• SONAR
  • Avast virus warning from Cakewalk site
2014/01/17 11:06:24
neirbod
Just saw this in Avast.   It says it blocked a virus from the CW site:
 
URL: http://www.cakewalk.com/Global/js/cakewalk.min.js
Infection: JS:Includer-ATI [Trj]
 
Not sure what to make of this.  Is CW actually infected, or is this a false alarm?
 
 
2014/01/17 11:16:41
Beepster
Since they updated the forum software there have been a bunch of new scripts added. There is also googleadservices.com (as well as the other google stuff like analytics which is basically a tracker). The warning is likely coming from a bad ad from google. I have Avast and not gotten any warnings from this site but I use Firefox with NoScript and Adblock plus which filters out all the useless and potentially harmful/invasive crap.
 
Before the change all I had to allow in NoScript to make the site fully functional was the main cakewalk.com domain. Now to log in and be able to access PMs and load other features I also have to allow ajax.googleapis.com which is a google product that I think allows sites to add extra features (I think the captcha thingie is provided by this service). Without it, as I said, I cannot log in.
 
All the other google crap is ad services and tracking stuff. There is also owneriq which I think is a program for site administrators to keep an eye on traffic stats and newrelic which I have no idea what it does but is probably another ad/tracker thing.
2014/01/17 11:24:43
Beepster
Ah yes... newrelic is indeed a traffic/performance monitor and owneriq is an ad targeting software.
 
So the newrelic thing is probably there for the Bakers to watch stats on the site and find glitches and owneriq collects user data so companies can sell you crap.
 
 
2014/01/17 11:36:08
Beepster
And you should probably run a full scan of your system in safe mode using Avast, Malwarebytes and Spybot S&D to make sure it isn't coming from your system.
2014/01/17 14:04:38
Splat
I got exactly the same with ZoneAlarm today!!! (Same file detected Trojan.JS.Agent.cfc)
2014/01/17 14:07:58
Wookiee
neirbod
Just saw this in Avast.   It says it blocked a virus from the CW site:
 
URL: http://www.cakewalk.com/Global/js/cakewalk.min.js
Infection: JS:Includer-ATI [Trj]
 
Not sure what to make of this.  Is CW actually infected, or is this a false alarm?
 
 


Same here not good
2014/01/17 14:13:31
robert_e_bone
I too thought it a false positive, and it may well be.
 
Nonetheless, I ran a quick scan in Avast, and it DID find a virus, in some temporary internet file from some music video.
 
I then immediately ran a full boot scan, and found several more viruses, all of which were successfully removed.
 
Sooo, hard to tell, but I am CERTAINLY a lot happier having gotten rid of some actual viruses in the process.
 
Bob Bone
 
2014/01/17 14:16:52
Beepster
Well that's not cool. Are any of you guys running script blockers? I have yet to encounter this.
 
Anyone know which one of our Bakers handles site admin issues such as this? I'll send them a link to this thread (or we all could).
2014/01/17 14:25:05
Beepster
I just sent a link to this thread to Forum Abuse (which I guess is an admin user name).
 
If you got this alert probably best to do what Bob did and run some scans.
2014/01/17 15:34:32
Splat
If it's false positives it's from two different virus scanners right now.
12
© 2026 APG vNext Commercial Version 5.1

Use My Existing Forum Account

Use My Social Media Account