Virus?

[ELITEofWARMANGINGERYBREADMEN88]

Every time I come to this forum on my school's computer, a virus installs on the computer. This virus comes in form of a fake Anti-Virus program (how ironic) and to get rid of it, you got to buy the program, which is a fraud. My computer came down with it at least twice, maybe 3 times last year every time I came to .Org, and now 4 or 5 school computers, including 2 within 15 minutes of each other today came down with it. And my old comp I'm using now blocks the attacks too.

Just thought I let you guys know.

[TosaInu]

That sounds like a very nasty one Warman, I haven't seen it myself, but that says little as ads can be specific for one or more countries. Do you have some information about how the program is called?

[ELITEofWARMANGINGERYBREADMEN88]

http://www.bleepingcomputer.com/viru...antivirus-2010

I got a link on it TosaInu.


And after a while, it stops internet access, then lets you back on, only to their websites and to porn sites (it actually pops porn sites up on the screen every few minutes) .

[TosaInu]

I'll contact the host and see what he can find out about it. Is anyone else experiencing the same problems?

[A Nerd]

This virus got me before. Once today actually it tried. If you shut it down while doing the virus scan it seems to be no problem. Pain in the tookus it is!

[Togakure]

I'm using current Firefox with AdBlock plug-in, hence I don't see or hear any ads.

[Beefy187]

Yea firefox does the trick.
It seems to be happening for the IE users.

[Ironside]

If it's the same as the ones I've seen, kill it with Ctrl+Alt+Del when the popup window shows. You'll need to click on the window for the crap download to start. Of course being malware, it's enough to click anywhere on the window. Kills IE, but way better than the alternative. Don't use the restore function either, it loads the malware commercial again.

Restrictive downloading stopped it first time I've saw it (or whatever that yellow bar is really called), but I'm not intending to see if it still does.
Haven't seen it personally for a while.

[Populus Romanus]

Yea firefox does the trick.
It seems to be happening for the IE users.

I guess I'll stop using Internet Explorer then, before I get it too.

[phonicsmonkey]

Apparently this is still happening for IE users. We're on the verge of losing one regular guy from one of our hotseats because he doesn't want to come to the Org anymore and get this virus...

[TosaInu]

I talked to the host about this, he needs to know which banner is responsible for that. Do we have any clue?

[phonicsmonkey]

I'll ask my guy and see if he can help.

[Seon]

Yeah, I got this virus from the site at least 5 times this week. I had to manually delete it from the Temp Folder in the computer because Norton can't identify it.

I just got it right now too.

[TosaInu]

I made a small change in an attempt to narrow the options down, do people still get it from now on?

[Seon]

Pretty sure I just got another one from this site.

[TosaInu]

Thank you Seon. We don't have it isolated yet then.

[TosaInu]

Still getting virus?

[A Nerd]

I see this one here a few times, it hasn't caused me any trouble yet, I think it is a virus, that a pop up appears, and it says that the website needs to keep running java script or something to that effect. There is a OK and Cancel button to click. Even if you click the X in the upper right my virus software blocks something. I really need to change my browser! :O

[ELITEofWARMANGINGERYBREADMEN88]

My Norton is still blocking a attack, but not as often.

[Seon]

Well, no sign of Anti-Vira for two whole days. I will contact you all if I see the Beast once more.

[TosaInu]

I appreciate that. It's very hard for me to figure where it is located as I'm from Holland and the virus doing more than its best to hide.

[phonicsmonkey]

Visorslash just got another virus from the Org - this is what he sent me about it by pm at the TWC after I asked him if it was the same thing as last time (he is understandably reluctant to come here and post about it)

Different. It was XP Total Security. Dunno what ad this time, as Java 6.3 came up. Then the virus came up. Fixed it quickly though.

He is in Australia and uses IE if that helps.