Whatbird.com

The main Blogs page also has the bad iframe.

You'll probably want to do a text search of every page on the site.

plethora:

The main Blogs page also has the bad iframe.You'll probably want to do a text search of every page on the site.

 

OK i pulled that one out, it was in two files. We did do a text search of the entire drive and it still did not find these two, which makes me believe that  windows search for text in a file is not adequate. I have AVG running and will be checking all our pages again.

---

Mitch Waite

Bizarre.  I just noticed it's also on the Downloads page.

Hopefully that's it. :-)

Can you tell me what virus checker gave you that notice? I went to the download page and with AVG Free I dont get any alert.

---

iBird Explorer: Finally a field guide as light as a feather. See it at http://www.ibird.com

Nothing gave me an alert.  But the last line in the source code sends you to http://bigtopmanagement.cn, which is a bad site.  I just quickly checked all the main pages for that link.

Edit: Just tried it again and Symantec alerted.  It appears the bigtop site doesn't try and send a virus everytime -- only sometimes.

plethora:

Nothing gave me an alert.  But the last line in the source code sends you to http://bigtopmanagement.cn, which is a bad site.  I just quickly checked all the main pages for that link.

Edit: Just tried it again and Symantec alerted.  It appears the bigtop site doesn't try and send a virus everytime -- only sometimes.

 

OK I found it and deleted it. I dont get why my Norton is not alerting me.

---

iBird Explorer: Finally a field guide as light as a feather. See it at http://www.ibird.com

Just logged in for the first time in a few days. Got no virus warning. Good Job Mitch!!!!

---

Luke 12:6
Are not five sparrows sold for two pennies? And not one of them is forgotten before God.

Great. We used a program called agent ransack to search for problem files.

---

iBird Explorer: Finally a field guide as light as a feather. See it at http://www.ibird.com

Mitchell Waite:

Great. We used a program called agent ransack to search for problem files.

I had a weird Egret photo pop up while trying to open a post called hooded warbler on this post http://www.whatbird.com/forums/forums/thread/97270.aspx

Just a suggestion, but maybe you shouldn't publicize which programs you use to clean Whatbird systems on any of the forums, and make an internal safety program so right click is disabled, that way the hackers won't try to bypass your system or write new malware codes into pages. Just my $0.02 worth which ain't much.

---

"Watch the birdie."
Latest: Sage Thrasher, Ferruginous Hawk (Dark Morph).

Another trojan popped up. McAffee detected it as Exploit-PDF.b.gen.a

---

Luke 12:6
Are not five sparrows sold for two pennies? And not one of them is forgotten before God.

Really! Can you tell me what page it showed up on? 

---

Mitch Waite

goofy166:

Really! Can you tell me what page it showed up on? 

Sorry. I'm not sure now. I'm pretty sure I was in the forums, but not sure which one. It didn't show up this time however so you may have gotten it.

---

Luke 12:6
Are not five sparrows sold for two pennies? And not one of them is forgotten before God.

The one n2 told me about earlier was a Potentially Unwanted Program. PUP's aren't a virus but can damage running programs if you try to uninstall them. The PUP is called  - Obfuscated Script.f.gen trojan

Read about PUP's for McAfee http://www.mcafee.com/us/local_content/white_papers/wp_antispyware_shadesofgray.pdf

---

"Watch the birdie."
Latest: Sage Thrasher, Ferruginous Hawk (Dark Morph).