MERGED4x: Virus alert/Trojans/Ads

[CusePhinFan]

AVG just gave me a warning that a virus (Win32/cryptor) was trying to open, and this was the only site I was on at the time. It originated from my Temporary Internet Files. I am running Firefox and WinXP. Also, sometimes when I am browsing this site, Firefox will just close out of nowhere. That has happened about five times. It happens when loading the pages.

Exact same thing here except I was redirected to some survey page once as well.

 

[KlausC]

I've had this problem all week. I thought you guys were just trying to keep the Jets fans out ...

 

[childoftheko4n]

Ya its these new damn banners, screwing everybody up. pretty sweet eh =/

 

[Schleprock]

awesome, I love malware infecting my computer from malicious ads! Is this the treat we get now if we are not VIPs? Mine just got infected with the "get ripped in 4 weeks ad" Here's the log of the infections my antivirus (Avira) caught, quarantined, but this does not stop the infection.

Virus or unwanted program 'HIDDENEXT/Crypted [heuristic]'
detected in file 'I:\Documents and Settings\Robert\Local Settings\Temporary Internet Files\Content.IE5\IDT9Y2XJ\load[1].php.

Virus or unwanted program 'EXP/Pidief.yag [exploit]'
detected in file 'I:\Documents and Settings\Robert\Local Settings\Application Data\Mozilla\Firefox\Profiles\30bl6kox.default\Cache\EF4511E3d01.

Virus or unwanted program 'TR/PCK.Tdss.Y.1530 [trojan]'
detected in file 'I:\Documents and Settings\Robert\Local Settings\Temporary Internet Files\Content.IE5\504QCYKL\cache[1].php.


And yes, banner ads can contain malicious malware, in fact, one of the biggest PITA malwares is linked to this phenomenon: the Antivirus 2008/Microsoft Antivirus 2009/Antivirus 2010 malwares. The new Antivirus 2010 version of the malware even recognizes EXEs for many of the common virus detectors and deletes it so you cannot use it to remove the infection, particularly Malwarebytes. Just search Google for "virus can't find MBAM.exe" Excuse me now while I go try and get rid of this.....

 

[Thumper1016]

It "might" be a coincidence but 2 times in the past 2 days my Kaspersky anti virus has caught 2 trojan viruses when I have visited this site.

Just an FYI...

If someone needs more info please email me at my yahoo account.

Stefins at Y

Steve

I had the same problem. Two times as well. So it does happen on this site. Dont feel like the lone ranger here I had to do a system restore just to get my computer to function.

 

[Dolphinsfan_09]

Trojan.Pidief.F showed on mine today. this site is Infected

 

[BARF]

I run Vista on my laptop with a ton of antivirus, but my desktop was hit by the System Tool bug. I am sure it is from here because I have tried going only to this site and it comes up. I have had to Sytem Restore the desktop several times.

i got hit with the same thing and i am still trying to restore my laptop

 

[BARF]

i think it started once those new banners got put on is there anyway to get rid of them besides being vip, if that is a way to get people to join vip that is ****ed up

 

[Tetragrammaton]

i think it started once those new banners got put on is there anyway to get rid of them besides being vip, if that is a way to get people to join vip that is ****ed up

If you system restore your laptop, you should fix it. When the laptop boots up, keep hitting F8 until you can choose safe mode, and then restore the laptop to a date before it all happened. The earlier, the better. It won't effect most saved work, so you should be fine.

Do you use Firefox? If so, use NoScript.

http://noscript.net/

It blocks anything that may be malicious on a website. Now, it will block all sorts of Java and the like, but you can allow script from individual sites you know you can trust. It is the best solution until staff fixes this, I presume.

 

[LandShark13]

i think it started once those new banners got put on is there anyway to get rid of them besides being vip, if that is a way to get people to join vip that is ****ed up

It's been stated a few times. Firefox/Noscript addon.

 

[Stefins]

I get A Virus warning when I use INTERNET EXPLORER or FIREFOX....
Does not matter....
I am glad I am not the only one having problems since all this AD BS.
Now the big question is should I become a VIP or buy better antivirus? ......

 

[Stefins]

If you system restore your laptop, you should fix it. When the laptop boots up, keep hitting F8 until you can choose safe mode, and then restore the laptop to a date before it all happened. The earlier, the better. It won't effect most saved work, so you should be fine.

Do you use Firefox? If so, use NoScript.

http://noscript.net/

It blocks anything that may be malicious on a website. Now, it will block all sorts of Java and the like, but you can allow script from individual sites you know you can trust. It is the best solution until staff fixes this, I presume.

What if you I do this today but my laptop was "Infected" from this site a week ago?

 

[Stefins]

NOTE....
PLEASE DO NOT CLICK ON THE LINKS IN THE POST......I think they are the VIRUS.....
I am just posting them so SOMEBODY ( Mods/Admin) can fix the problem.

Got these errors from visiting this site

Using Firefox
10/10/2009 11:04:42 PM http://laz.dkasoewo.info/mkaw/in.php Firefox Denied: HEUR:Exploit.Script.Generic
10/10/2009 11:04:42 PM http://laz.dkasoewo.info/mkaw/in.php Firefox Detected: HEUR:Exploit.Script.Generic


Using IE

10/10/2009 11:19:17 PM http://laz.dkasoewo.info/mkaw/in.php Internet Explorer Denied: Exploit.JS.Agent.art
10/10/2009 11:19:17 PM http://laz.dkasoewo.info/mkaw/in.php Internet Explorer Detected: Exploit.JS.Agent.art

Maybe some Tech person can help.

 

[Gonzo]

Just letting you all know we are aware of the issue and are working on it. Thank you all for the heads up. :hi5:

 

[Tetragrammaton]

What if you I do this today but my laptop was "Infected" from this site a week ago?

Restart your computer, and keep hitting F8 while it boots up, and select safe mode. When you get to safe mode, you will have the option of running system restore. Pick a date before the virus was installed. It goes back months, so you should find an appropriate date.