Virus in the Standoff website

[Starkey]

Is anyone else getting a Trojan horse antivirus alert when accessing http://standoff.solsector.net?

 

[ChrisReid]

Hmm.. yeah. AVG is saying it's Trojan Downloader.Small.61.AT

 

[Dundradal]

Checked now and no alert. I am running AVG 7.5

 

[KrisV]

index.htm had some suspicious javascript in it (see screenshot). It probably needs a specific environment (browser family, old version, weak security settings) to really do anything. Still, if you run Internet Explorer and have accessed the Standoff site in the last 3 weeks, it'd be a good idea to run a virus and malware scan.

I've removed the code and copied the existing file to index.html.infected if anyone wants to check it out. Someone with access to the Standoff account is infected. The file date was July 8, 4:59pm CDT.

 

[Eder]

Hmm, thanks Kris. Gonna run a scan here and ask the rest of the team to do the same.

 

[Delance]

Rollins: I’m trying, sir. But it’s like some kind of video-virus – or should I say, ‘worm’? Ah, this looks like a major debug.

 

[ChrisReid]

Caught another instance of it today (it probably went up at the same time as the original). Just another reminder to keep your anti-virus stuff up to date.