{"id":856,"date":"2010-04-24T19:03:52","date_gmt":"2010-04-24T17:03:52","guid":{"rendered":"http:\/\/www.guion78.com\/wordpress\/?p=856"},"modified":"2010-04-25T08:23:34","modified_gmt":"2010-04-25T06:23:34","slug":"siti-infetti-da-jsexploit-agent-nba","status":"publish","type":"post","link":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/","title":{"rendered":"Siti infetti da JS\/Exploit.Agent.NBA"},"content":{"rendered":"<p>Comincia ad impazzare per la rete una grossa quantit\u00e0 di siti infetti da un famigerato trojan (<strong> JS\/Exploit.Agent.NBA trojan\u00a0connection terminated)<\/strong> che alla fine installa sul pc un nuovo antivirus.<br \/>\nI\u00a0siti infetti da codice js maligno sono del calibro di virgilio ed altri siti importanti che non vado a catalogare. <a href=\"\/wordpress\/wp-content\/uploads\/2010\/04\/virgilio-infetto.png\"><img fetchpriority=\"high\" decoding=\"async\" class=\"size-medium wp-image-857 alignleft\" title=\"virgilio infetto\" src=\"http:\/\/www.guion78.com\/wordpress\/wp-content\/uploads\/2010\/04\/virgilio-infetto-300x168.png\" alt=\"\" width=\"358\" height=\"228\" \/><\/a> Qu\u00ec accanto ne potete vedere un esplicito esempio. Gli Url che puntano al codice maligno variano sempre (non ho capito se ogni giorno o ad ogni visita).<br \/>\nAvast 5.x prontamente ha bloccato l\u2019attacco ma altri antivirus come Mcafee non sono ancora in grado allo stato attuale di eliminare del tutto il problema con la conseguenza che il pc viene infettatto.<br \/>\nPer pulirlo da questo schifo basta usare una versione aggiornata di Spybot (40 minuti di scansione) e il tutto viene eliminato.<br \/>\nI siti per il momento che sono riuscito a trovare che puntano allo schifo sono: http:\/\/google.analytics.com.tbuygryyutcj.info\/kav\/kav4.html<br \/>\nhttp:\/\/google.analytics.com.scvepuxdfzar.info\/Idkav\/kav4.html<br \/>\nMa penso proprio che ce ne siano altri e cambieranno spesso, sembra che il file incriminato sia \u201ckav4.exe\u201d.<br \/>\nChe consigli darvi per questo tipo di infezioni? Beh direi che \u00e8 quasi impossibile sapere quale sito \u00e8 infetto, per cui mi raccomando se usate Windows (Per Linux o MacOsx non potendo lanciare exe sono esenti):<br \/>\n1) Windows sempre aggiornato con tutte le patch<br \/>\n2) aggiornare sempre il proprio browser all\u2019ultima versione, possibilmente non le versioni Beta o Rc poco sicure(Firefox, Safari, Opera, Internet Explorer; Chrome ecc.)<br \/>\n3) aggiornare almento una volta al giorno l\u2019antivirus e usare l\u2019ultimo motore disponibile in rete (<a title=\"aVAST\" href=\"http:\/\/www.avast.com\/\" target=\"_self\">Avast 5<\/a> in questo caso ha fatto il suo dovere ed \u00e8 pure gratis)<br \/>\n4) installare spybot e tenerlo a portata di mano ;)<br \/>\n5) Attivare l\u2019Auc in windows 7 e Vista, in windows Xp usare un account utente non Administrator.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Comincia ad impazzare per la rete una grossa quantit\u00e0 di siti infetti da un famigerato trojan ( JS\/Exploit.Agent.NBA trojan\u00a0connection terminated) che alla fine installa sul pc un nuovo antivirus. I\u00a0siti infetti da codice js maligno sono del calibro di virgilio ed altri siti importanti che non vado a catalogare. Qu\u00ec accanto ne potete vedere un [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"ngg_post_thumbnail":0,"footnotes":""},"categories":[13],"tags":[339,338,341,340],"class_list":["post-856","post","type-post","status-publish","format-standard","hentry","category-sicurezza","tag-kav4","tag-kav4-html","tag-nba-trojan","tag-virgilio"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Siti infetti da JS\/Exploit.Agent.NBA - Guion Matteo<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Siti infetti da JS\/Exploit.Agent.NBA - Guion Matteo\" \/>\n<meta property=\"og:description\" content=\"Comincia ad impazzare per la rete una grossa quantit\u00e0 di siti infetti da un famigerato trojan ( JS\/Exploit.Agent.NBA trojan\u00a0connection terminated) che alla fine installa sul pc un nuovo antivirus. I\u00a0siti infetti da codice js maligno sono del calibro di virgilio ed altri siti importanti che non vado a catalogare. Qu\u00ec accanto ne potete vedere un [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/\" \/>\n<meta property=\"og:site_name\" content=\"Guion