NS COMPUTER VIRUS?

Posts: 925 - Karma: 109

Karma: 109

Posts: 925

Insane

I got onto NS today to chat away and suddenly my virus blocker told me a Trojan was trying to download itself to my computer. I was on the phone with another NS member and 5 minutes later his computer started to download a virus through his firewall and went through macafee... And basically a fake virus protector was scanning his computer but was actually downloading a Trojan. It pretty much screwed his computer and now he can no longer use his internet and scan his computer for viruses and we were both wondering if anyone else's virus blocker was active while on NS.

Aug 26 2009 1:10AM

0 0

MacMahoooon

Posts: 9009 - Karma: 3,305

Karma: 3,305

Posts: 9009

Crazy Fool

The current malware I think it is, is not currently recognized by over half of the major antivirus programs, including norton, mcafee and avg. so just doing a virus scan is not conclusive. download malwarebytes and run that as well.

The problem is we have not been able to reproduce it on any of our systems to be able to track it down

Sep 1 2009 1:26PM

0 0

bootleg_BEN

Posts: 2499 - Karma: 44

Karma: 44

Posts: 2499

Addict

i have windows live one care and it works really good. Dont know if you have used that?

Sep 1 2009 1:36PM

0 0

caucasian_chad

Posts: 4078 - Karma: 3,625

Karma: 3,625

Posts: 4078

No Life

I know its not my computer that was infected, because I just reformatted to Windows 7 about a week ago and the only site I have visited since then are Yahoo Mail, Facebook, NS, Youtube, Vimeo, and my school's website. A few days ago, When I went to visit NSG, I got redirected to this URL:
http://inotraffa.info/021wL1AzLwEzL==&2327200924046 (don't click)
This is a know spyware site, but when I was redirected, the site was down.

This is actually a widespread problem, this is not the only site experiencing it.

I think we're done with this now though, because I've been browsing for a while now with Adblock Plus off and I can't seem to recreate the problem either.

Sep 1 2009 2:15PM

0 0

Mr.Bishop

Posts: 22671 - Karma: 75,830

Karma: 75,830

Posts: 22671

@th1337

PLEASE

Everyone, try installing and running this:

http://www.malwarebytes.org/

If you are seeing the virus warning, we want to double check that it isn't your computer. Even if you've formatted (actually ESPECIALLY if you've formatted) you're not safe. Remember, most of what seems to be out there about this virus says that it comes from a trick upgrade of your flash player. So if you had re-installed your OS, you'd be clicking like mad to install plugins and could have missed it.

Please, give this a quick try.

Sep 1 2009 2:41PM

0 0

caucasian_chad

Posts: 4078 - Karma: 3,625

Karma: 3,625

Posts: 4078

No Life

^ did that, no viruses

Sep 1 2009 4:33PM

0 0

Avifarer

Posts: 5926 - Karma: 598

Karma: 598

Posts: 5926

No Life

i just got it. this is what it looks like..no matter how many times i click exit it wont go away.

Sep 1 2009 6:32PM

0 0

Magnetic

Posts: 845 - Karma: 229

Karma: 229

Posts: 845

Insane

I got the same thing and made it go away here is what you do click the upper right x button on the virus screen thing. Then when it pops up and says cancel or continue press continue... no you are not downloading the virus you are just continuing away from the page. I hope this helped and i hope I am not completely wrong. but it worked for me and nothing has happened yet.

Sep 1 2009 9:13PM

0 0

Six.0.Tree-ski

Posts: 4059 - Karma: 67

Karma: 67

Posts: 4059

No Life

yes that is it! it wasnt the script box like earlier, thats the same thing that popped up for me and im positive it was from NS. the thing is so stupid cause i have the vista look and not xp but whatever. get this shit fixed

Sep 1 2009 9:24PM

0 0

caucasian_chad

Posts: 4078 - Karma: 3,625

Karma: 3,625

Posts: 4078

No Life

No, you are probably infected now. It doesn't tell you it's downloading, that's the whole point.
The ONLY safe way out is Ctrl+Alt+Delete>Task Manager>Processes>(browser name).exe>kill process.

