European Bahn website - IMPORTANT WARNING

petermakosch · Post by **petermakosch** » Fri Nov 12, 2004 10:39 am

lol, computers, you got to love them!

Lad491 · Post by **Lad491** » Fri Nov 12, 2004 10:48 am

absolutely

Backfoot2002 · Post by **Backfoot2002** » Fri Nov 12, 2004 11:04 am

Sounds like to me that from the comments before, its depends what antivirus you have installed. I was talking to someone last night who says the EB forums are fine, its just when he comes on UKTS that he has problems, and he is running Norton 2004.

However my problem is the opposite way round, UKTS if fine, but the EB front page and forums both make norton bring up the red virus warning, but im running Norton 2003 with Personal Firewall 2003.

Strange.

buffy500 · Post by **buffy500** » Fri Nov 12, 2004 11:30 am

Backfoot2002 wrote:However my problem is the opposite way round, UKTS if fine, but the EB front page and forums both make norton bring up the red virus warning, but im running Norton 2003 with Personal Firewall 2003.

Which is different to me, I had only about my 3rd ever real time file protection kick in on an EB thread yesterday, the home page appeared fine, as did lots of other threads. Even going back to the thread which upset Norton before did not do it again the next time.
So I don't think its as simple as just saying that the EB site or forum is infected clearly infected, because thats not what my experience points to.
But I think that there is a problem somewhere, but I'm not convinced its a case of simply blaming the EB site, but there appear to be plenty of unconnected people who are reporting something wierd happening.

Lad491 · Post by **Lad491** » Fri Nov 12, 2004 12:18 pm

An update has been posted on the europeanbahn site. it appears a trojan had infected the server used to host a number of web sites, including europeanbahn's. The fault was down to the ISP hosting the sites. It has now been rectified

Backfoot2002 · Post by **Backfoot2002** » Fri Nov 12, 2004 12:28 pm

Lad491 wrote:An update has been posted on the europeanbahn site. it appears a trojan had infected the server used to host a number of web sites, including europeanbahn's. The fault was down to the ISP hosting the sites. It has now been rectified

The frontpage has been fixed, the forums are still tryingt o download a trojan horse onto my computer, and it also has scrpit errors.

Apart from that it seems to be ok though.

Lad491 · Post by **Lad491** » Fri Nov 12, 2004 12:36 pm

EB Forums are fine for me

Make sure you are not trying to open a cached page. Delete all your temporary internet files and reload the page to get a fresh version. Also make sure you run a full virus check of your own pc before doing anything else in case you have been infected

The virus has been fixed

buffy500 · Post by **buffy500** » Fri Nov 12, 2004 12:38 pm

Backfoot2002 wrote:
Lad491 wrote:An update has been posted on the europeanbahn site. it appears a trojan had infected the server used to host a number of web sites, including europeanbahn's. The fault was down to the ISP hosting the sites. It has now been rectified
The frontpage has been fixed, the forums are still tryingt o download a trojan horse onto my computer, and it also has scrpit errors.

Agreed, the forum tried to install about 4 components when I went there to test it, and norton picked up another virus alert.

Still a bit sick I think, I guess its a hosting company issue though based on what Laurie's been saying.

Website · Post by **Easilyconfused** » Fri Nov 12, 2004 1:17 pm

buffy500 wrote:
Backfoot2002 wrote:
Lad491 wrote:An update has been posted on the europeanbahn site. it appears a trojan had infected the server used to host a number of web sites, including europeanbahn's. The fault was down to the ISP hosting the sites. It has now been rectified
The frontpage has been fixed, the forums are still tryingt o download a trojan horse onto my computer, and it also has scrpit errors.
Agreed, the forum tried to install about 4 components when I went there to test it, and norton picked up another virus alert.

Still a bit sick I think, I guess its a hosting company issue though based on what Laurie's been saying.

I use Firefox as my standard browser and it is set up to download files to my desktop rather than asking me if I want to open them or where to put them.

When I visited the main page something fairly interesting happened - 3 executable files downloaded. Scanning them did not produce any errors even with the latest CA Etrust signature files installed on my PC. They went straight into the shredder anyway and were "erased beyond recovery"

Just tried to access the site again and it appears to be down again so perhaps they are still working on it ?

Lad491 · Post by **Lad491** » Fri Nov 12, 2004 1:25 pm

yes - the forum does indeed seem to be down again

Lets hope they haven't been reinfected

Im still not seeing any problems here though. Its strange how selective it seems to be.

petermakosch · Post by **petermakosch** » Fri Nov 12, 2004 2:05 pm

Hmm, well, it loks like a wait-and-see jobbie

timbooth · Post by **timbooth** » Fri Nov 12, 2004 3:41 pm

The EB homepage had a script leading to sites with the java viruses, that only work with old versions of Java Virtual Machine, so even if they ran nothing nasty should happen.

I use URL filtering, so my PC doesn't access sites that I'm not expecting it to - reduces the risk of downloading nasties.

The URL's indicate that its probaby indiscriminate, possibly a server compromise - other sites on the site server may be infected.

jimmyladd · Post by **jimmyladd** » Fri Nov 12, 2004 4:18 pm

Lad491 wrote:
Norton Anti-Virus is more or less useless.
I stopped using it and moved to McAffie. Notron does not properly clean files, and does not detect some virus's. I recommend next chance you get, start using McAffie
Funny you should say that as last year I found the exact opposite. After many years with McAfee it constantly let me down, despite being fully up to date with both engine and dat files. Each time i was able to use the symantic stinger to clean my machine and finally changed all 3 to using Norton.

The main thing i think is that you cant rely on either automatically updating virus definition files so you should check manually at least once a day - Myself i check twice, morning and evening as soon as the computer has booted.

A resent virus test, both Norton and Mcaffie did very poorly in the test, worse than an AVG/zone alarm setup......much worse. Kaspersky and Fsecure came out tops, so they get my recomendation

Lad491 · Post by **Lad491** » Fri Nov 12, 2004 7:40 pm

The EB web site is up and running again and problems seem to be fixed again <touch wood>

LucaZone · Post by **LucaZone** » Fri Nov 12, 2004 9:45 pm

I can confirm that the most upto date Norton 2005 AV and Mcafee AV software has been tested over the last 36 hours against the infection on the EB site, and Mcafee failed :/

My home system (Running Norton) hasnt reported any problems, but shows logs of preventing virus attacks and intrusions in the time frame mentioned, while at work my computer system (Running Mcafee) has been disconnected from the network while they clean the infected files and remove illicit material (although they are unsure if that was caused by the virus

)

Though my protected home system could have been taking advantage of having Anti-Spam / Pop-up / Virus / Adware / Intrusion protection also as I have the full internet protection package installed. So it may be that the AV software alone is not enough to hold the infection back.

It would appear as Laurie posted above that the EB site is back up and running again, and there have been indications that hosting will be moved once again to a new server and an additional Mirror Site will be kept incase further attacks. To which the mirror site can be uploaded inplace of the infected one.