Jump to content

Welcome to CyanogenMod

Welcome to our forum. Like most online communities you must register to post, but don't worry this is a simple free process that requires minimal information for you to signup. Be a part of the CyanogenMod Forum by signing in or creating an account. You can even sign in with your Facebook or Twitter account.
  • Start new topics and reply to others
  • Subscribe to topics and forums to get automatic updates
  • Get your own profile and make new friends
  • Download files attached to the forum.
  • Customize your experience here
  • Share your CyanogenMod experience!
Guest Message by DevFuse
 

Does this forum have a virus?


  • Please log in to reply
125 replies to this topic

#1 Tyrell Corp

Tyrell Corp
  • Members
  • 3 posts
  • Country:uk
  • Device Model:Galaxy Nexus
  • MOD Version:Modoco
  • Recovery Image:ClockworkMod

Posted 06 January 2012 - 10:30 PM

When I visited this forum today my Kaspersky internet security popped up with a virus / trojan warning!!!

https://picasaweb.go...feat=directlink



https://picasaweb.go...feat=directlink



False perhaps?

#2 RejZoR

RejZoR
  • Members
  • 64 posts
  • Country:si
  • Device Model:HTC Wildfire
  • MOD Version:7.2 RC1
  • Recovery Image:ClockworkMod

Posted 06 January 2012 - 11:02 PM

There is clearly something going on. avast! is also warning for this link:
forum.cyanogenmod.com/uploads/av-206846.png

Both, Web Shield and Script Shield (JS:Redirector). Admins should sweep the code to see if there was something injected...

#3 SatanR1

SatanR1

    I'm a hustler baby...!

  • Administrators
  • 2,001 posts
  • Twitter:SatanR1
  • LocationLondon, Earth 2026
  • Country:uk
  • Device Model:Samsung GSII
  • MOD Version:Bleeding Edge
  • Recovery Image:ClockworkMod

Posted 06 January 2012 - 11:39 PM

This is being investigated and should have been resolved. Please let me know if any more instances like this arise.

#4 Puggered

Puggered
  • Donators
  • 143 posts
  • LocationScotland
  • Country:uk
  • Device Model:Galaxy S
  • MOD Version:Nightly build # 181
  • Recovery Image:ClockworkMod

Posted 07 January 2012 - 01:02 AM

Both my pc's have reported trojan horses too

#5 Tyrell Corp

Tyrell Corp
  • Members
  • 3 posts
  • Country:uk
  • Device Model:Galaxy Nexus
  • MOD Version:Modoco
  • Recovery Image:ClockworkMod

Posted 07 January 2012 - 10:00 AM

View PostSatanR1, on 06 January 2012 - 11:39 PM, said:

This is being investigated and should have been resolved. Please let me know if any more instances like this arise.

Kaspersky is still giving me a virus warning pop up when I visit this site!!!

#6 RejZoR

RejZoR
  • Members
  • 64 posts
  • Country:si
  • Device Model:HTC Wildfire
  • MOD Version:7.2 RC1
  • Recovery Image:ClockworkMod

Posted 07 January 2012 - 08:37 PM

Same here...

#7 bassmadrigal

bassmadrigal
  • Moderators
  • 4,058 posts
  • LocationRamstein Air Base, Germany
  • Country:de
  • Device Model:Nexus One/HTC One X
  • MOD Version:Nightlies/Stock
  • Recovery Image:ClockworkMod

Posted 08 January 2012 - 04:56 AM

@SatanR1 I am getting popups with Avast at home. After the above file was resolved, I now get warnings about the file http://forum.cyanoge...nate/donate.png. I wonder if this has anything to do with the new donation thing that shows under some users profiles. This image has always been unavailable for me to see, and now it is throwing up virus warnings...

Just food for thought. If you need help diagnosing this, you know how to reach me ;)

#8 RejZoR

RejZoR
  • Members
  • 64 posts
  • Country:si
  • Device Model:HTC Wildfire
  • MOD Version:7.2 RC1
  • Recovery Image:ClockworkMod

Posted 08 January 2012 - 08:15 AM

Now it's a different link:
http://forum.cyanogenmod.com/public/style_images/CyanogenMod/donate/donate.png

It would be wise to thoroughly check the forum software because something is badly wrong about this redirector thing.

Edited by RejZoR, 08 January 2012 - 08:16 AM.


#9 heavy_metal_man

heavy_metal_man
  • Members
  • 88 posts
  • LocationCapital Wasteland
  • Country:uk
  • Device Model:htc wildfire
  • MOD Version:7.2
  • Recovery Image:ClockworkMod

Posted 08 January 2012 - 11:12 AM

bump. using avast and keep getting the above pop up warning :(

#10 bassmadrigal

bassmadrigal
  • Moderators
  • 4,058 posts
  • LocationRamstein Air Base, Germany
  • Country:de
  • Device Model:Nexus One/HTC One X
  • MOD Version:Nightlies/Stock
  • Recovery Image:ClockworkMod

Posted 08 January 2012 - 06:21 PM

SatanR1 is aware of it and is working on it.

