu can track and find trojons pretty easy seeing he works on stuff like this. if some did sneak a trojon on it ill have him take it off and track who put it on. ok hows that i hope theres not a trojon well ill be calling ym cousion soon so ill have him tae a look at this problem

11/12/06 16:33

Julia Heartilly

Posts: 2164
Joined: 11/26/2005
Credibility: 2882 pts

RE: Someone's snuck a trojan into your site

QUOTE

I'd run a CRC or MD5 check on your virus scanner if I were you cause it looks to me that that is what is infected and being played with, not the map.

Apart from the fact that malicious code .jpg format is both relatively very hard to accomplish and even if done hasn't been done in such a way it was anywhere near hard to detect - at least not in the past time since the rise of polymorphic viruses.
Also I ran scans on it with Webroot Spy Sweeper, NOD32, McAfee Enterprise and Norton AV Corporate (which is no where near similar to standard Norton AV btw) and none detected anything.

11/12/06 16:39

The Ironwarrior

Posts: 6
Joined: 11/11/2006
Credibility: 39 pts

RE: Someone\\\'s snuck a trojan into your site

I'm not sure either, I just know that each time I click the "Factions Map" my AV comes up with a warning regarding the trojan, and that it's been cleaned. If I keep the picture up, it'll put itself onto my system again, I get the warning, it's cleaned and the cycle continues. Once I close the pic, I scan my system and the messages stop.

I've checked it out and it appears a simple, not so old code that can be put most anywhere and pictures are pretty typical it seems :/

A few links regarding the trojan it found:
http://vil.nai.com/vil/content/v_vul23004.htm

http://www.microsoft.com/technet/security/...n/MS06-014.mspx

I can't explain how it's coming clean on your side or anything like that, but being that I only get the messages when I open the map, I can't imagine it otherwise coming from my computer?

I just meant to help others from being infected, if it truly is this trojan.

EDIT:
Reading those links again it seems that people can update their MDAC (?) to a version 2.8 to completely avoid this issue? Is that the case here, it only effects people 2.7 or below? I'm not a techie in this, so I can't even say what MDAC is really or if mine, yours or other users have 2.7 or 2.8 :)

***THIS POST HAS BEEN EDITED***

11/12/06 16:45

One Swordsman

Posts: 1812
Joined: 11/21/2005
Credibility: 2878 pts

RE: Someone's snuck a trojan into your site

Just as a confirmation, however mine doesn't come up at a specific moment, just randomly.

***THIS POST HAS BEEN EDITED***

I have a flannel to wash my face
if it gets mucky i feel disgraced.
Do you like horlicks, do you like chips.
I'v got 100 pairs of lips
- Gotta love the Warlock forums xD

11/12/06 17:11

The Ironwarrior

Posts: 6
Joined: 11/11/2006
Credibility: 39 pts

RE: Someone's snuck a trojan into your site

That's it! :)

11/12/06 17:14

mwpeck

GameAmp Staff
Forum Moderator
Posts: 3212
Joined: 11/24/2005
Credibility: 2568 pts

RE: Someone's snuck a trojan into your site

Ok, well, i decided to use 1 of those online virus-scanner things and, well, Here's the results. As you can see, it used the most popular ones(AVG, NOD32, McAfee, Kaspersky, etc.) and a lot of lesser-known ones. And it came up clean with all of them. I'm gonna say the file is clean. If anything, its a false-positive in McAfee(which I KNOW has happened before), or something on your computer already.

EDIT: Yes, I know those things arnt 100% accurate, but I find them to be more accurate than ANY single scanner.

***THIS POST HAS BEEN EDITED***

Update in whenever I dont feel lazy.

11/12/06 17:16

KnightHawk81

GameAmp Staff
Posts: 254
Joined: 08/22/2006
Credibility: 166 pts

RE: Someone\\\\\\\\\\\\\\\'s snuck a trojan into your site

Using Firefox 2 I get nothing...

In IE-7, accessing the Nightfall Map Page and the Factions Map Page both give me a pop-down alert stating:

QUOTE

This website wants to run the following add-on: "Microsoft Data Access - Remote Data Services Dat..." from "Microsoft Corporation". If you trust the website and the add-on and want to allow it to run, click here.

Prophecies Map Page does not give me this pop-down.

Running the Map .jpgs through Norton, Ad-Aware, and Spyware Doctor gave me nothing.

Just a quick Edit: Someone mentioned the WoW portion of the site so I popped over there in IE-7 real quick. The main page gives me the same pop-down alert. So... I went to EVERY other game site located within Gameamp's drop-down menu. Only WoW's main page and the GW Nightfall & Factions map pages give me that alert. What is the same between the pages?

***THIS POST HAS BEEN EDITED***

If Death takes me now I shall not fear, for I have lived and life is good.

WoW Client Download Support Page

11/12/06 17:27

Maqulvent

Posts: 854
Joined: 09/05/2006
Credibility: 805 pts

RE: Someone's snuck a trojan into your site

little off topic, but nice background one swordsman

Cool Links:
• AMP Updater
• WoW Profile

• Making a Hoppie

• Screenshots, Images and Signatures by Evil Geek

11/12/06 17:27