[Mom2*Lauryn*Jacob*]

I just wanted to report that I am getting a pop up from this site, right now and this site is the only site that I am getting this on. It pops up another window to another "site", some of which are Mommy related so they look like it could be "legitimate" pop ups from JM. My pop up blocker is set to Max but this pops anyway. I just installed a brand new antivirus just to see if it found it and it is blocking it now.

I did get infected prior to installing this new antivirus software. The virus is popping up as a Trogen and appears to disable the PC's DHCP services which essentially makes it impossible to obtain an IP address until you re-enable the DHCP services and clean up your machine. It also can disable the RCP services as well which will also render the PC unable to get an IP, in my case it seemed to only hit the DHCP stuff but initially it did disable the RCP services as well. I was getting hit all day yesterday and today with this. I just wanted to report it to someone.

It looks to me like a "cloud" like malware type of infection, and I am not sure if you as admins can even do anything to help but I did want to report it either way.

78.47.249.228 port 80 - That is the originating IP on this btw.

Oh and another bit of information....it LOVEs to pop up on refreshes especially AND on thread Edits. It doesn't hit each time I hit the site, but if I refresh about 75% of the time this hits and so far EVERY edit I have done it pops.

**I also wanted to add, my Symantec was not catching this with updated virus definitions, however my Eset Nod32 is catching it.

[Admin-pattyandthemoos]

I am sending you a pm for more information.

[dixiepig]

I'm having the same problem. Do you have a solution?

[~*Lisa*~]

A lot of people got a trojan from the website the day jm went down. Is there anything you know about this? Luckily my computer caught it before any real damage was done.