There is a TROJAN on the EG Website
- Thread starter Thorn23TX
- Start date
Metal_Machientje
Member
McAfee VirusScan Enterprise 7.1.0 is the software that alerted on the trojan. I looked in the logs for the exact message/trojan, but unfortunately I could not find it, and I'm not wild about opening the site again just to get the name. 
Edit to say that it was the main page (http://www.evergrey.net/index2.php) that apparently has the trojan on it.
Edit to say that it was the main page (http://www.evergrey.net/index2.php) that apparently has the trojan on it.
What the heck, hm. I don't get any messages so let me see what the heck is going on with this sucker. If someone gets a reference to the trojan name/file name in question please post it. I am wondering if it is a false positive being triggered by something on there.
livingsteele
Swordswoman
I just got a msg that it's a VBS called PSyme or something like that. Mcafee info stated it was a low risk virus that comes from irc or chat type programs.
Havermout
Focused
Deron,
The script is trying to connect to http://outcnt.com/dx/gc2/... in the current browser.
McAfee indicates:
File: sp352452548[1].php
Name Trojan: VBS/Psyme
The script is trying to connect to http://outcnt.com/dx/gc2/... in the current browser.
McAfee indicates:
File: sp352452548[1].php
Name Trojan: VBS/Psyme
Thanks folks, I deleted the trojan (javascript) and now to figure out how the HELL they did that.
Lodbrokk
Recreated into Day
i 've got infected by trojan...i suspect that comes from EG site cause i visited it severeal times before seeing this topic..
my avast tells me that i have trojan..but i can't kill it...i press delete but announcement keeps goin' and goin'...how to kill this ulysses's piece of crap?
my avast tells me that i have trojan..but i can't kill it...i press delete but announcement keeps goin' and goin'...how to kill this ulysses's piece of crap?
livingsteele
Swordswoman
Seems like the virus is back. I just got it again and it closes down the EG website after giving me the same notification.
Havermout
Focused
Lodbrokk
Recreated into Day
EJC_74
New Metal Member
My NIS 2006 found this as well, just said "Downloader" type file & that it was a virus! It was quarantined & deleted! NIS RULES!
Perhaps the webmaster needs to check the firewall on the server(s)s for this site, & any other security on it, before this asshole crashes the site on EG! Not to mention infecting the systems of all the visitors to it!
Perhaps the webmaster needs to check the firewall on the server(s)s for this site, & any other security on it, before this asshole crashes the site on EG! Not to mention infecting the systems of all the visitors to it!
i check the EG page about three times a week, and this was the first time today that Norton blocked an intruder. since i am a complete noob im not able to say if it was a worm or something.. 
Got it again, I thought I had those scum blocked grrr. Please send me a PM if you notice it again please.
