JS TrojanDownloader on opkg.org?
Hi.. I was just going to have a look at something on opkg.org when my NOD32 came up with this warning (work PC ;) ): -8 12.05.2010 11:50:48 HTTP filter filehttp://www.opkg.org/ JS/TrojanDownloader.Pegel.AP trojan connection terminated - quarantined -8 Does any of you experience that, too? I've been on the site before so this is new.. either a new false positive or a newly installed JS on the site.. Cheers.. -- Thomas -~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~ When someone says 'I want a programming language in which I need only say what I wish done,' give him a lollipop. - Alan J. Perlis -~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~ signature.asc Description: OpenPGP digital signature ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
Re: JS TrojanDownloader on opkg.org?
On Wed, May 12, 2010 at 7:55 PM, Thomas Franck thomas.fra...@gmx.com wrote: Hi.. I was just going to have a look at something on opkg.org when my NOD32 came up with this warning (work PC ;) ): -8 12.05.2010 11:50:48 HTTP filter file http://www.opkg.org/ JS/TrojanDownloader.Pegel.AP trojan connection terminated - quarantined -8 Not a false positive. opkg.org definately has had malicious code added to it after the /html tag. The javascript attempts to access http://crewamerica.ru which Norton verifies is a malicious site http://safeweb.norton.com/report/show?name=crewamerica.ru ___ Openmoko community mailing list community@lists.openmoko.org http://lists.openmoko.org/mailman/listinfo/community
