By calebm12 on
Heads up. Do not visit the demo page for the content slider module. there is a virus. just about lost everything.
Can someone important check it out......its the link that says "view an example"
http://drupal.org/project/content_slider
Comments
.
I asked on IRC and a couple folks checked and didn't see a problem. I suggest you file an issue in that module's queue with more details on exactly what the problem is.
Michelle
I'm using Ubuntu and clicking
I'm using Ubuntu and clicking through the site and looking at the source code and nothing is popping out as unusual. Are you sure the virus is not on your own machine and injecting itself into websites? I know that's what some of them do.
I am no virus expert. All i
I am no virus expert. All i know is i went to that page, couldnt get off it with back button or refresh or nothing, windows popped up to trojan virus warnings, and then the whole comp died. Comp wouldnt boot again....finally got it restored through "last configurable mode"
I suggest and testers maybe click through the actual slider on that page...like to go 1, then 2, then 3. Thats exactly what i did.
Like i said, i am no virus expert but i cruise the internet about 5 hours a day on this computer and nothing like that has got me before.
Definitely a Virus on Demo page
I also visited the demo site today using IE8.0. IE 8 warns the page wants to communicate with a remote data source in its warning bar. Before I could get off the page I got AVG AntiVirus 8.5.392 detect a Virus asking me to move it to the Virus Vault or Remove the threat as a power user. On looking at the Virus vault it tells me it found an Infection in Virus JS/Obfuscated - file img1.htm.
JS/Obfuscated is a generic detection for obfuscated malicious script files which attempts to exploit unpatched vulnerabilities in the system. This specially crafted javascript uses various obfuscation techniques to hide the real nature of attacks.
There's no way to know if it has had any effect but can if you have an un-patched system.
Windows users may be best to avoid going to the demo page. I hope the author who put the reference there is aware of this.
I can confirm I'm getting a
I can confirm I'm getting a warning from Google Safe Browsing when attempting to view the site now. I removed the link to the demo on the project page and filed an issue so the module maintainer can hopefully address it #533420: Removed link to demo page - site infected with malware.