Matteo\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/BlogMatteoGuion\/\" \/>\n<meta property=\"article:published_time\" content=\"2010-04-24T17:03:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2010-04-25T06:23:34+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.guion78.com\/wordpress\/wp-content\/uploads\/2010\/04\/virgilio-infetto-300x168.png\" \/>\n<meta name=\"author\" content=\"Gua78\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Gua78\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minuto\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/\"},\"author\":{\"name\":\"Gua78\",\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/dc866ea65964583c162e5476e0ed60e9\"},\"headline\":\"Siti infetti da JS\\\/Exploit.Agent.NBA\",\"datePublished\":\"2010-04-24T17:03:52+00:00\",\"dateModified\":\"2010-04-25T06:23:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/\"},\"wordCount\":305,\"commentCount\":1,\"image\":{\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/www.guion78.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2010\\\/04\\\/virgilio-infetto-300x168.png\",\"keywords\":[\"kav4\",\"kav4.html\",\"Nba trojan\",\"virgilio\"],\"articleSection\":[\"Sicurezza\"],\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/\",\"url\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/\",\"name\":\"Siti infetti da JS\\\/Exploit.Agent.NBA - Guion Matteo\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/www.guion78.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2010\\\/04\\\/virgilio-infetto-300x168.png\",\"datePublished\":\"2010-04-24T17:03:52+00:00\",\"dateModified\":\"2010-04-25T06:23:34+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/dc866ea65964583c162e5476e0ed60e9\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/#primaryimage\",\"url\":\"http:\\\/\\\/www.guion78.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2010\\\/04\\\/virgilio-infetto-300x168.png\",\"contentUrl\":\"http:\\\/\\\/www.guion78.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2010\\\/04\\\/virgilio-infetto-300x168.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/2010\\\/04\\\/24\\\/siti-infetti-da-jsexploit-agent-nba\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Siti infetti da JS\\\/Exploit.Agent.NBA\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/#website\",\"url\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/\",\"name\":\"Guion Matteo\",\"description\":\"Il Blog ? finalizzato a dare una mano nei problemi informatici di tutti i giorni a tutti quelli a cui pu\u00f2 essere utile, spiegato in modo semplice e passo a passo\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/dc866ea65964583c162e5476e0ed60e9\",\"name\":\"Gua78\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e4699b3c931feae00228b34007799d5331f707aa1cfd35b40d0e0637d82cf18?s=96&d=mm&r=pg\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e4699b3c931feae00228b34007799d5331f707aa1cfd35b40d0e0637d82cf18?s=96&d=mm&r=pg\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e4699b3c931feae00228b34007799d5331f707aa1cfd35b40d0e0637d82cf18?s=96&d=mm&r=pg\",\"caption\":\"Gua78\"},\"description\":\"Amministratore del Portale\",\"sameAs\":[\"http:\\\/\\\/www.guion78.com\"],\"url\":\"https:\\\/\\\/www.guion78.com\\\/wordpress\\\/blog\\\/author\\\/administrator\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Siti infetti da JS\/Exploit.Agent.NBA - Guion Matteo","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/","og_locale":"it_IT","og_type":"article","og_title":"Siti infetti da JS\/Exploit.Agent.NBA - Guion Matteo","og_description":"Comincia ad impazzare per la rete una grossa quantit\u00e0 di siti infetti da un famigerato trojan ( JS\/Exploit.Agent.NBA trojan\u00a0connection terminated) che alla fine installa sul pc un nuovo antivirus. I\u00a0siti infetti da codice js maligno sono del calibro di virgilio ed altri siti importanti che non vado a catalogare. Qu\u00ec accanto ne potete vedere un [&hellip;]","og_url":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/","og_site_name":"Guion Matteo","article_publisher":"https:\/\/www.facebook.com\/BlogMatteoGuion\/","article_published_time":"2010-04-24T17:03:52+00:00","article_modified_time":"2010-04-25T06:23:34+00:00","og_image":[{"url":"http:\/\/www.guion78.com\/wordpress\/wp-content\/uploads\/2010\/04\/virgilio-infetto-300x168.png","type":"","width":"","height":""}],"author":"Gua78","twitter_misc":{"Scritto