www.jimgilmour.net should be safe again

[sagalady]

I've just spent the afternoon helping Daryl and cleaning up the site from the trojan/virus. It should be safe to visit it now.

Edited to add: I need to learn how to spell.

[Timmer]

I was on the site a couple of days ago. Are you saying the virus was hurting just the site or was it transfering to other computers.
I haven't seen anything wrong with mine.
Did you spell something wrong?

[ontheloose]

Hi

The last time I visited Jim's site my anti virus scan picked up a virus and thankfully deleted it straight away!!!

[sagalady]

After each closng html tag was a javascript embedded. That was what kicked off antivirus software and other things. When I went on it first time I had a google alert saying thatthe site was classed as malignant to visit.

I downloaded the entire site (thanks to JIm G and Patrick Eggen) and cleaned off the malignant java script by hand from each page, then uploaded the clean version.

I've checked the source files a couple of times since and it hasn't come back.

I haven't seen this type of "infection" in many years.

Now, I'm a mac user so mine "shouldn't" have any problems. I would appreciate if any windows users stil have their antivirus and spyalert software still screaming at them when going on the site as of now.

[sagalady]

Hum. Just found out that someone is still getting warnings for spyware on the site. If anyone else is getting the same since I uploaded the site back on there, please let me know.

Cheers
Sagalady

[SAGA-NORWAY]

Still getting them.

[Timmer]

Sagalady:
I'm getting a message for some MicroSoft issue. It doesn't say out right to me that it is virus realted. Hope that helps.
Timmer

[sagalady]

Bugger. Back to the drawing board. Had a good time tonight?

Edited to add:

Or maybe I don't have to go back to the drawing board The host has jus responded that they didn't see any issues. But they did suggest to clear the browser cache and cookies before accessing the site again.

So try that and please let me know what the end result is.

[jeeep]

FYI the virus was called "Downloader"

http://www.symantec.com/security_respon ... 99&tabid=1

Noticed that earlier this week but forgot to inform ...

Doesn't seem there anymore but Google has a nice warning in the serach results

[sagalady]

FYI the virus was called "Downloader"

http://www.symantec.com/security_respon ... 99&tabid=1

Noticed that earlier this week but forgot to inform ...

Doesn't seem there anymore but Google has a nice warning in the serach results

Thanks Jeep!! Great to know. I suggest anyone who was on the site before I cleaned it should follow instructions on the symantec site and run a cleaning session. Especially if you don't have antivirus.

As for Google, it will probably take a couple of weeks before Google actually changes that. *sigh*

[Timmer]

I do have an antivirus but did get the downloader a while back. I'll run the cleanup and see what happens. The antivirus software finds it but says it can't delete it!