Calgarypuck Forums - The Unofficial Calgary Flames Fan Community
Old 10-30-2016, 07:53 PM   #1
FunkMasterFlame
Crash and Bang Winger
 
Join Date: Dec 2005
Exp:
Default Possible Virus on Main Page?

Starting a couple of days ago I've noticed that every time I visit CP's main page (www.calgarypuck.com) my AVG software picks up what appears to be a couple of viruses.

Spoiler!


It's not happening to me on any other site, its only happening on CP's main page. I've also checked my computer for other viruses and malware and I'm clean.
FunkMasterFlame is offline   Reply With Quote
Old 10-30-2016, 08:58 PM   #2
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

There might have been an issue a while back, I actually recently updated Wordpress to the latest version to make sure there was no vulnerabilities, maybe try clearing your cache and trying again.

Unless I missed some things when I cleaned out the site, let me know if you still see it after clearing the cache. More details from "more info" might help too.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
Old 10-30-2016, 09:03 PM   #3
FunkMasterFlame
Crash and Bang Winger
 
Join Date: Dec 2005
Exp:
Default

Clearing the cache did not work.

The "More Info" link takes me to this page, which is not especially helpful.

Last edited by FunkMasterFlame; 10-30-2016 at 09:07 PM.
FunkMasterFlame is offline   Reply With Quote
Old 10-30-2016, 09:13 PM   #4
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Hm yeah, if you hover over the entries does it give you the full path to the file? Something after \cache2\? Knowing what file it thinks is bad would help track it down.

I tried an online site scanner and it says there's something wrong, but the code it says is faulty doesn't actually show up for me when I view the site.

The only thing I can think of is when I cleaned out the site last time I didn't bother with any of the templates that weren't in use, I could try deleting those.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
Old 10-30-2016, 09:17 PM   #5
FunkMasterFlame
Crash and Bang Winger
 
Join Date: Dec 2005
Exp:
Default

Oh I see what you mean. Here's the full path line.

Spoiler!

Last edited by FunkMasterFlame; 10-30-2016 at 09:19 PM.
FunkMasterFlame is offline   Reply With Quote
Old 10-30-2016, 09:19 PM   #6
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Ah that doesn't help me much. Though I might have found something, give me a minute.

EDIT: I was hoping Firefox might store the cached file in something hinting at the website file name, but it doesn't.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
Old 10-30-2016, 09:21 PM   #7
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Ok try now.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
Old 10-30-2016, 09:22 PM   #8
FunkMasterFlame
Crash and Bang Winger
 
Join Date: Dec 2005
Exp:
Default

I don't suppose it has anything to do with the folder named "doomed" does it?
FunkMasterFlame is offline   Reply With Quote
Old 10-30-2016, 09:23 PM   #9
FunkMasterFlame
Crash and Bang Winger
 
Join Date: Dec 2005
Exp:
Default

Quote:
Originally Posted by photon View Post
Ok try now.
Success! No more alerts!
FunkMasterFlame is offline   Reply With Quote
Old 10-30-2016, 09:23 PM   #10
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Lol I hope not. I found something that I thought I'd cleaned out but seems to be back somehow, I will have to do a more exhaustive search.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
The Following User Says Thank You to photon For This Useful Post:
Old 10-30-2016, 09:24 PM   #11
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Quote:
Originally Posted by FunkMasterFlame View Post
Success! No more alerts!
Sweet, ok I know what it is now. I don't know how it got back in, I thought it was just because we were running a super old version of Wordpress and I updated it but maybe during the update it got back in somehow (i.e. it touched files I didn't clean because I didn't think we were using them).
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
Old 10-30-2016, 09:24 PM   #12
FunkMasterFlame
Crash and Bang Winger
 
Join Date: Dec 2005
Exp:
Default

Thanks photon!
FunkMasterFlame is offline   Reply With Quote
Old 10-30-2016, 09:29 PM   #13
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
The Following 4 Users Say Thank You to photon For This Useful Post:
Old 10-30-2016, 09:29 PM   #14
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Let me know if it comes back.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
The Following User Says Thank You to photon For This Useful Post:
Old 11-10-2016, 06:00 AM   #15
FunkMasterFlame
Crash and Bang Winger
 
Join Date: Dec 2005
Exp:
Default

Quote:
Originally Posted by photon View Post
Let me know if it comes back.
It's baaaack!

*ducks shoe thrown by photon*
FunkMasterFlame is offline   Reply With Quote
Old 11-10-2016, 08:14 AM   #16
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Argh, how is it getting in there?!?
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
Old 11-10-2016, 08:31 AM   #17
photon
The new goggles also do nothing.
 
photon's Avatar
 
Join Date: Oct 2001
Location: Calgary
Exp:
Default

Ok should be removed.

I checked the logs and I can't see anything obvious that correlates to the timestamp of when the file changed. Have to keep digging I guess.
__________________
Uncertainty is an uncomfortable position.
But certainty is an absurd one.
photon is offline   Reply With Quote
The Following User Says Thank You to photon For This Useful Post:
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -6. The time now is 11:12 PM.

Calgary Flames
2016-17




Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
Copyright Calgarypuck 2016