Virus risk from Pradopoint??

[Signature035 Advanced Member Find all posts View Profile Close Signature035]

Guys,

Logged on tonight and as soon as I logged on I got this,

Do we have a resident Virus sitting in the 'Taptalk' link ?

[Seththecursed Member Find all posts View Profile Close Seththecursed]

Re: VIRUS - Taptalk ????

The same thing is happening to me. Keeps popping up. :cry:

[Fozzy Senior Member Find all posts View Profile Close Fozzy]

Re: VIRUS - Taptalk ????

I had one on my work laptop when I logged on to Pradopoint at work this arvo that was related to a java app apparently- in-house virus protection cleaned it up all seems OK now.

Cheers,

Dave

[hookedon4wding Advanced Member Find all posts View Profile Close hookedon4wding]

VIRUS - Taptalk ????

Gee I hope not. I love Tapatalk in the iPhone.

[stewy Advanced Member Find all posts View Profile Close stewy]

Re: VIRUS - Taptalk ????

Yep, I'm seeing it all the time too since this arvo. It must be an AVG thing cause I'm running the same internet security software as others here.
The LinkScanner picks it up as a threat, and the surf shield wants to block it on everypage.
tapatalkdetect.js (java script file) is loading when the page opens and the AVG surfshield doesn't like it.

Perhaps the admins here can shed some light?

cheers

[Schaffer Addicted PP Member Find all posts View Profile Close Schaffer]

Re: VIRUS - Taptalk ????

I'm running Norton and I had soemthing popup earlier this arvo but then I also had IE7 not responding so I assumed it was just a bug. Havn't seen any reoccurance though.

Norton Web Safe: PradoPoint

[Guest Close Guest]

Re: VIRUS - Taptalk ????

Same here. AVG found it as soon as I logged in on multiple machines. Aaron may have further info?

[photoprado Avid PP Poster! Find all posts View Profile Close photoprado]

Re: VIRUS - Taptalk ????

This might help. It's a vbulletin site, but the vector was tapatalk:

http://priuschat.com/forums/priuschat-w ... ost1142672

Michael

[glen_ep Addicted PP Member Find all posts View Profile Close glen_ep]

Re: VIRUS - Taptalk ????

Yes, there seems to be a security problem! Admins should see to this urgently.

I've done some digging and found a suspect. Of course it's difficult to be sure without server access, so a full virus scan of the web files should be performed, and all admin passwords should be changed.

My diagnossis follows:

There's a javascript file loaded at the end of every page (this part is probably normal):

	[script type=text/javascript src=mobiquo/tapatalkdetect.js]

However, it seems there's some malicous code inserted inside that .js file, and it should be cleaned as follows:

DELETE the first part (I've changed and shortened the displayed code for safety):

var st1 = 0;document.write{unescape{'%??%??%??%??%??%??%??%??%??%??%??%??%??%??%??%??'));;var gr0=0;

Keep the reminder of the file:

function detectTapatalk() {
	if (document.cookie.indexOf("tapatalk_redirect=false") < 0) {
		if((navigator.userAgent.match(/iPhone/i)) || (navigator.userAgent.match(/iPod/i))) {
			if (confirm("This forum is iPhone Native! Click OK to learn more about Tapatalk for iPhone.")) {            
				document.cookie = "tapatalk_redirect=false"; 
				window.location = "http://itunes.apple.com/WebObjects/MZStore.woa/wa/viewSoftware?id=307880732&mt=8";
			} else {
				setTapatalkCookies();
			}
		} else if(navigator.userAgent.match(/android/i)) {
			if (confirm("This forum is Android Native! Click OK to learn more about Tapatalk for Android.")) {            
				document.cookie = "tapatalk_redirect=false"; 
				window.location = "market://search?q=pname:com.quoord.tapatalkpro.activity";
			} else {
				setTapatalkCookies();
			}
		} else if((navigator.userAgent.match(/Symbian/i)) || (navigator.userAgent.match(/Nokia/i))) {
			if (confirm("This forum is Nokia Native! Click OK to learn more about Tapatalk for Nokia.")) {            
				document.cookie = "tapatalk_redirect=false"; 
				window.location = "http://store.ovi.com/content/22647?clickSource=browse&contentArea=applications";
			} else {
				setTapatalkCookies();
			}
		}
	}
}

function setTapatalkCookies() {
	var date = new Date();
	var days = 30;
	date.setTime(date.getTime()+(days*24*60*60*1000));
	var expires = "; expires="+ date.toGMTString();
	document.cookie = "tapatalk_redirect=false" + expires; 
}

detectTapatalk();

Or simply restore an original file.

[xlr8_87 Advanced Member Find all posts View Profile Close xlr8_87]

Re: Virus risk from Pradopoint??

Must be fixed as I was getting the same thing yesterday, can't remember which of my programs was detecting it, was either AVG, AdAware or Firefox

[bgreeni Member Find all posts View Profile Close bgreeni]

Re: Virus risk from Pradopoint??

I still get it with AVG

[Taresk Member Find all posts View Profile Close Taresk]

Re: Virus risk from Pradopoint??

I was getting it yesty through Avast, but hasn't happened today.

[Signature035 Advanced Member Find all posts View Profile Close Signature035]

Re: Virus risk from Pradopoint??

Still happening tonight..... this is a risk.

Can Admin have a look at it please,

Thanks,

[GDS Member Find all posts View Profile Close GDS]

Re: Virus risk from Pradopoint??

Time to switch to a Mac?

[teamdevo Junior Member Find all posts View Profile Close teamdevo]

Re: Virus risk from Pradopoint??

Goodmorning

Is everyone still getting the virus threat when opening every page avg still picks it up is it safe to keep looking or wait till admin have fixed the problem. :?