Trojans?

[Ryo]

Hi, first congratulation for made the best html editor of the world, second, during the instalation of 1st Page 2000 Norton Antivirus jump to show me this message:

Norton has detected a virus in your pc

Name of object: C:\Program files\Evrsoft\1st Page 2000\IScripts\Buttons\Six buttons from hell.izs

Name: JS.Trojan.WindowBomb

Action: it is not possible to repair this file

Again thanks a lot for made this program and for made it free but please make sure that not contain virus.

Best regards.
Ryo

[TomVelvetPaws]

This is just a jav script In the Buttons section of the Free Scripts section of the program.You can choose to add these to your page or not.As for the program itself it's fine What these buttons will do if inserted into you page is Bomb your browser and crash you or cause a fatal error and you get the blue screen of death lol.Since it is a hostile java script Mcafee identifies it as such and detects it.If it botheres you just go into the section where it is located and delete that file.You can insert it into a test page then test it if you want to if you dont mind crashing your computer or internet explorer ;) but as for a real trojan that will allow others to view and modify your files No it will not do this or cause any permenent damage.If you do test it just restart your computer and all will be as it was before you tested it.It is really more like a powerfull nuke than a trojan hence the name "winbomb" it "Bombs" windows in 5 different ways hence the 5 buttons.Each button you click on launches a attack.What I do with this is apply it to passworded directories or email login cgi or pages on my webserver that are for members only. you get wrong password 2 times and this happens all 5 of the attacks without having to press any buttons. :) LOL

[Ryo]

Ok, thanks and greetings.

[bumblebee]

I can't find that file in the designated scripts/buttons directory. I am not hiding "hidden" files and can't see it anywhere???? Where is it?
thanks,
bumblebee

[webpoet]

You'll find the trojan (JS/Winbomb) in the IScripts\Buttons
sub-folder. The infected file is called "six buttons from hell.izs".

I have 1st Page in 2 different computers, and 2 different
anti-virus programs identified this as a virus. If you go to
the McAfee or Symantec websites(www.mcafee.com
and www.symantec.com, respectively), you'll see
descriptions of this trojan and what it can do...basically, it
opens tons of browser windows until your system freezes
and you have to reboot.

While this may not cause any permanent damage, it's still a
malicious action, and it's irresponsible to keep such a script
in the 1st Page package. If a governmental agency happens
to get wind of this, I wonder if the perpetrators might be
in for some legal trouble (for knowingly distributing infected
software).

My suggestion to those who download 1st Page is to let
your anti-virus program quarantine the "six buttons" file
and then delete it. Otherwise, there's nothing wrong
with 1st Page.

:cool:

[andrew12]

I used to have Trojan on my very old computer I used to have Windows 98b on HP I used to see that message during the installing. So I download Spybot it seams too clear the issue now I have Windows XP Home Edition on Compaq. :)

[jawaldron]

Try this one:Re: VIRUS IN 1stPAGE 2000 (http://developers.evrsoft.com/forum/showthread.php?s=&threadid=2059&perpage=15&pagenumber=2#post12524) or this one: If all you have is a hammer, you treat everything as a nail (http://developers.evrsoft.com/forum/showthread.php?s=&threadid=2059&perpage=15&pagenumber=1#post12338) or this one: Open letter to Anti-virus vendors (http://www.spywareinfo.com/articles/av/six_buttons_from_hell.php).