JS:Redirector-H2 [Trj] infection, or false positive?

Index » Feedback

 
Reply #26 - 2009 May 17, 9:47 am
stupiddog Member
From: Germany NRW Bonn Registered: 2009-02-26 Posts: 33

Hi Fabrice, thanks for fixing that so fast. Do not beat yourself up too much about this, I work in the IT industry and some years ago, the company network of my previous employer was infected with VBS/LoveLetter. Happens to the best of us!

Reply #27 - 2009 May 17, 9:51 am
fbatta New member
From: New York Registered: 2006-06-17 Posts: 1

Thanks woelpad. Same issue with the "Kanji Links" script.

Reply #28 - 2009 May 17, 1:34 pm
frlmarty Member
From: EC Registered: 2009-01-25 Posts: 123

Hello Fabrice,

I used to use this link to review the failed kanji, now it does not work anymore:

http://kanji.koohii.com/review/review.p … &box=1

Is there a chance to make it work again?

edit: I just noticed that all the review-piles don't work - they load and load ... and can't find the page.

I use greasmonkey (german keywords)

In Opera it works, without the translated keywords.

What do I have to do to make the greasemonkey work again?
If I have to install greasemonkey again: will I loose all my keywords?

thank you for your effort!
frlmarty

Last edited by frlmarty (2009 May 17, 1:46 pm)

Advertising (register and sign in to hide this)
JapanesePod101 Sponsor
 
JapanesePod101
Reply #29 - 2009 May 17, 1:49 pm
Thora Member
From: Canada Registered: 2007-02-23 Posts: 1691

frlmrty - Go to Substitute Keywords and click install. Woelpad fixed it (see reply #21 and #24 in this thread). I don't know about the review fail script.

Last edited by Thora (2009 May 17, 1:51 pm)

Reply #30 - 2009 May 17, 2:02 pm
frlmarty Member
From: EC Registered: 2009-01-25 Posts: 123

Thora wrote:

frlmrty - Go to Substitute Keywords and click install. Woelpad fixed it (see reply #21 and #24 in this thread). I don't know about the review fail script.

Thank you Thora, I trust in you and Woelpad.

and hope it does not erase my 650 keywords .... crossing my fingers....

10 secs later: It worked! hurray!

Last edited by frlmarty (2009 May 17, 2:03 pm)

Reply #31 - 2009 May 17, 8:14 pm
woelpad Member
From: Chiba Registered: 2006-11-07 Posts: 425

fbatta wrote:

Thanks woelpad. Same issue with the "Kanji Links" script.

Indeed, it's only working on the study page, not on the review page. One of Ricardo's library functions is erroring out. The best thing you can do for now is to remove

Code:

http://kanji.koohii.com/review*

from the list of included pages for this script. Open the Greasemonkey dialog, select the Kanji.Koohii: Kanji Links script, then select above mentioned url in the right-hand top pane and click the delete button. Or better still, move it to the bottom pane, so you have it handy after the problem is fixed. I'll try to get a hold of Ricardo.

Last edited by woelpad (2009 May 17, 8:15 pm)

Reply #32 - 2009 May 18, 10:01 pm
woelpad Member
From: Chiba Registered: 2006-11-07 Posts: 425

Fixed the Kanji Links script. After installing, you can move the review page back to the top pane.

Reply #33 - 2009 May 19, 12:04 am
spideymike Member
From: California Registered: 2008-11-09 Posts: 25

I just installed the substitute keywords script (post fix) but I am seeing the same problems reported before the fix. (In review the card stays in loading state forever.) Has their been a regression or am I missing something?

Reply #34 - 2009 May 19, 1:18 am
woelpad Member
From: Chiba Registered: 2006-11-07 Posts: 425

Not that I'm aware of. Is there any other script active that you need to update? Did some older version stay around? You can also check the version history by opening the script in an editor. Current version is 1.8.

Reply #35 - 2009 May 19, 1:50 am
spideymike Member
From: California Registered: 2008-11-09 Posts: 25

It says it is 1.8. I've got no other scripts installed for koohi.com.

