zanfankid - 24 May 2008 04:49 PM

joshpurple - 15 May 2008 01:50 PM

( I’d like to see the view cube replaced with the Tahni desktop buddy .  Sorry, sorry, I’m a doofus *hides in shadows* )

omg josh is back

Just for info: My AVAST detected an infected file opening this post from the Mail box.
(See Attachment) I don’t know for sure whether the Trojan is coming with the Smart Notification Tool but I thought it is better to inform you folks.

ivan

A quick google supports Avast - many reports of this deskmate tool being, or installing, a trojan.

I didn’t get a notification mail for the original post - due to exactly when I last read the thread I suppose - but I don;t see how following a link to a specific post on here could install anything. There’s nothing in that post other than test - no links that I can can see or find - unless it’s already been sanitised.

Steve Curley - 25 May 2008 03:33 AM

A quick google supports Avast - many reports of this deskmate tool being, or installing, a trojan.

I didn’t get a notification mail for the original post - due to exactly when I last read the thread I suppose - but I don;t see how following a link to a specific post on here could install anything. There’s nothing in that post other than test - no links that I can can see or find - unless it’s already been sanitised.

I just thought it is better to warn than not to warn Steve.
I certainly already killed it (The Trojan).

ivan

Absolutely - good call. I actually meant “the original post has been sanitised” because there’s nothing in it (now) which could cause a download of that particular nasty.

For the “idiots” among us, can you be explicit on what you did, how you discovered this, and what you are saying is infected?  Are you saying that by posting a picture of the Tanhi desktop image that Josh has inadvertantly uploaded a Trojan?

But Ivan’s scan suggests that the file is HostOE.dll, and that it’s in PF \ Hotbar \ Bin .  It seems to be adware from Zango, Inc.

Is this scan reporting that the original thread was reported from that location on a typically infected machine, or is it saying that the threat can be found there on Ivan’s machine?

Thanks.

Thank You Ivan, I certainly do not want to be passing any Trojans around.  Just to be clear, -it looks like that is Zanfankid’s post that you got an email notification about in your email that AVAST detected an infected file in?  (not actually my post that AVAST detected an infected file in?).

I’ll be glad to remove the pic, no problem, -I just wanted to understand if it was my post (and image) or if it was Zanfankid’s post?

I use AVG (8.0.1 -not the free version) and XoftSpy (v4.33), the pic was made in Photoshop (used a screen capture / ‘print screen’ & then edited in Photoshop) -so far nothing has been detected on my system (but, I don’t mean that = safe.  I’ll get the message, “No virus found in this incoming message. Checked by.. , etc. “ <-- which probably means nothing ) .

Again, Thank You for the heads up Ivan, and I’ll remove that pic.

(Edit:  I’ll go grab a trial version of Avast & run it on my system.  If I detect anything, I’ll be sure to post up my results.  My apologies for any problems this may have caused anyone, sorry… completely unintentional.  I do try to be as careful as possible ).

True… the threat was reported on ZanFan’s post apparently.  I was going to delete your pic but I wasn’t sure what was causing the problem and I didn’t want to do that unless there was reason to.

Cool, and Thank You Maneswar.  I deleted the pic just to be safe.

Maneswar_Cheemalapati - 25 May 2008 07:12 AM

For the “idiots” among us, can you be explicit on what you did, how you discovered this, and what you are saying is infected?  Are you saying that by posting a picture of the Tanhi desktop image that Josh has inadvertantly uploaded a Trojan?

But Ivan’s scan suggests that the file is HostOE.dll, and that it’s in PF \ Hotbar \ Bin .  It seems to be adware from Zango, Inc.

Is this scan reporting that the original thread was reported from that location on a typically infected machine, or is it saying that the threat can be found there on Ivan’s machine?

Thanks.

All I am able to say Mane is that after opening Outlook Express and clicking on the quoted post I get the usual alarm warning from my AVAST.
I put the file in the Virus Chest to see what is it about, did the screen grab and certainly killed the intruder.
Nothing is infected on my machine. This was the first action I ever did on my PC, and the only new mails were two AREA mails arrived through the Smart Notification tool. I certainly cannot say where the Trojan is coming from.
I just thought it was better to warn the Community that’s all. Sorry if I have hurt somebody this was not my intention.

ivan

Thanks Ivan.  I was just trying to figure out what you received and how it triggered a trojan warning.

Seems ZanFan’s post came to your email and you got a warning.  I wonder what about his post caused that, since I don’t think anything else is unusual about his post.

Please let us know if you receive any other such warnings, so we can figure out what’s causing it.

By the way, perhaps you can try to somehow get Smart Notification to another ZanFan thread and see if you get another warning.  What the heck is that anyway… I see it in my profile, but it doesn’t say anything.  Is it just to let us know someone replied to a thread we replied in?