da":"Gua78","Tempo di lettura stimato":"1 minuto"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/#article","isPartOf":{"@id":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/"},"author":{"name":"Gua78","@id":"https:\/\/www.guion78.com\/wordpress\/#\/schema\/person\/dc866ea65964583c162e5476e0ed60e9"},"headline":"Siti infetti da JS\/Exploit.Agent.NBA","datePublished":"2010-04-24T17:03:52+00:00","dateModified":"2010-04-25T06:23:34+00:00","mainEntityOfPage":{"@id":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/"},"wordCount":305,"commentCount":1,"image":{"@id":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/#primaryimage"},"thumbnailUrl":"http:\/\/www.guion78.com\/wordpress\/wp-content\/uploads\/2010\/04\/virgilio-infetto-300x168.png","keywords":["kav4","kav4.html","Nba trojan","virgilio"],"articleSection":["Sicurezza"],"inLanguage":"it-IT","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/","url":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/","name":"Siti infetti da JS\/Exploit.Agent.NBA - Guion Matteo","isPartOf":{"@id":"https:\/\/www.guion78.com\/wordpress\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/#primaryimage"},"image":{"@id":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/#primaryimage"},"thumbnailUrl":"http:\/\/www.guion78.com\/wordpress\/wp-content\/uploads\/2010\/04\/virgilio-infetto-300x168.png","datePublished":"2010-04-24T17:03:52+00:00","dateModified":"2010-04-25T06:23:34+00:00","author":{"@id":"https:\/\/www.guion78.com\/wordpress\/#\/schema\/person\/dc866ea65964583c162e5476e0ed60e9"},"breadcrumb":{"@id":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/#primaryimage","url":"http:\/\/www.guion78.com\/wordpress\/wp-content\/uploads\/2010\/04\/virgilio-infetto-300x168.png","contentUrl":"http:\/\/www.guion78.com\/wordpress\/wp-content\/uploads\/2010\/04\/virgilio-infetto-300x168.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.guion78.com\/wordpress\/blog\/2010\/04\/24\/siti-infetti-da-jsexploit-agent-nba\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.guion78.com\/wordpress\/"},{"@type":"ListItem","position":2,"name":"Siti infetti da JS\/Exploit.Agent.NBA"}]},{"@type":"WebSite","@id":"https:\/\/www.guion78.com\/wordpress\/#website","url":"https:\/\/www.guion78.com\/wordpress\/","name":"Guion Matteo","description":"Il Blog ? finalizzato a dare una mano nei problemi informatici di tutti i giorni a tutti quelli a cui pu\u00f2 essere utile, spiegato in modo semplice e passo a passo","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.guion78.com\/wordpress\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Person","@id":"https:\/\/www.guion78.com\/wordpress\/#\/schema\/person\/dc866ea65964583c162e5476e0ed60e9","name":"Gua78","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/4e4699b3c931feae00228b34007799d5331f707aa1cfd35b40d0e0637d82cf18?s=96&d=mm&r=pg","url":"https:\/\/secure.gravatar.com\/avatar\/4e4699b3c931feae00228b34007799d5331f707aa1cfd35b40d0e0637d82cf18?s=96&d=mm&r=pg","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4e4699b3c931feae00228b34007799d5331f707aa1cfd35b40d0e0637d82cf18?s=96&d=mm&r=pg","caption":"Gua78"},"description":"Amministratore del Portale","sameAs":["http:\/\/www.guion78.com"],"url":"https:\/\/www.guion78.com\/wordpress\/blog\/author\/administrator\/"}]}},"views":6084,"_links":{"self":[{"href":"https:\/\/www.guion78.com\/wordpress\/wp-json\/wp\/v2\/posts\/856","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.guion78.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.guion78.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.guion78.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.guion78.com\/wordpress\/wp-json\/wp\/v2\/comments?post=856"}],"version-history":[{"count":0,"href":"https:\/\/www.guion78.com\/wordpress\/wp-json\/wp\/v2\/posts\/856\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.guion78.com\/wordpress\/wp-json\/wp\/v2\/media?parent=856"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.guion78.com\/wordpress\/wp-json\/wp\/v2\/categories?post=856"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.guion78.com\/wordpress\/wp-json\/wp\/v2\/tags?post=856"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}