Packard Forum Index » General

Folks, I have had a few users report Virus scanners have occasionally reported things when viewing pages here on the website. I've done extensive scans and found nothing directly with the files. Today I got a hit on my Malware detector on my Mac and after coming through the logs, it was tagged a suspicious image filename from the website forums here.

After figuring out the pattern, I found about 25 images that were posted to the forums that had unusual names over the last two years. Apparently these usual names contain coded malware that can trick some browsers into executing code. I have since deleted all the suspicious pictures with the names in questions. The original picture's filenames are stored in the DB, and the files themselves are stored on disk under a forum generated name. This is why nothing is ever triggered in the file level filescans.

These pictures were uploads by a handful of users, and I am suspecting unknowingly. I believe their PC's maybe infected, and when they upload pictures, it alters the picture name to add this embedded malware code. I'll privately send them a note so they can scan their PCs.

So, if you notice any pictures with the an unusual names similar to the attached screenshot, please let me know ASAP so I can remove it and notify the user.

While the website itself is not infected with anything, these filenames can cause a problem with older, or outdated browsers, and Java clients. SoI highly recommend you run the latest version of your selected browser and make sure all your security updates are in place. Also please make sure you update your Java software to run the latest version that has numerous fixes. I run Chrome, and have not had any issues. Also everyone should also be running good, updated Virus/Malware detection software.

As I said before, I have already removed all the files that have similar or unusual filenames, so the current threat from the website should be Nill, and I will try to add a later of protection code to filter out any of those kind of filenames in the future.

Regards,

Attach file:

---

  (15.22 KB)

Thank you Kev for jumping on this problem right away. It is very much appreciated.

Also if anyone else gets any additional "Virus/Malware Detection" hits while viewing any of the pages here on the website, please copy the entire URL at the top of the page and what the scanner reported and send it to me via email. This is the only way I can track down exactly what you were looking at when the detection happened, and see what may have caused the detection. I'm pretty sure I have this nipped in the bud, but an abundance of caution is always wanted.

Thank you BigKev for giving so freely of your time, energy and expertise.

Regards,
Steve Fisher

Kev,

Don't know if this is related but I notice the Random Photo doesn't appear to be refreshing. At present it's had this picture for at least a couple of hours. Whereas it usually refreshes in a much shorter period of time, probably about 15/30 minutes?
And, no doubt, now that I raise the issue it'll refresh!

Attach file:

---

  (71.27 KB)

"..no doubt, now that I raise the issue it'll refresh!"
It didn't, it's still there!

I think I changed it to refresh every 6 hours. So more of a "photo of the day"

Although I am on a Mac w/Firefox, thank you.

"...I changed it to refresh every 6 hours"

Still waiting....waiting....waiting.

My initial post was at 20:27 yesterday, it's now about 21:47 today. Looks like it's stuck!

See the Random Photo has "clicked over" to another pic.