Possible Trojan link

Re: this site is one big virus

This are the two messages I'm getting from AV.

Object: BOBI123.COM/A/INDEX.PHP
Infection: URL:MAL

Object: ISLAMICBOARD.COM/>(GZIP)
Infection: HTML:IFRAME-INF

Hope this helps and site is virus free soon. Don't want to be typing messages from my phone any longer!
 
Last edited:
Re: this site is one big virus

Could the problem be only on certain pages and that is why some have it and others do not? *shrug* I know nothing. :)

I have not had any problems on my end either. I haven't paid much attention to the other threads, but didn't someone say they had the problem when they logged in? That was why I wondered maybe it is on certain pages. I do not log in. I stay logged in.
 
Re: this site is one big virus

Could the problem be only on certain pages and that is why some have it and others do not? *shrug* I know nothing. :)

I have not had any problems on my end either. I haven't paid much attention to the other threads, but didn't someone say they had the problem when they logged in? That was why I wondered maybe it is on certain pages. I do not log in. I stay logged in.

It is on every page. You just have to see it on page source. The visibility is hidden, and the size is only 1 so you cannot see it. Everytime you open a page, you also open http://bobi123.com/a/index.php which does not seem to exist.
AV programs do not think it is a virus but my ad aware catches it.
 
Re: this site is one big virus

There is no indication of any virus on the site. Right now our best guess is that some Anti-virus programs seem to think one of the scripts in a recent addition is a virus. Actually, it seems only Avast is doing that. It is a bit confusing that it seems to be affecting only a few members.
 
I don't think it's a virus anyway, it seems like a tracker, like one of those adwares.
 
Maybe we need to take a break before this virus infected our PCs? At least till this problem get solved :hmm:
I find it very irritating that on every single page I open here I got this kaspersky msg of a malware detection!!

Denied: http://bobi123.com/a/index.php (analysis according to the base of suspicious web addresses) http://bobi123.com/a/index.php URL found in the base
 
Re: this site is one big virus

There is no indication of any virus on the site. Right now our best guess is that some Anti-virus programs seem to think one of the scripts in a recent addition is a virus. Actually, it seems only Avast is doing that. It is a bit confusing that it seems to be affecting only a few members.

Even the members who were not affected would still be loading the infected pages - since every page has a link to bobi123.com on it. Why not just remove this iframe? Since it doesn't seem to serve any purpose (other than malware). This would allow a lot of people to access the site again.

http://safeweb.norton.com/report/show?name=bobi123.com
 
Re: this site is one big virus

Even the members who were not affected would still be loading the infected pages - since every page has a link to bobi123.com on it. Why not just remove this iframe? Since it doesn't seem to serve any purpose (other than malware). This would allow a lot of people to access the site again.

http://safeweb.norton.com/report/show?name=bobi123.com

A few of the Admins that know more then I do, are trying to do that very thing. I believe they will soon have it fixed Inshallah
 
I have disabled my firewall to log into here.. just letting you know that my desktop is officially dead and I'll need a new cpu most likely.. I am not sure what sort of damage this is doing to my laptop but would sure love to know what you guys are doing to get rid of this new mess..

may God da mn those kuffars to kingdom come but I believe that after the Quran burning fiasco there have been many new conversions to Islam.. al7mdlillah..

:w:
 
It is still here? :hmm: I think I'm just going to stay away from the forum for a while, just until its gone, because my computer doesn't have any security...

Please let us know when this trojan is gone, I'd like to come back to the forums soon inshaAllah. =)
 
Last edited:
Re: this site is one big virus

:sl:

Brother, this firewall is owned by ZIONIST ISRAELIS! The owners of Checkpoint technologies, makers of zonealarm are mossad agents

Get rid of this trash asap. two alternatives that I would recommend are comodo firewall and avast antivirus.

Its a trial software; I normally use Kaspersky in Windows.

:wa:
 
:sl:

Is anyone getting their media player opened automatically trying to play a file from bobi123.com whenever you log on IB?

I am getting this whenever I try to come here on IslamicBoard.

Kaspersky is detecting a trojan.

