I may have a trojan horse.

[Yukiism]

Hi guys, i need your help.

There's been alot of stuff around 4chan lately and there seems to be a trojan horse installed on the site.
I've been getting some sprays off of 4chan by clicking the picture and then ''Save Image As...''

So is it possible to get a virus from using ''Save Image As''?

If so, i have Panda Antivirus 2008. Is that virus scanner good enough to detect trojan horses?

Thanks in advance.

[CaptainKirk]

Re: I may have a trojan horse.

Yes, it is possible. Get Super Anti-Spyware and Malware Bytes. Run a full scan on each.

[Yukiism]

Re: I may have a trojan horse.

Just did a scan with Panda and it couldn't find anything but some innocent spyware.

Is my computer safe? Or do i still have to use those 2 programs?

[CaptainKirk]

Re: I may have a trojan horse.

The trolls over on the chans have been posting images that actually were js bots. In the past, it has only been used to self-replicate by posting more copies, but taking the next step to being a full trojan horse wouldn't be unthinkable.

If you are still unsure, I would recommend running those two programs. They are good to have anyway, if you ever get infected by something worse.

[=98=]

Re: I may have a trojan horse.

Yeah, I haven't looked at how, but they manage to get scripts in images, I remember the old green screen which you saved as. All it did was duplicate and post a new picture of it on 4chan :p

[[MyIS]Dan]

Re: I may have a trojan horse.

iFrames is how they do it, Wiki had a picture a while back with a iFrame in it, was on the avast! forums.

EDIT: http://forum.avast.com/index.php?topic=41300.0

[=98=]

Re: I may have a trojan horse.

Oh yeah, I seem to remember Total Gaming Videos old site had one as well. I remember hearing iFrames are becoming major issues.

[[MyIS]Dan]

Re: I may have a trojan horse.

Yup, not sure how they do it, but seems they do it very easily, some US government sites have had iFrames put in them also, since fixed tho.

[=98=]

Re: I may have a trojan horse.

Well, it appears to be hyperlinked images. One assumes they just redirect the image link so nothing looks wrong to the eye.

[[MyIS]Dan]

Re: I may have a trojan horse.

If you look at this post; http://forum.avast.com/index.php?top...6726#msg346726 the guy opened the jpg file up and the iFrame in in the jpg file itself.

[=98=]

Re: I may have a trojan horse.

A type of steganography. We learned about this in our lectures.

[Hellsent 2.0]

Re: I may have a trojan horse.

[Yukiism]

Re: I may have a trojan horse.

Seems like my new antivirus also came with anti malware and as far as i know, it has some serious spyware prevention.

I guess i'm safe, but to be sure i'll run those 2 programs.

Thanks for all the help!

[Hellsent 2.0]

Re: I may have a trojan horse.

It's ok.

[KillerStickMan]

Re: I may have a trojan horse.

If you check out any of the other 4chan boards, you'll see that they've posted a tool for removing the trojan.