Computer virus warning

[short 215]

Last night I followed a link to an offsite website to see a video. I was either on Talk, Secrets, or Addicts. I am really miffed at Secrets at the moment but I can't honestly say it was there since I was cruising and kinda lost track of where I had started from.

 

Anyhow, after following the link of the board, windows started popping up. Then my computer went into a reboot that I couldnt stop. When it came back a message kept popping up that I had a spy bot and that I need to go download some software. Not trusting the the source of that message I decided to look at task manager to see what was running. Task manager was no longer available. I shut the computer down.

 

So today I disconnected all networking and tried to boot it up. It boots up but I'm not able to see the screen.

 

 

If anyone else runs across this please make a note of what path you took and let me or Martin know even if its on a different board. I need to know what I'm dealing with.

[js007 795]

I'm using a Mac.

 

Still, twice in the last week I've somehow come across software that pops up on my computer. It tries to tell me I need to run some sort of a virus program. Also on the screen is a very small window. No matter what button you push, you can't get rid of the page or the small window without starting the process. Then you can stop it.

 

If I could, I'd find the company that's behind the nonsense and cause them a world of trouble. Fuckers.

 

J

[jacko 8,822]

Scareware, as I heard it called recently. (js007).

[MC_Ldop 40]

A lot of this is incredibly easy to avoid if you block pop-ups, block ads, and are smart about your surfing. If need be, use a free anti-virus/anti-spyware program.

[jacko 8,822]

A lot of this is incredibly easy to avoid if you block pop-ups, block ads, and are smart about your surfing. If need be, use a free anti-virus/anti-spyware program.

Yes the above caused me to do a manual update on Spybot and AVG-Free.

 

I don't think there is an option to block ads on IE7... let me know if I am wrong or there is a free add-in. I know Firefox can accept one.

[short 215]

Its a f*** shame that MS released software that can be so easily exploited by this stuff..

[joekicker 53]

I don't think there is an option to block ads on IE7... let me know if I am wrong or there is a free add-in. I know Firefox can accept one.

 

Install Privoxy, and all browsers will block all ads all the time. It's freeware, open source - do a search and download it.

 

I put it on for Google Chrome, and it works quite well.

 

 

 

To the OP. Look for the name of the pric... er, the company that is advertising the cure for your problem. Then google that name, and you'll find recovery instructions. From your description, it could be any one of a hundred scum-sites.

[jacko 8,822]

Install Privoxy, and all browsers will block all ads all the time. It's freeware, open source - do a search and download it.

 

I put it on for Google Chrome, and it works quite well.

This is too specialised for me, if I can't understand the web page, I don't think I want it installed and running on my computer.

 

I read for 20 minute, my head aches, I feel dizzy and I think blood is coming from my ears. I am going to go and lie down and read a Marvel comic. I feel depressed that I am so thick... I think Joe set me up again.

 

Thanks for the thought though.......

Edited October 9, 2008 by jacko

[Toy Boy 1]

I recently found out about NoScript for Firefox - it's as essential as an anti-virus program. Some of the attacks may be malicious XSS scripts rather than mere viruses.

 

If you're a firefox user, get it : HERE

[valentinoxxx 4]

For those who cannot boot their PCs, you can boot up a Rescue CD and run an antivirus scan from there: Avira AntiVir Rescue System(image file) or Avira AntiVir Rescue System(application file)

 

Of course you will need access to another PC in order to create the CD, but since you are posting on here I will assume that you have access.

 

Dependent on the software available on the available PC, Avira have supplied two methods of creating the CD. The first just burning the Image file to disc or the second, placing a CD in the drive and running the application file.

 

Once the CD is created, place it into the infected PC/Laptop and start it up.

 

Guide(Just read the instructions, as you have already created the CD)

 

For those of you who can boot up, you can use Malwarebytes' Anti-Malware to remove the offending items. Just download, install, update and run a Quick Scan. When the scan is completed, make sure the items found are ticked and then choose Remove Selected. Once done, reboot if requested.

 

For those of you who ran the Rescue CD, once you are able to get on to your Desktop, you too can run the AntiMalware program.

[THE_DRUID 21]

I recently found out about NoScript for Firefox - it's as essential as an anti-virus program. Some of the attacks may be malicious XSS scripts rather than mere viruses.

 

If you're a firefox user, get it : HERE

 

I downloaded this(no script) onto my Firefox today.Now i find i can't use the Fast reply function on this and other forums.Is there a way around this,if so can anyone advise please? BTW The normal add reply is working as normal.

[vegasdave 0]

I use mostly macs as well. At yes from time to time even I will get popups. The difference is that that actual script and or malware will not affect me. The notion that you should have to somehow limit your surfing because there are some a**holes out there really ticks me off. Fortunately with my mac's I can roam where I wish, but when on my pc I do feel I have to be more cautious. What gets me is that this particular malware installs a virus and then makes you pay them to remove it. I just don't understand why the authorities are not able to "follow the money" and nail these guys. The same would be true for spammers. Virtualy all spam sells something, can't they just nail the people whose products are being sold.

[vegasdave 0]

I use mostly macs as well. At yes from time to time even I will get popups. The difference is that that actual script and or malware will not affect me. The notion that you should have to somehow limit your surfing because there are some a**holes out there really ticks me off. Fortunately with my mac's I can roam where I wish, but when on my pc I do feel I have to be more cautious. What gets me is that this particular malware installs a virus and then makes you pay them to remove it. I just don't understand why the authorities are not able to "follow the money" and nail these guys. The same would be true for spammers. Virtualy all spam sells something, can't they just nail the people whose products are being sold.

