a problem: /log2.soft.cn.yahoo.com/cnsmin/_coop/cn
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=25904
Printed Date: 03 April 2026 at 11:29am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: a problem: /log2.soft.cn.yahoo.com/cnsmin/_coop/cn
Posted By: edizz
Subject: a problem: /log2.soft.cn.yahoo.com/cnsmin/_coop/cn
Date Posted: 28 June 2008 at 11:46am
|
in some posts i see this text "< ="http://log2.soft.cn.yahoo.com/cnsmin/_coop/cnsminex_empty.htm?sc=ystat" style="display: none;" height="0" width="0">" i searched it on google and i saw some sites have this problem when i push the Tab key this text appears in post ------------- http://www.forumselcuk.com" rel="nofollow - selçuk forum |
Replies:
Posted By: WebWiz-Bruce
Date Posted: 30 June 2008 at 8:48am
|
Looks like you may have something running on your computer that is injecting javascript into your posts. The security filters will remove most of it that could do any harm, but you should checkout your computer to try and find what is coursing it. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: Zwaf
Date Posted: 19 July 2008 at 5:08pm
|
Hi, I got the same problem although it's a little more complicated. When I try to connect to a random site it starts downloading content from log2.soft.cn.yahoo.com/csmin/_coop as well. Virusscanner reported it as VBS.Psyme and tells me it removed it every 10 secondes. The bigger problem is that the virus is spreading in an alarming rate. It spread through our network (10-20 computers) in about 15 minutes and I'm getting reports of people someone else who seem to have the same problem. Every virusscanner reports it as some sort of Trojan downloader (with different names) but all fail to remove it. Could anyone give me some advice here before the virus spreads too far? I removed all temporary files with the help of a program called DSS.exe but it failed. The virus appears to be a jscript trojan or something. Thanks http:// - EDIT: Just like the first poster reported, in posts such as these it automatically pastes the following text:
http://log2.soft.cn.yahoo.com/cnsmin/_coop/cnsminex_empty.htm?sc=ystat" width=0 height=0 |
Posted By: 123Simples
Date Posted: 19 July 2008 at 5:17pm
|
Hiya I'm not sure if this information will help, but try http://www.symantec.com/security_response/writeup.jsp?docid=2004-040115-2242-99&tabid=2 - Symantecs website which explains VBS.Psyme, and shows how to http://www.symantec.com/security_response/writeup.jsp?docid=2004-040115-2242-99&tabid=3 - remove it from infected computers It may be that your entire network is infected and comprimised in some way ------------- http://www.123simples.com/" rel="nofollow - Visit 123 Simples Web Design |
Posted By: Zwaf
Date Posted: 19 July 2008 at 5:39pm
|
Since I aint got Symatec antivirus solutions I only tried the 4th step.. but I failed to locate the registry key since it isnt there.
Strangly enough it also doesnt mention Vista in the affected list, but some of the PC's in this network do use it and are infected.
|
Posted By: 123Simples
Date Posted: 19 July 2008 at 5:52pm
Looking at this forum page now, it seems that you aren't the only one having problems. When you had typed your replies they were just normal, but everything seems to be turning into a "link" for some reason  Example: Your post at 5.08pm on here was just normal but now:  And its all turned to one big link to a forum file on Bruces forum Most strange I use vista too but what safeguards (security) have you got in place? ------------- http://www.123simples.com/" rel="nofollow - Visit 123 Simples Web Design |
Posted By: WebWiz-Bruce
Date Posted: 21 July 2008 at 8:57am
|
It does appear that your computer is infected with a virus Zwaf. Each time you post it attempts to inject code into your forum posts to try and spread the virus to other computers through their web browser when they read your post. Luckily Web Wiz Forums is very well protected against malicious code injections, so all, the harmful stuff is stripped out just leaving a plain text link. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: 123Simples
Date Posted: 21 July 2008 at 7:08pm
And I thought it was just my brain  well done Bruce 
------------- http://www.123simples.com/" rel="nofollow - Visit 123 Simples Web Design |