#11 Section12

Section12
  • Members
  • 9 posts
  • LocationBehind you...
  • Country:us
  • Device Model:HTC Glacier
  • MOD Version:CM7
  • Recovery Image:ClockworkMod

Posted 09 January 2012 - 04:52 PM

Avast, while being overall decent, is known for tons of false-positives. More than even AVG... but AVG sucks, so take that as you will.

I am getting no warnings here with Avira.

#12 RejZoR

RejZoR
  • Members
  • 64 posts
  • Country:si
  • Device Model:HTC Wildfire
  • MOD Version:7.2 RC1
  • Recovery Image:ClockworkMod

Posted 09 January 2012 - 09:02 PM

Nonsense. avast! is not "well known" for lots of false positives.

#13 The Wiz000

The Wiz000
  • Members
  • 2 posts
  • LocationTexas
  • Country:us
  • Device Model:HTC Sensation 4G
  • MOD Version:none
  • Recovery Image:Stock

Posted 12 January 2012 - 08:50 PM

I am new.Looking for mod info. As for the AV pop up warning... i have had no such issue. i am using HTML only view of this site. NO scripts allowed. ok i am looking for some advice about what i should do to help me along. I am rooted, used superoneclick (love this program) bought titanium backup pro. and have not used it yet. Do i need clockworkmod?

Edited by The Wiz000, 12 January 2012 - 08:54 PM.


#14 Section12

Section12
  • Members
  • 9 posts
  • LocationBehind you...
  • Country:us
  • Device Model:HTC Glacier
  • MOD Version:CM7
  • Recovery Image:ClockworkMod

Posted 12 January 2012 - 10:34 PM

View PostRejZoR, on 09 January 2012 - 09:02 PM, said:

Nonsense. avast! is not "well known" for lots of false positives.

You're entitled to your opinion. No one is stopping you.

#15 ivdok

ivdok
  • Members
  • 144 posts
  • Twitter:ivdok
  • LocationVolgograd, Arctic sh*thole, called "Russia".
  • Country:ru
  • Device Model:LG P500 「Optimus One」
  • MOD Version:Official CM7 Nightly #4 ----- CyanogenModNerfed - my WIP firmware for quick installation without needing of Internet nor Market
  • Recovery Image:Amon_RA

Posted 15 January 2012 - 07:46 AM

ESS 4, looks clean from there.

#16 DanTheMan827

DanTheMan827
  • Members
  • 51 posts
  • Country:us
  • Device Model:HTC Desire (CDMA)
  • MOD Version:6.1.0RC2
  • Recovery Image:ClockworkMod

Posted 16 January 2012 - 03:07 AM

I just got a warning about the Phoenix Exploit with AVG today

#17 gearsh1fter

gearsh1fter
  • Members
  • 115 posts
  • LocationNorth Carolina
  • Country:us
  • Device Model:htc desire cdma
  • MOD Version:7.2 RC1 [235mhz/1.113ghz]
  • Recovery Image:ClockworkMod

Posted 16 January 2012 - 05:57 AM

antivirus causes problems in the first place.

#18 jeagoss

jeagoss

    Security Bawse

  • Administrators
  • 108 posts
  • Twitter:jeagoss
  • Country:us
  • Device Model:T-Mobile G2
  • MOD Version:9.0.0-alpha
  • Recovery Image:ClockworkMod

Posted 16 January 2012 - 09:32 AM

All of the code for www / wiki / forum.cyanogenmod.com has been downloaded, scanned for viruses, and checked over for bad code.  As it stands as of 01:24am Pacific Standard Time, the codebase is clean and so are the uploaded images.  These scans were performed by TrendMicro Internet Security, Microsoft Security Essentials, Norton Internet Security, AVG Antivirus, and Malwarebytes Antimalware.  The code was diffed against their respective sources to make sure no modifications were made outside of what we have made manually.  Anything different was verified.

#19 ivdok

ivdok
  • Members
  • 144 posts
  • Twitter:ivdok
  • LocationVolgograd, Arctic sh*thole, called "Russia".
  • Country:ru
  • Device Model:LG P500 「Optimus One」
  • MOD Version:Official CM7 Nightly #4 ----- CyanogenModNerfed - my WIP firmware for quick installation without needing of Internet nor Market
  • Recovery Image:Amon_RA

Posted 16 January 2012 - 04:49 PM

False positives. Deal with it - today's heuristics are marketing-targeted today, and not effective. If you're aware of something, send it to your vendor of antivirus software for analysis.

#20 Inferno986retur

Inferno986retur
  • Members
  • 41 posts
  • LocationGloucestershire
  • Country:uk
  • Device Model:Samsung Galaxy S II
  • MOD Version:9 (Codeworx-nightly)
  • Recovery Image:ClockworkMod

Posted 16 January 2012 - 10:09 PM

Hey SatanR1 (You must tell how you got that username :D),

I also got an error from my AVG it referred to something called a Phoenix Root Kit 269 (or something close to that at least).

I hope I helped a little! :)