Web Wiz - Green Windows Web Hosting

  New Posts New Posts RSS Feed - user virus or forum issue ??
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

user virus or forum issue ??

 Post Reply Post Reply
Author
racekites View Drop Down
Newbie
Newbie


Joined: 18 November 2004
Status: Offline
Points: 33
Post Options Post Options   Thanks (0) Thanks(0)   Quote racekites Quote  Post ReplyReply Direct Link To This Post Topic: user virus or forum issue ??
    Posted: 30 September 2006 at 5:10pm

Hey guys...

running wiz 8 with sql server and today a user has started to report issues posting to the forum.

The persons posts are have the following text / sripts being included with them :

var PSpc="I.287303.1",PSsize="none"; < ="http://ntp.sysip.net/tag/2.js" =text/>

its not anything that i've seen before... ??

My immediate guess was a virus on the users machine, so they have run a virus check and some issues were found, however they are able to post on other forums without any issues, not sure if this is due to the text still being present and the forum not displaying it or if its something relating to webwiz...

here's the link to the guys posts...

http://www.racekites.com/forum/forum_posts.asp?TID=8819&PN=1


Any help or suggestion will be very much appreciated !!

Smile

Cheers
A




Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 30 September 2006 at 6:57pm
This will be internet security software on teh users machine injecting javascript into every page the user looks at in an attempt to prevent things like pop-up ads etc.
Back to Top
racekites View Drop Down
Newbie
Newbie


Joined: 18 November 2004
Status: Offline
Points: 33
Post Options Post Options   Thanks (0) Thanks(0)   Quote racekites Quote  Post ReplyReply Direct Link To This Post Posted: 30 September 2006 at 7:09pm

thanks Borg...

i've asked the user to submit forms on other pages of the site, there's a review submission page and there is no javascripts in the submission... it looks like its just coming up on the wiz forum... ?

Cheers
A
Back to Top
dpyers View Drop Down
Senior Member
Senior Member


Joined: 12 May 2003
Status: Offline
Points: 3937
Post Options Post Options   Thanks (0) Thanks(0)   Quote dpyers Quote  Post ReplyReply Direct Link To This Post Posted: 01 October 2006 at 2:06am
ntp.sysip.net is an ad server. If you examine the javascript in the full url, you'll see that it messes with the document elements and tags. Either it, or something blocking it is stepping on the WWF javascript, possibly by using a name that's used by wwf, and causing that line to appear in the rte text area.

It's a spyware problem, not a virus. I'd advise the user to run a couple of anti spyware programs (no one prog will catch everything).


Edited by dpyers - 01 October 2006 at 2:08am

Lead me not into temptation... I know the short cut, follow me.
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.