Page 1 of 2
Possible Virus on UMD - be alert!

Posted:
15 Jan 2010, 07:04
by SimonW
I, and others, reported a virus on the UMD.net opening page a couple of days ago...looked like some rogue site (seemed to be from India?) trying to download a trojan or malware, sent my Antivirus off the scale.
Messmaster said in their forum yesterday that it was fixed, but I've tried the site again this morning and the problem is still there.
Be aware and make sure your Antivirus is working and up-to-date!

Re: Possible Virus on UMD - be alert!

Posted:
15 Jan 2010, 12:39
by andy250
Messmaster is currently working on the problem, as long as you have upto date anti-virus, you will be ok. Though if your not sure, pm first and I'll email MM direct. When I go into the site Norton2009 goes into overdrive. Be aware it seems not to matter how you enter, so if you try and go into the forums direct, you most likely will still encounter the same problem.
As soon as its resolved. I'll let everybody know.
regards
Andy
Re: Possible Virus on UMD - be alert!

Posted:
15 Jan 2010, 13:59
by SimonW
Andy - thanks for the update.
While checking this morning, I disconnected my broadband immediately I realised the first UMD page was still downloading something. I then did a full virus scan and there was one trojan (the same name as the UMD one) and another virus lurking, which were not there on a scan last night.
I'm sure that Messmaster will smite the little buggers, but in the meantime perhaps it would be advisable for anyone who's recently visited UMD to run a full scan.

Re: Possible Virus on UMD - be alert!

Posted:
15 Jan 2010, 14:08
by muddywildfire
Defo be careful people!! Lots of reports of peoples computers running slowly! Etc.
Whilst its unimaginable that people are still not using Anti Virus software it appears those who don't are experiencing the most problems!
It may be worth giving UMD a Miss for a few days!
Re: Possible Virus on UMD - be alert!

Posted:
15 Jan 2010, 16:24
by BillShipton
Serves them right for having a thread about disliking the term 'sploshing' - haha!
Re: Possible Virus on UMD - be alert!

Posted:
15 Jan 2010, 20:11
by Ophite
I can positively confirm (as of 15/01/2010 @ 21:11) that umd.net currently has a trojan dropper identified by ESET as JS/Exploit.Pdfka/NPL (a piece of code which tries to send you a malicious PDF file, designed to try to infect your PC if you open it in either Adobe Reader or Acrobat—which your browser might do by default—or view it using the Adobe Reader plugin, which—again—your browser might do by default).
Best to avoid umd.net for now until it’s confirmed fixed.
Thanks for the warning!
Re: Possible Virus on UMD - be alert!

Posted:
15 Jan 2010, 21:24
by muckypup
BillShipton wrote:Serves them right for having a thread about disliking the term 'sploshing' - haha!
I knew all along your lack of computer skills was just a front! You're a hardcore hacker really aren't you?

Re: Possible Virus on UMD - be alert!

Posted:
15 Jan 2010, 22:15
by Mike Nomic
Ophite wrote:I can positively confirm (as of 15/01/2010 @ 21:11) that umd.net currently has a trojan dropper identified by ESET as JS/Exploit.Pdfka/NPL (a piece of code which tries to send you a malicious PDF file, designed to try to infect your PC if you open it in either Adobe Reader or Acrobat—which your browser might do by default—or view it using the Adobe Reader plugin, which—again—your browser might do by default).
Best to avoid umd.net for now until it’s confirmed fixed.
Thanks for the warning!
It also has one or more .B!Generic and .C!Generic trojans, each of which has varying prefixes, each of which also send malicious PDF files.
Sorry, but best avoided like the plague.
Mike.
Re: Possible Virus on UMD - be alert!

Posted:
15 Jan 2010, 22:20
by SimonW
Ophite - that must be the same trojan dropper when I had the problem.....I couldn't understand why the Adobe Reader icon was appearing on the toolbar and the antivirus programme kept warning me of "multiple threats" from a site with a .in suffix (India?).
I then noticed the broadband downloading something unexpectedly, so disconnected and did a full scan which showed the trojan and another virus. I think/hope that the antivirus has dealt with it, not noticed anything while I was using the PC for work today.
Thanks for info.
Re: Possible Virus on UMD - be alert!

Posted:
15 Jan 2010, 22:20
by sweetnpied
BillShipton wrote:Serves them right for having a thread about disliking the term 'sploshing' - haha!
^5 Bill. LOL. I thought that was among the silliest (is there such a word?) threads! Hey, I ADORE getting messy. Call it sploshing, wamming, whatever. Who the f cares????
Christina
Re: Possible Virus on UMD - be alert!

Posted:
16 Jan 2010, 09:00
by BillShipton
Do Trojans affect Apple Mac computers?
Re: Possible Virus on UMD - be alert!

Posted:
16 Jan 2010, 10:40
by Messfreak
On a lighter note

- An Irish Virus
- irish.jpg (62.86 KiB) Viewed 4151 times
Re: Possible Virus on UMD - be alert!

Posted:
16 Jan 2010, 11:40
by Big Al
BillShipton wrote:Do Trojans affect Apple Mac computers?
There aren't any known viruses that affect the operating system, but Javascript viruses that exploit the browser, or things like Adobe Acrobat can affect Macs in other ways.
Re: Possible Virus on UMD - be alert!

Posted:
16 Jan 2010, 12:45
by bosunbob
UMD seems to be running normally and my anti virus software isn't having a fit every time I log in now so I think the issue is resolved.
Re: Possible Virus on UMD - be alert!

Posted:
16 Jan 2010, 14:08
by the_dunker
BillShipton wrote:Do Trojans affect Apple Mac computers?
I know there were a few virus threats to macs last year but as the vast majority of computers are windows based the gangs tend to focus their attention on them as there's a greater chance of a return on their investment. I'd suspect that the trojans are probably windows specific but I wouldn't like to swear to that.