Contact   Imprint   Advertising   Guidelines

Trojan

Forum for kitesurfers
nothing2seehere
Very Frequent Poster
Posts: 717
Joined: Fri Jun 27, 2014 3:25 pm
Kiting since: 2020
Weight: 75
Local Beach: Calshot, Hayling, Meon - Southcoast UK
Gear: Duotone Rebel, Ocean rodeo jester, Airush Ultra, shinn boards
Brand Affiliation: None
Has thanked: 24 times
Been thanked: 42 times

Re: Trojan

Postby nothing2seehere » Mon May 11, 2020 2:12 pm

Reading through your ticket, it seems that there is a file somewhere within this site that matches the file signature of a php file that executes a trojan.

I 'think' its saying the file is called
'4e13a649131d78dc7cea6ab30c1b176d2e1826ed8d8b684a94eaa07abef478b7
3312404.jpg'

but could be a combination of one or both parts. Best guess is that this is a trojan designed to get a buffer overflow based on either the carriage return in the name of the file.

HALF
Medium Poster
Posts: 122
Joined: Fri May 04, 2018 2:50 pm
Kiting since: 2018
Gear: 9m Cabrinha Radar (2016), 12m Cabrinha Convert(2010), 9m Flysurfer Speed5(2017), 14m Airush Ultra v2 (2019), 15m Flysurfer Soul(2018), 19m Spleene X(2010)
Has thanked: 16 times
Been thanked: 21 times

Re: Trojan

Postby HALF » Mon May 11, 2020 8:03 pm

the first one is the hash of the file, the second one is the filename
it is detected as php, so probably someone uploaded a image file that has php code as part of the metadata, the php interpreter is very stupid and if they manage to somehow trick the interpreter into reading the image file it will execute the code that is in it

so long story short, if this is the real report, just find the file with the given name and delete it, also check who uploaded it.
These users thanked the author HALF for the post:
jjm (Tue May 12, 2020 4:41 am)
Rating: 8.33%

badgb21
Very Frequent Poster
Posts: 635
Joined: Mon Jun 16, 2003 8:55 am
Favorite Beaches: High Pines - Duxbury
Chapin/Mayflower Cape Cod
Langebaan
Cape Verde
Gear: CrazyFly, Cabrinha, Concept X Ruler Split.
Brand Affiliation: None. - The words of the prophets are written on the forum “walls”-
Location: Hants UK
Has thanked: 34 times
Been thanked: 23 times

Re: Trojan

Postby badgb21 » Thu May 14, 2020 7:03 pm

Toby please check out this link from Malwarebytes
Something isn’t totally right here

https://forums.malwarebytes.com/topic/2 ... eforumcom/
These users thanked the author badgb21 for the post:
Toby (Thu May 14, 2020 7:18 pm)
Rating: 8.33%

User avatar
Toby
Very Frequent Poster
Posts: 40659
Joined: Mon Sep 24, 2001 1:00 am
Kiting since: 2000
Weight: 98 kg
Local Beach: Cumbuco, Brazil
Barra do Cauipe, Brazil
Favorite Beaches: same
Style: Airstyle
Gear: Rebel 2015 18
Brand Affiliation: None.
Location: World (KF Admin)
Has thanked: 288 times
Been thanked: 518 times
Contact:

Re: Trojan

Postby Toby » Mon May 18, 2020 11:20 pm

badgb21 wrote:
Sat May 02, 2020 1:32 pm
Just put Malwarebytes on my pc and it’s blocking access access to the forum saying blacked due to a Trojan

Can anyone advise?
We deleted the file.

Not sure if I have to inform them now or if their software keeps checking back automatically?

badgb21
Very Frequent Poster
Posts: 635
Joined: Mon Jun 16, 2003 8:55 am
Favorite Beaches: High Pines - Duxbury
Chapin/Mayflower Cape Cod
Langebaan
Cape Verde
Gear: CrazyFly, Cabrinha, Concept X Ruler Split.
Brand Affiliation: None. - The words of the prophets are written on the forum “walls”-
Location: Hants UK
Has thanked: 34 times
Been thanked: 23 times

Re: Trojan

Postby badgb21 » Tue May 19, 2020 2:53 pm

Hi
I have informed them.
I assume they will re check and advise.
I’ll let you know if they post anything or if the block is lifted.

Maybe it wouldn’t hurt for you to advise them too.
These users thanked the author badgb21 for the post:
Toby (Tue May 19, 2020 3:42 pm)
Rating: 8.33%

badgb21
Very Frequent Poster
Posts: 635
Joined: Mon Jun 16, 2003 8:55 am
Favorite Beaches: High Pines - Duxbury
Chapin/Mayflower Cape Cod
Langebaan
Cape Verde
Gear: CrazyFly, Cabrinha, Concept X Ruler Split.
Brand Affiliation: None. - The words of the prophets are written on the forum “walls”-
Location: Hants UK
Has thanked: 34 times
Been thanked: 23 times

Re: Trojan

Postby badgb21 » Thu May 21, 2020 10:47 am

Has been cleared - all good now.

User avatar
Toby
Very Frequent Poster
Posts: 40659
Joined: Mon Sep 24, 2001 1:00 am
Kiting since: 2000
Weight: 98 kg
Local Beach: Cumbuco, Brazil
Barra do Cauipe, Brazil
Favorite Beaches: same
Style: Airstyle
Gear: Rebel 2015 18
Brand Affiliation: None.
Location: World (KF Admin)
Has thanked: 288 times
Been thanked: 518 times
Contact:

Re: Trojan

Postby Toby » Thu May 21, 2020 10:55 am

Thanks, happy to hear 👍🏻


Return to “Kitesurfing”

Who is online

Users browsing this forum: Bing [Bot], Google [Bot], jakemoore, knot_moving, LONG, Yahoo [Bot] and 16 guests