:sl:

The bob123.com is a domain owned by a Russian dating service. I have no idea how it could have gotten connected to LI or why only a few members are getting it or why some virus software is identifying it as a virus. It is not even an active web site, just a domain name that Urikov Dmitrij Vasilievich is trying to sell for $79

Service Provided By: UKRAINE.COM.UA HOSTING PROVIDER - DELTA-X LTD
Website: ukraine.com.ua
Contact: +380 (44) 2282060

Domain Name: BOBI123.COM

Creation Date: 09-Sep-2010
Modification Date: 09-Sep-2010
Expiration Date: 09-Sep-2011

Domain servers in listed order:
ns1.ukraine.com.ua
ns2.ukraine.com.ua

Registrant:
urikov Dmitrij Vasilievich

SOURCE
 
:sl:

The bob123.com is a domain owned by a Russian dating service. I have no idea how it could have gotten connected to LI or why only a few members are getting it or why some virus software is identifying it as a virus. It is not even an active web site, just a domain name that Urikov Dmitrij Vasilievich is trying to sell for $79



SOURCE

Whatever the domain is used for, the malicious link on this site is http://bobi123.com/a/index.php
There are other malicious links outlined on the norton site posted earlier.

edit: The url is now dead so it must just be listed as dangerous because it was at one time in the past. Ah well, still weird it's linked on this site.
 
Last edited:
Whatever the domain is used for, the malicious link on this site is http://bobi123.com/a/index.php
There are other malicious links outlined on the norton site posted earlier.

edit: The url is now dead so it must just be listed as dangerous because it was at one time in the past. Ah well, still weird it's linked on this site.

That is what is really confusing. Unless at one time when it was an active link it used vBulletin and Norton is now identifying something in the script with that link. If any member who has been having the problem, belongs to Ummah.com see if the same happens there. They are also set up on vBulletin
 
It is still here? :hmm: I think I'm just going to stay away from the forum for a while, just until its gone, because my computer doesn't have any security...

Please let us know when this trojan is gone, I'd like to come back to the forums soon inshaAllah. =)

you can download an anti virus for you pc sis. i will send u a free trial if you want.
 
It is still here? :hmm: I think I'm just going to stay away from the forum for a while, just until its gone, because my computer doesn't have any security...

Please let us know when this trojan is gone, I'd like to come back to the forums soon inshaAllah. =)


Here are steps to make sure your computer is protected from any viruses, spywares, malwares, adwares, trackers, etc:

1. If your computer runs on windows operating system, you need to turn on the windows automatic updates so it can automatically download latest security patches. This is important because, well, windows is not perfect and there's always some sort of new errors/loopholes found in its programming that makes it vulnerable for latest generation of viruses etc.
If your computer runs on windows xp, go to control panel --> then click on automatic updates. Also do not forget to turn the windows firewall on (it is on control panel also)

2. Check if antivirus is installed and running on your computer. If it is, then check if it is still valid, ie. if it is constantly updated for new virus definitions. It is no use if the antivirus was installed 3 years ago but never updated since. If it is obsolete or if your computer has no antivirus, here's the two best FREE antivirus programs (do not download any FREE TRIAL programs, because well, unless you are willing to pay, it will stop working soon):

AVAST http://download.cnet.com/Avast-Free-Antivirus/3000-2239_4-10019223.html
AVG http://download.cnet.com/AVG-Anti-Virus-Free-Edition/3000-2239_4-10320142.html

You only need ONE anti virus program. Also, do not forget to UNINSTALL your old antivirus program BEFORE you download a new one. Having more than one antivirus may result in DISASTER.

3. What browser do you use? If you are still using Internet Explorer, abandon!
Mozilla Firefox is much better in terms of performance, speed, ease of use, and security. Here's you can download mozilla firefox:

http://download.cnet.com/mozilla-firefox/

4. Even if you already have a good antivirus program, it doesn't mean that it can fully protect your computer from ALL viruses/malwares/etc. You need to complement it with at least a couple of good anti-spywares. The best is Ad aware:

http://download.cnet.com/Ad-Aware-Free-Internet-Security/3000-8022_4-10045910.html

Malwarebytes is also quite good http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

Last, you need to scan your computer regularly with those antivirus and anti spywares programs.
Hopefully these will prevent/resolve some potential problems in the future.
 
Last edited:
:sl:

It is still here? :hmm: I think I'm just going to stay away from the forum for a while, just until its gone, because my computer doesn't have any security...

Please let us know when this trojan is gone, I'd like to come back to the forums soon inshaAllah. =)

Quick and free solution on Windows is the Microsoft Security Essentials package: http://www.microsoft.com/security_essentials/

Its much better than many other free anti-virus solutions.

:wa:
 
Re: this site is one big virus

:sl:

Brother, this firewall is owned by ZIONIST ISRAELIS! The owners of Checkpoint technologies, makers of zonealarm are mossad agents

Get rid of this trash asap. two alternatives that I would recommend are comodo firewall and avast antivirus.

You are right; Checkpoint took the company a few years ago. That also explains why there's no longer an advanced user interface, nor any real user control anymore.

:wa:
 

Similar Threads

Back
Top