April 22nd, 2002, 10:42 PM
infected by web site script?
I was browsing through some web sites when my Norton AntiVirus popped up a warning. It was one of those sites mentioned in the links section on Antionline.com. I don't remember the warning exactly but I told Norton Antivirus to block the script.
Anyway in the logs it shows as follows:
'Date: 4/22/02, Time: 16:14:48, administrator on 'mymachine'
Script Blocking detected suspicious activity.
File: EXPLORER.EXE Object: FileSystem Object Activity: GetSpecialFolder
This script was stopped.'
But when I refused it, the entire desktop disappeared showing only the desktop background, all the icons disappeared and all my programs shut. I had to reboot my pc to access anything.
Does this mean I've been infected or is this that what the pc needs to do after denying the script any access?
I have Windows 98 Second edition.
April 22nd, 2002, 11:03 PM
It kinda sounds a little like JS/Seeker, although I could be way off. Check your Home/Search page settings in your default browser. Seeker isn't malicious, more just a pain in the ass, although it does make a few registry changes...
I could be of more help if you could provide me with the link you clicked on before getting the alert message....
April 22nd, 2002, 11:17 PM
Not to be a smart-ass, but, you could probably fix it by visiting one of these two sites:
\"Windows has detected that a gnat has farted in the general vicinity. You must reboot for changes to take affect. Reboot now?\"
April 23rd, 2002, 03:53 AM
it was probably a site with a virus code posted on it. I have done this before. Just scan for viruses and make sure your definitions are up to date.
April 23rd, 2002, 05:22 AM
if your going to go browsing sites 'off the beaten path', it would be a good idea to disable jave scripting or at least have it if you want to allow it.
Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”
April 23rd, 2002, 06:49 AM
Conf1rm3d_K1ll , it was the armenian crack site.
April 23rd, 2002, 06:58 AM
Crack sites are renowned for that type of antisocial behaviour. Take the good advice offered by everyone who replied, run a virus scan with an up to date data base.....
If you do suspect seeker is the culprit follow THIS link and check for registry changes, etc.....
It's also a good idea to disable java scripting as previously stated by Tedbo1.....