Avast WEBforum

Other => General Topics => Topic started by: zone12 on March 18, 2009, 11:58:37 PM

Title: Virus comfirmation?
Post by: zone12 on March 18, 2009, 11:58:37 PM

Recently the site www.facepunch.com had a new tabbed fourm called "the game". I was wondering what it was so i clicked on the link I got a messed up fourm and my browser wanted to run Windows media player. Can anyone confirm this?

Title: Re: Virus comfirmation?
Post by: DavidR on March 19, 2009, 12:15:08 AM

I went to the above link but I don't see any forum called "the game" so your going to have to be more specific. What is your browser ?

I had a general rummage round in the first two forums and no display issues. Using firefox 3.0.7.

If you click a link and it tries to open your media player it could well be an exploit. So first you should ensure that your Browser is up to date as this type of exploit was news some months ago and there should have been a security update to close the vulnerability. You should also ensure that your media player (?) is up to date also.

Title: Re: Virus comfirmation?
Post by: zone12 on March 19, 2009, 12:29:03 AM

http://www.facepunch.com/forumdisplay.php?f=56


Exact link

Title: Re: Virus comfirmation?
Post by: DavidR on March 19, 2009, 01:47:29 AM

OK, first I'm not registered so get blocked, image1, so effectively I can't check that one.

I found what is launching your media player, image2 and the code in the page, image3. So unless that code is inserted by someone else, then nothing malicious just an embedded midi file. The page background image appears to be tiled (appears as a multiple image) if that is what you meant.

hXXp://www.garry.tv/img/music.mid which appears to be no more than the Sailors Hornpipe, which would repeat and repeat and repeat, driving you crazy, but that appears to be the only harm it would do.