Copper Foil Laminates - Flex sensors
-
I got hit with the same fake antivirus attack last night on Facebook - twice! Both times it did a browser hijack within a few minutes of entering the Farmtown game. It's not a new approach, as an almost identical attack has been reported sporadically at work for months, but it is a new (January) virus payload, according to Computer Associates. The current variant is called 'fake Antivir' and installs the virus code if you click on OK at any point. Closing the browser instance is supposed to block the installation.
"A Journey of a Thousand Rest Stops Begins with a Single Movement"
Twice? Does your computer have a virus?
I know you believe you understood what you think I said, but I am not sure you realize what you heard is not what I meant.
-
Twice? Does your computer have a virus?
I know you believe you understood what you think I said, but I am not sure you realize what you heard is not what I meant.
Nope - freshly scanned. And no malware that AdAware or CA Antispyware can find.
"A Journey of a Thousand Rest Stops Begins with a Single Movement"
-
Nope - freshly scanned. And no malware that AdAware or CA Antispyware can find.
"A Journey of a Thousand Rest Stops Begins with a Single Movement"
I've just scanned with Sophos, didn't find anything:thumbsup: Just doing a scan with AdAware now. Maybe it is somehow a browser hijack from the server end?
I know you believe you understood what you think I said, but I am not sure you realize what you heard is not what I meant.
-
I've just scanned with Sophos, didn't find anything:thumbsup: Just doing a scan with AdAware now. Maybe it is somehow a browser hijack from the server end?
I know you believe you understood what you think I said, but I am not sure you realize what you heard is not what I meant.
That's what I suspect, and when I later returned to the Farmtown game from Facebook, it did not happen again. I suspect that the owners of the site detected it and removed it quietly. According to CA, this is currently the top threat in their list, with a risk rating of Medium. They also provide complete details of the files and registry changes that have to be removed to get rid of the thing if infected. None exist on my machines.
"A Journey of a Thousand Rest Stops Begins with a Single Movement"
-
That's what I suspect, and when I later returned to the Farmtown game from Facebook, it did not happen again. I suspect that the owners of the site detected it and removed it quietly. According to CA, this is currently the top threat in their list, with a risk rating of Medium. They also provide complete details of the files and registry changes that have to be removed to get rid of the thing if infected. None exist on my machines.
"A Journey of a Thousand Rest Stops Begins with a Single Movement"
Do you have a link to the details of the registry changes? I would like to check my machine :)
I know you believe you understood what you think I said, but I am not sure you realize what you heard is not what I meant.
-
Do you have a link to the details of the registry changes? I would like to check my machine :)
I know you believe you understood what you think I said, but I am not sure you realize what you heard is not what I meant.
-
Do not go on the link that is in that post, the site looks OK at first, but then redirects to some other site, and then it comes up with a warning saying something along the lines of "You need to install anti malware" and has a screenshot of Windows Explorer. The site is clearly some kind of site that tries to get unsuspecting users to click the OK button and install a load of crap. Edit: Heres a pic of it to prove it. ^. I think the site only affects Opera as it does not seem to affect IE, Chrome, or FF.
I know you believe you understood what you think I said, but I am not sure you realize what you heard is not what I meant.
My operating system kernel the first time it booted
modified on Sunday, February 14, 2010 7:59 AM
This is definitely a new virus. Saw it on a PC at work two days ago and listened to the admin ranting about what he'd do to the "pissant little punk" who wrote it... (The PC in question was never exposed to the instructables site) Sorry I don't have a name or something for you - just heard it in passing as I looked over our poor admin's shoulder - I think he called it "rogue Anti-malware virus," but that could have been merely descriptive. I'm sure that if you use the CD-boot version of a good AV, you should be able to find and remove it.
-
Do not go on the link that is in that post, the site looks OK at first, but then redirects to some other site, and then it comes up with a warning saying something along the lines of "You need to install anti malware" and has a screenshot of Windows Explorer. The site is clearly some kind of site that tries to get unsuspecting users to click the OK button and install a load of crap. Edit: Heres a pic of it to prove it. ^. I think the site only affects Opera as it does not seem to affect IE, Chrome, or FF.
I know you believe you understood what you think I said, but I am not sure you realize what you heard is not what I meant.
My operating system kernel the first time it booted
modified on Sunday, February 14, 2010 7:59 AM
Just tried with Opera, and got no pop-ups. Did you have any other tabs open, at the time? One of them might have loaded an infected banner on refresh.
I wanna be a eunuchs developer! Pass me a bread knife!
-
Sorry for the late reply, I've been away :) Thanks for the link! Done a look in the registry for the keys etc, none found. And the antivir.exe file does not seem to be on the computer :)
I know you believe you understood what you think I said, but I am not sure you realize what you heard is not what I meant.