[friendlyric6411 0]

I had the same problem , Think you got it of pattaya addicts. I got some malwere , from the same site. but it does not mean it has been done malishasly. it could have just been past on , i use Avg its free and its very good . my virus was called double click ,,

[joekicker 53]

I downloaded this(no script) onto my Firefox today.Now i find i can't use the Fast reply function on this and other forums.Is there a way around this,if so can anyone advise please? BTW The normal add reply is working as normal.

 

This is a silly solution. It's sort of like removing the tyres from your car to make sure you never get a blowout. It, um, "works" of course.

 

All it does is stop scripts from running. You can do the same thing by clicking on "fearful paranoid" in your browser configuration. Without scripts, the Net is kind of barren these days.

[whilliam_mancon 2]

Great info, good to know, Thanks!

 

 

 

 

 

[Toy Boy 1]

I downloaded this(no script) onto my Firefox today.Now i find i can't use the Fast reply function on this and other forums.Is there a way around this,if so can anyone advise please? BTW The normal add reply is working as normal.

 

A lot of the "clever" things on a web page work via stand-alone scripts. But these can hog resources on your PC (e.g. the Nation website is very bad for this), and can also contain malware and phish for your security data. NoScript turns them all off by default, and then it is up to you to tell it to turn them back on. For a site you trust and that has never caused you any CPU hogging problems (like, say, pattayatalk.com), just click on the options button (at the bottom-right of my screen, you may have selected to have it placed differently) and then click on "Allow pattayatalk.com". After that it will look and work the same as always.

 

You can do this for all the sites you know and trust, but on newspaper sites, for example, that sometimes load videos by default, you can leave that script blocked so that it doesn't waste any of your bandwidth. In YouTube, of course, you will want to allow the videos, so just click on "Allow youtube.com".

 

Now if you are ever directed to a site with malicious scripts running, you are fully protected against it. Just be careful what scripts you allow. If you want to know a bit more about the subject, have a read of:

 

Cross-site scripting

 

It takes a little while to get used to it, but it is necessary protection. People who think it is unnecessary are deluding themselves. One of these days they will end up in tears posting about how their bank account details were somehow stolen from their PC's. "Honest, guvnor, I had AVG anti-virus and Spybot running, it CAN'T have been my PC!"

[THE_DRUID 21]

A lot of the "clever" things on a web page work via stand-alone scripts. But these can hog resources on your PC (e.g. the Nation website is very bad for this), and can also contain malware and phish for your security data. NoScript turns them all off by default, and then it is up to you to tell it to turn them back on. For a site you trust and that has never caused you any CPU hogging problems (like, say, pattayatalk.com), just click on the options button (at the bottom-right of my screen, you may have selected to have it placed differently) and then click on "Allow pattayatalk.com". After that it will look and work the same as always.

 

You can do this for all the sites you know and trust, but on newspaper sites, for example, that sometimes load videos by default, you can leave that script blocked so that it doesn't waste any of your bandwidth. In YouTube, of course, you will want to allow the videos, so just click on "Allow youtube.com".

 

Now if you are ever directed to a site with malicious scripts running, you are fully protected against it. Just be careful what scripts you allow. If you want to know a bit more about the subject, have a read of:

 

Cross-site scripting

 

It takes a little while to get used to it, but it is necessary protection. People who think it is unnecessary are deluding themselves. One of these days they will end up in tears posting about how their bank account details were somehow stolen from their PC's. "Honest, guvnor, I had AVG anti-virus and Spybot running, it CAN'T have been my PC!"

 

Thanks Toy Boy, i sussed it out not long after posting my query,but good info for the less computer literate like myself.Cheers.

[joekicker 53]

Yes, this is fine. Or you can just do it with Firefox: Tools Options (or Preferences on Mac), Content. Untick Enable Java. Get control via the Advanced button.

 

Every browser has a version of this.

[valentinoxxx 4]

Not quite sure why this thread has been hijacked.

 

It is very likely that the Malware is installed inadvertently by the user.

 

I don't think NoScript can guard against that.

 

People just like to click on things. :) Girlfriend did the same, even the SPyBot threw up many alerts, she just kept on clicking Allow. Though this was because the program disguised itself as Messenger or similar.

[short 215]

I pulled the drive out and used another computer to run Anti-Virus on it. Here's what I found.

 

Trojan.Perfcoo

Trojan.Virantix

Hacktool.Rootkit Virus ID: 16268

Trojan.Perfcoo

Packed.Generic.182

Downloader.MisleadApp

Packed.Generic.182

Trojan.ByteVerify

Trojan.Virantix.C

Downloader.MisleadApp

Packed.Generic.182

 

I then had to use RegEdit to set DisableTaskMgr to zero to the task manager back.

 

For some reason the LCD monitor on that computer went out as well at nearly the same time.

Edited October 13, 2008 by short

[joekicker 53]

So you don't use any protection. But you're kind of pixxed at Secrets.

 

That's a lot of pr0n sites!

[short 215]

So you don't use any protection. But you're kind of pixxed at Secrets.

 

That's a lot of pr0n sites!

 

The closest thing to porn sites I ever go to are the Pattaya forums.

 

You are right though, I had gotten lax getting Norton Anti virus every year. With six machines now, it gets rather expensive to renew each one of them every year.

[valentinoxxx 4]

The closest thing to porn sites I ever go to are the Pattaya forums.

 

You are right though, I had gotten lax getting Norton Anti virus every year. With six machines now, it gets rather expensive to renew each one of them every year.

 

Norton Removal Tool

 

Use one of the freebies:

AVIRA

Rising AntiVirus

AVAST

AVG 8

 

 

 

 

 

 

Another link for RISING.

[Barhop 197]

Well, this sure is an old thread, but I have received TROJAN warnings for the last two nights for PayttayaOne News, from Malwarebytes Plus.  Guess this could have been posted on the NW Group thread 

Anyway, for info...