antivirus picking up a trojan here

Mr NFLfan

Well-known member
Joined
Dec 23, 2003
Messages
5,090
Reaction score
565
Points
113
Age
69
Location
I live where the men are men and the sheep are ner
Is anyone else having this problem here. Every time I come to the planet my AVG antivirus picks up this JS:Minor-c[trj] and quarantines it. It list it as coinhive.min[1].js
anyone else's antivirus hitting on this and is the server infected? JT?
 
Is anyone else having this problem here. Every time I come to the planet my AVG antivirus picks up this JS:Minor-c[trj] and quarantines it. It list it as coinhive.min[1].js
anyone else's antivirus hitting on this and is the server infected? JT?

Yes. Mine is as well. Some kind of attack.
 
Avast aborts a connection from PP to coinhive.com which they say is infected with a trojan
 
I'm using an iMac with Bitdefender. Nothing.
 
Laptop using Edge with Kaspersky and I'm not getting anything.
 
I hardly ever visit this site anymore because of all the problems. At the moment I am using an Ubuntu machine. Just checking in to see what's going on.
 
Avast aborts a connection from PP to coinhive.com which they say is infected with a trojan

Just logged in again and got the Norton notification of attack blocked from "coinhive.min[1].js"

Seems to be the same invader you got.

Mods??
 
I posted in the help thread about it. Malwarebytes blocks it so I just carry on after it does so. Annoying however.
 
I posted in the help thread about it. Malwarebytes blocks it so I just carry on after it does so. Annoying however.

Yeah I have 2 laptops one has Malwarebyte's pro and the other is using the free version. They both also have avg free but their is definitely an attack that gets triggered when I come here to PP. So there has to be something going on with this site. UT and ideas?
 
Yeah I have 2 laptops one has Malwarebyte's pro and the other is using the free version. They both also have avg free but their is definitely an attack that gets triggered when I come here to PP. So there has to be something going on with this site. UT and ideas?

Likely someone has registered on the site and has managed to sneak in a bit of code somewhere that is building a botnet in order to mine bitcoins.

With the number of problems that have come about as a result of unwanted registrations, I wonder if it might be possible to shut registration completely.

That's an extreme measure, but it's a good way to keep unwanted spammers/scammers/hackers from getting in.
 
Likely someone has registered on the site and has managed to sneak in a bit of code somewhere that is building a botnet in order to mine bitcoins. With the number of problems that have come about as a result of unwanted registrations, I wonder if it might be possible to shut registration completely. That's an extreme measure, but it's a good way to keep unwanted spammers/scammers/hackers from getting in.
Who we going to make fun of trolls . I just use the moblie app to post here .
 
If someone's logs show what file the board is sending that is responsible, would make it easier to track down.

I'll get on the computer now and see if I can find anything.

Sent from my VS995 using Tapatalk
 
Think I got it. I saw it trying to load in the status bar of the browser, found a suspect file version of a file, and replaced it. I no longer see it trying to load.

Where we stand now is I am hyper-vigilant of new user registrations, and try to delete bogus ones that get through before they can do anything. Sometimes I can not be quick enough.

A permanent solution is not so easy because of our situation here. Possible solutions are:

Get rid of the Casino. It is a known vulnerability, but a lot of people here like it. Also, I do not know for sure if this is the way they are getting in.

Completely closing new user registration.

The real solution here (which probably also means losing the Casino), is updating the board software. As most of you know, I do not own .com or the board itself. I need to rely on Austin at Chiefsplanet for any changes at the software level. He has been unresponsive to me the last few times I have tried to contact him. So there is nothing I can do here.

The last solution would be to abandon patriotsplanet.com and start anew at patriotsplanet.net or a new domain. I would have the control and the ownership necessary to make any software upgrades needed. We would lose our history here and probably more users in the transition.

That is most of what I can think of, and they all suck in their own way.
 
Back
Top