Gmail infected with trojan?

Discussion in 'ESET NOD32 v3 Beta Forum' started by waynebike, May 9, 2005.

Thread Status:
Not open for further replies.
  1. waynebike

    waynebike Registered Member

    Joined:
    Nov 24, 2004
    Posts:
    2
    Hey guys. Im having some issues tonight with google gmail. Every time that I try to go to the site, NOD32 is popping up with a warning about GMAIL being infected with something called "DelTreeY.B Trojan". Just wondering if something happened to gmail or if NOD32 is just mis-reporting.

    Here is a screenshot of what im seeing:
     

    Attached Files:

  2. DonKid

    DonKid Registered Member

    Joined:
    Jun 27, 2004
    Posts:
    566
    Location:
    S?o Paulo, Brazil
    Hi waynebike,

    I tested my Gmail account and no problem with it.
    Lets´s wait for Eset´s Special Forces come around.

    Best Regards,

    DonKid.
     
  3. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    I dont see any malware on GMail either. Like DonKid said, let Happy Cool come and analyse this :)
     
  4. Happy Bytes

    Happy Bytes Guest

    Step 1: Start Internet Exploder
    Step 2: Clean the Internet Cache
    Step 3: Navigate to gmail until you get this warning
    Step 4: Click CLOSE ( and then click yes for continue )
    Step 5: Scan the Internet Cache with the on Deman Scan for the file
    Step 6: Send this file
    Step 7: Open A Beer
    Step 8: Enjoy it
     
  5. waynebike

    waynebike Registered Member

    Joined:
    Nov 24, 2004
    Posts:
    2
    Done and sent. Thanks alot for the help. But whats next?
     
  6. Happy Bytes

    Happy Bytes Guest

    this...
     
  7. MarkSpiteri

    MarkSpiteri Guest

    I am getting this too. Anybody has any idea what this trojan is?
     
  8. Happy Bytes

    Happy Bytes Guest

    Probably a f/p.
    ( Actually, i'm very sure about this :D )

    But Daddy Cool is still in the bed.... Hafta make some coffee first before i go to work :D
     
  9. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    Coffee? Say, I need a coffee too....Lets sit down and drink some together. Is that OK, Daddy Mike? :D
     
  10. Happy Bytes

    Happy Bytes Guest

    Do you mean this terrible sweet indian coffee? :eek:
     
  11. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    NO!!!! :eek:

    I mean the strong and nice one! Dont have any? :'(
     
  12. Happy Bytes

    Happy Bytes Guest

    You don't know my coffee... :D You would get dizzy if you smell on it :D
     
  13. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    Is it bittersweet or what? :D

    How do YOU manage to take it anyway if its as strange as you say it is? o_O :D
     
  14. Happy Bytes

    Happy Bytes Guest

    Ask this guy how fast they are leaving the office room when they see that i come in with my coffee cup :D :D :D
     
  15. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    I'm guessing - almost immediately like magicians.........and the speed at which they run causes a time warp due to the opening of a wormhole and you are back to the point of time where you are about to enter the office with that coffee cup.....better dispose of it this time or else its gonna be deja vu :D
     
  16. Happy Bytes

    Happy Bytes Guest

    Result: Will be fixed with priority.
     
  17. markspiteri

    markspiteri Guest

    Thanks, so i guess no need to worry that GMail has been infected hehe. Just another false positive.
     
  18. mvprj84

    mvprj84 Guest

    If you use firefox, you can get around this by going to

    https://gmail.google.com/gmail

    This is the only workaround that I have figured out. In Internet Explorer it will still give you the virus detection for the Internet Cache file.
     
  19. markspiteri

    markspiteri Registered Member

    Joined:
    May 10, 2005
    Posts:
    6
    Yeh IE will give the error if you go to that URL, but if you click Delete everything works fine.

    I hope they fix it soon though, it's quite irritating.
     
  20. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    Did you try updating to the 1.1092 update? It was quite large at 74kB, maybe it fixed this FP.....:doubt:
     
  21. markspiteri

    markspiteri Registered Member

    Joined:
    May 10, 2005
    Posts:
    6
    Yeh updated but still not fixed. The weird thing is how some users are expereincing the problem and others aren't.
     
  22. mvprj84

    mvprj84 Guest

    My wife experienced it last night around 5 PM and I didn't get it until today at about 2 PM.
     
  23. Visitor86

    Visitor86 Guest

    Seems to just be a problem with NOD.

    HappyBytes:

    What on earth is with your sig and the massive coffee poster sig? Inside joke?
     
  24. markspiteri

    markspiteri Registered Member

    Joined:
    May 10, 2005
    Posts:
    6
    This is really weird, without any updates whatsoever to NOD32, I just logged in to GMail and everything is working fine!!!


    Anybody care to enlighten me about what is going on? I think Google were experimenting with something...
     
  25. Happy Bytes

    Happy Bytes Guest

    I'm back :cool: ( Just woke up :D )

    So what's the status right now? Is it still detected?
     
Thread Status:
Not open for further replies.