cancel
Showing results for 
Search instead for 
Did you mean: 

Virus concern Mal/ObfJS-A

N/A

Virus concern Mal/ObfJS-A

When I logged into my home e-mail account (www.plus.net) via the internet, on my business PC I received loads of messages saying that files were not downloaded due to having Mal/ObfJS-A virus.
Yet all my e-mails came through (and I kept the messages on the server).
When I downloaded them through Outlook Express at home all the messages came through - but no Virus warning.
Can anyone throw any light on what is happening?
Thanks.
Geoff
6 REPLIES
Mand
Grafter
Posts: 5,560
Thanks: 1
Registered: 05-04-2007

Virus concern Mal/ObfJS-A

Hi there,

When was this occurring? Is it still occuring when visiting the webmail page?

If you have not already done so could you raise a ticket with the message received so that we can investigate this further please?
N/A

Virus concern Mal/ObfJS-A

I've just downloaded webmail at home - and there was no warning. The page looked different though (blue background).
It happened at work on Wednesday and Thursday.
I will try again on Monday and let you know how I get on.
The comments from our IT dept was:
Good Afternoon Geoff,

I understand from Alan that you got some warnings about a virus called Mal/ObfJS-A whilst you were looking at your webmail last Tuesday. I think Alan told you that we would gets some warnings if there was an issue.

As you can see from the email below we did get some notifications that you were having a problem.

I did a little digging on the Proxy Reporter (tracks sites everyone has been to) and it showed that you had been to the site http://bh.****service.cc/1/index.php loads whilst you were looking at your webmail. I think that you must have got some SPAM/dodgy email that linked to the above site and tried to download the virus (this is how this virus is spread). It also was linking to a site call trade****.name/index.php. I logged on to a stand alone PC and did a search for bh.****service.cc in yahoo. A couple of sites came back that looked porn related. One was http://bh.****service.cc/2/index.php. I'd guess that the site bh.****service.cc is used to host content of a nefarious nature.

It appears that our virus protection is its job and stopped this attack.
Ianwild
Grafter
Posts: 3,835
Registered: 05-04-2007

Virus concern Mal/ObfJS-A

Hi - For tonight I have edited your post just to remove links with potential virus's that might be inadvertently clicked on.

If you can get us the info as Mand requested we will hopefully be able to advise further.

Ian
lingbob
Grafter
Posts: 734
Registered: 05-04-2007

Virus concern Mal/ObfJS-A

Quote
Hi - For tonight I have edited your post just to remove links with potential virus's that might be inadvertently clicked on.

This sounds as though it could have something to do with the problem I reported in this thread, which was investigated in this P1. Sounds a bit dodgy to me!
N/A

Virus concern Mal/ObfJS-A

I have tried logging in to web mail this morning and I still get the warning messages. (I don't get them when logging in at home).
At work we use Sophos Enterprise. At home I use AVG in addition to the plusnet stuff.
I'm not sure what Mand meant about raising a ticket. How do I do that?
What other info do you need?
Geoff
Community Gaffer
Community Gaffer
Posts: 12,803
Thanks: 635
Fixes: 62
Registered: 04-04-2007

Virus concern Mal/ObfJS-A

Hi there,

You can raise a ticket here.

Is it exactly the same symptoms you are seeing? Include as much information as you can on the ticket and we'll take a look. If you can attach screengrabs then that would be great.

Kind Rgds,

Bob Pullen
Plusnet Products Team
If I've been helpful then please give thanks ⤵