Sep 2 2009 2:09AM

0 0

MacMahoooon

Posts: 9009 - Karma: 3,305

Karma: 3,305

Posts: 9009

Crazy Fool

Thanks everyone, that screen shot is a big help in narrowing down whats going on. We have been trying to get our own machines infected direct from NS to figure this out, but so far we cannot recreate this ourselves. We now know that this is NOT strictly an NS problem, as its wide spread all over the net, it just may seem to present itself while using NS if that is where you spend most of your time. We are still combing every ad source we have to make sure its not one of ours spreading it, but so far we have come up clean. It can also come from other sources besides ads and these designers have been extremely clever in the multiple ways it spreads.

Below I have attached two links with information on the infections, as well as how to clean them (hopefully). These are NOT the end of the world, and with a little effort you can get back to normal.

http://malwarecrawler.com/?tag=pavexe

http://www.bleepingcomputer.com/virus-removal/remove-total-security

Thanks for hanging in there with us, the last thing we want is any reason to scare you guys away.

Sep 2 2009 9:20AM

0 0

skijunkiedtm

Posts: 9229 - Karma: 61

Karma: 61

Posts: 9229

Crazy Fool

my lil bro got it on our computer and hes never been to NS.

Sep 2 2009 3:17PM

0 0

50in07

Posts: 3070 - Karma: 1,471

Karma: 1,471

Posts: 3070

Addict

It just tried to get into to my computer.

Sep 2 2009 9:57PM

0 0

Lemuel

Posts: 14477 - Karma: 10,515

Karma: 10,515

Posts: 14477

Crazy Fool

This just popped up a few times while I was on here? I didn't even click anything.

Sep 2 2009 10:15PM

0 0

tBatt

Posts: 9632 - Karma: 580

Karma: 580

Posts: 9632

Crazy Fool

So far this has happened to me 3 times. First 2 times were back in the winter, and once about 5 minutes ago. I have Comodo Antivirus installed so it tells me when anything is trying to install or whatever. Usually i get file names that make absolutely no sense trying to install in my registry and i click block. Malwarebytes has been the most effective program to track down the virus, but so far not a whole lot of luck getting rid of it. The first time it happened I gave my computer to a friend who is a computer tech and the second and third time I did a System Restore.

No help really with screenshots or anything

Sep 2 2009 10:33PM

0 0

bootleg_BEN

Posts: 2499 - Karma: 44

Karma: 44

Posts: 2499

Addict

thats on mac, SCARY!!!!!!!!!!!

Sep 2 2009 10:46PM

0 0

bootleg_BEN

Posts: 2499 - Karma: 44

Karma: 44

Posts: 2499

Addict

Dont know if i mentioned it but when i got redirected and got a popup, that was the virus, I had clicked on my inbox!

Sep 2 2009 11:28PM

0 0

.jon

Posts: 2121 - Karma: 345

Karma: 345

Posts: 2121

Addict

i just got fucked! basically i got a warning saying that my computer is about to be compromised because of a lack of virus protection and then was shown a fake virus scanner which i tried to exit immediately but my computer restarted before i could.

now whenever i hit ctrl+alt+delet i'm only shown a list of the processes and am not able to do anything to them. i don't have the tabs at the top of the box either that would allow me to see applications that are running.

i;m only able to start applications through opening files. for example... in order to get onto NS i had to open up a microsoft works word processor file. i can't just start the microsoft works word processor. then i had to create a hyperlink within that file and click on it in order to open firefox. i can't just start up firefox from a desktop shortcut or under the programs list.

any time that i attempt to directly launch an application a system command box pops up for a split second then disappears.

luckily i don't give a shit about this 4-year old computer and i was getting a new one within the week anyway...

Sep 3 2009 12:35AM

0 0

.jon

Posts: 2121 - Karma: 345

Karma: 345

Posts: 2121

Addict

why did this get moved to site discussion?

it affects everybody on NS... just about everybody looks in NSG... but farrrrrr fewer people visit Site Discussion regularly

Sep 3 2009 12:51AM

0 0