Reply #36 - 2009 May 19, 1:55 am
woelpad Member
From: Chiba Registered: 2006-11-07 Posts: 425

Any bold error in the error console upon reloading/restarting the review?

Reply #37 - 2009 May 19, 1:58 am
spideymike Member
From: California Registered: 2008-11-09 Posts: 25

No errors. Just some css warnings.

Reply #38 - 2009 May 19, 2:15 am
woelpad Member
From: Chiba Registered: 2006-11-07 Posts: 425

This is getting ugly. I'm going to send you through e-mail a part of the code sprinkled with debug messages. Replace the relevant portion of the script, save, reload the review page and report to me the messages in the error console.

Reply #39 - 2009 May 19, 3:08 am
spideymike Member
From: California Registered: 2008-11-09 Posts: 25

Sorry it took me a while. Had some connectivity problems. Anyway, what I see is:

http://userscripts.org/scripts/show/7118/Kanji.Koohii: Substitute keywords: Review

http://userscripts.org/scripts/show/7118/Kanji.Koohii: Substitute keywords: Handle

http://userscripts.org/scripts/show/7118/Kanji.Koohii: Substitute keywords: Response: @{"items":[{"kanji":"幽","strokec":"9","framenum":"1380","keyword":"seclude <span class=\"edition\">3rd edition<\/span><br \/>faint <span class=\"edition\">4th edition<\/span>","string1":"1 of 65 expired cards","string2":"Tested : 0<br \/>Passed : 0<br \/>Failed : 0"}]}

http://userscripts.org/scripts/show/7118/Kanji.Koohii: Substitute keywords: Card

http://userscripts.org/scripts/show/7118/Kanji.Koohii: Substitute keywords: Replaced with seclude <span class=\

http://userscripts.org/scripts/show/7118/Kanji.Koohii: Substitute keywords: Multi: seclude <span class=\ <span class="edition">3rd edition</span>

http://userscripts.org/scripts/show/7118/Kanji.Koohii: Substitute keywords: Kanji: 幽

http://userscripts.org/scripts/show/7118/Kanji.Koohii: Substitute keywords: Stroke Count: 9

http://userscripts.org/scripts/show/7118/Kanji.Koohii: Substitute keywords: Altered to @{"items":[{"kanji":"幽","strokec":"9","framenum":"1380","keyword":"seclude <span class=\ <span class="edition">3rd edition</span>","string1":"1 of 65 expired cards","string2":"Tested : 0<br \/>Passed : 0<br \/>Failed : 0"}]}

Reply #40 - 2009 May 19, 3:36 am
spideymike Member
From: California Registered: 2008-11-09 Posts: 25

Here is another clue. It seems to have a problem with that particular character (1380). If I explicitly select a bin to review from it works (except for the bin that that card is in.)

Reply #41 - 2009 May 19, 3:54 am
spideymike Member
From: California Registered: 2008-11-09 Posts: 25

And one more clue before I go to bed. If I go to char 1380 on the study page and change it's keyword I can then load it in review.

Reply #42 - 2009 May 19, 4:14 am
woelpad_nl Member
From: Chiba Registered: 2006-12-26 Posts: 23

1380 is a multi-edition keyword, something I didn't test against. Problem solved. Thanks for the assistance.

Reply #43 - 2009 May 19, 11:45 am
spideymike Member
From: California Registered: 2008-11-09 Posts: 25

Thanks for the quick fix!

Reply #44 - 2009 May 20, 3:04 am
ファブリス Administrator
From: Belgium Registered: 2006-06-14 Posts: 4021 Website

Adobe Confirms PDF Zero-Day, Says Kill JavaScript

http://it.slashdot.org/article.pl?sid=0 … ;art_pos=3

I'm pretty sure that's how I caught this trojan, not because of windows updates slightly behind or lack of resident protection, after all (though the latter may have helped, it wouldn't solve the root problem).