Page 1 of 2 12 LastLast
Results 1 to 20 of 29

Thread: Reported Attack Site

  1. #1
    V.I.P Detlef's Avatar
    Join Date
    Dec 2004
    Posts
    6,197
    Thanks
    718
    Thanked 2,034 Times in 1,173 Posts

    Reported Attack Site

    If your browser suddenly jumps to look like the image below, close the browser and start again.

    Do not clidk on any of the boxes or links. You will already have seen that it has "temporarily customised" your browser and disabled the ability to view the source.

    Although it looks innocuous it actually contains some pretty nasty scripts and is about 50k in size..

  2. #2
    VIP Dreamcatcher's Avatar
    Join Date
    Dec 2004
    Posts
    1,450
    Thanks
    233
    Thanked 515 Times in 290 Posts
    Thanks for the heads up M8. Is it picked up by security software??

  3. #3
    V.I.P bobi's Avatar
    Join Date
    Dec 2004
    Posts
    199
    Thanks
    0
    Thanked 0 Times in 0 Posts
    i gott this yesterday, and since then my PC is infected with 198 diferern malware, spyware, viriuses you name it

    i was visiting a site that i know very well and it has no infection whatsoever
    when this block just jumped on me,

    i was stupid inaf to punc veiw the site anyway, then since it
    im busted with all sort of viriusses.

    i have try ad-ware, spyware doctor to remove this
    but it keeps spreding **** on my PC


    any help will be appritiated please
    i had avira antivirius when this happend, it did not stoped it

    today i installed kaspersky and made a clean up, but still it did not stop anything

    now im runing nod32 antivirius, and still this **** is making me mad


    my startup menu disaperd , explorer keeps jumpig all the time
    i even do not use IE , i use firefox


    anyone can help please

    cheers

    bobi

  4. #4
    V.I.P propwash's Avatar
    Join Date
    Dec 2004
    Posts
    124
    Thanks
    4
    Thanked 1 Time in 1 Post
    have you tried restoring back a month?.......might work?

  5. #5
    V.I.P
    Join Date
    May 2005
    Posts
    1,259
    Thanks
    474
    Thanked 604 Times in 293 Posts
    Try Spybot. It'll tackle most malware infestations.

  6. #6
    V.I.P RABBY's Avatar
    Join Date
    Jan 2005
    Posts
    3,094
    Thanks
    0
    Thanked 86 Times in 66 Posts
    bobi
    Using a POPUP BLOCKER + [AVIRA PREMIERE or KASPERSKY ] You should get no Problems

  7. #7
    V.I.P Detlef's Avatar
    Join Date
    Dec 2004
    Posts
    6,197
    Thanks
    718
    Thanked 2,034 Times in 1,173 Posts
    Some of the scripts (and there are a load of them) seem capable of hiding in the OS.

    The host site is Russian and it is classed as an "Exploit". I got suspicious when I couldn't view the source, so I saved the page and inspected the code manually.

    I'm surprised that the ISPs haven't got its IP address on a banned list.

    It wasn't picked up by my security stuff but it might have been if I had attempted to follow any of the links - but there is no way I'm going to risk that.
    Last edited by Detlef; 21-10-2008 at 09:39 PM.

  8. #8
    Member zdrax's Avatar
    Join Date
    Mar 2005
    Posts
    34
    Thanks
    0
    Thanked 0 Times in 0 Posts
    I only get this page when I try to visit a specific site. I thought it was a google page! But, I haven't noticed any malware, spyware or virus installed.

  9. #9
    V.I.P bobi's Avatar
    Join Date
    Dec 2004
    Posts
    199
    Thanks
    0
    Thanked 0 Times in 0 Posts
    well guys belive it or not
    but now i have try so many antivirius and spywayre software that im lost

    last spyware i try is the spyhunter3
    it detects this **** spyware/malware, but none of this are possible to remove the infected files .

    how can i go back to 1 moth working windows ??
    can some one help please, how is this procedure donne ???
    i will like to avoid to reinstall from scratch

    Please some one guide me step by step how to go back to a working windoes that i had lest say last week.

    cheers

    bobi

  10. #10
    V.I.P
    Join Date
    Dec 2004
    Posts
    317
    Thanks
    139
    Thanked 81 Times in 49 Posts
    Yes , if you have'nt got system restore turned off [I have ] you can go back to a previous date [before you got the virus/spyware] .Once you do and all is well , turn off system restore , then back on again . Everything will still be on your Pc .Pays you to clear out your tempory internet files too . I've had a PC in for repair every week for the last month and a laptop on Monday ......riddled with spyware .Much of the stuff is'nt picked up by an anti-virus program .Theres been lots of the Fake anti-virus programs going around too . Watch out for these ones . They hide your CD drive , your hard drive and are extremelly difficult to get rid of . You'll know you have it , if you have the words VIRUS ALERT after the clock on the taskbar.
    What you need is :

    CCleaner [cleans the temp int file .etc]

    and the next 2 are a must
    SUPERAnti-spyware
    Malwarebytes 'Anti-Malware .

    The last 2 have cleaned all the traces of the most recent investations
    going around , WITHOUT doing a format .

  11. #11
    V.I.P Detlef's Avatar
    Join Date
    Dec 2004
    Posts
    6,197
    Thanks
    718
    Thanked 2,034 Times in 1,173 Posts
    Reboot your PC and then keep pressing the F8 key (top row keys) about once a second.

    Just before the point that Windows normally loads it should give you an options screen (a text screen that lets you select certain options).

    One of them is "Last Known Good Configuration" - try that but if you have rebooted a lot it might still be an infected one.

    If you are still in trouble report back but I expect we will be kicked over to PC Dudez ( _http://www.pcdudes.co.uk/ ) so if you haven't registered there, now is a good time.

  12. #12
    V.I.P Micko50's Avatar
    Join Date
    Jan 2005
    Posts
    121
    Thanks
    33
    Thanked 2 Times in 2 Posts

    Online Virus Scanner

    Why not just try an online virus scanner, see if one of these will do the trick.

    Here's some links:-

    _http://housecall.trendmicro.com/

    _http://www.kaspersky-com/scanforvirus (change the - to a . in the centre of the link). The board's censor doesnt like the word kasper*SLY dot COM*

    _http://www.bitdefender.com/scan8/ie.html

    _http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

    _http://onecare.live.com/site/en-us/default.htm

    You can probably find more using Google.

  13. #13
    V.I.P Detlef's Avatar
    Join Date
    Dec 2004
    Posts
    6,197
    Thanks
    718
    Thanked 2,034 Times in 1,173 Posts
    It seems to start as a BHO so not many virus scanners will pick it up.

    It is a bit new for some of the virus s/w.

  14. #14
    V.I.P rasp's Avatar
    Join Date
    Dec 2004
    Posts
    532
    Thanks
    71
    Thanked 222 Times in 128 Posts
    Boot up in safe mode and run your antivirus from there.


    Worked for me with AVG found 6 files in windows but would not delete them.


    Ran in safe mode from Dos Command Prompt and it got rid of them.


    RASP

  15. #15
    V.I.P Detlef's Avatar
    Join Date
    Dec 2004
    Posts
    6,197
    Thanks
    718
    Thanked 2,034 Times in 1,173 Posts
    Quote Originally Posted by rasp View Post
    . . . Worked for me with AVG found 6 files in windows but would not delete them. . . . . .

    RASP
    Windows won't let you or any third party s/w delete files that it believes are in use.

    Another way to delete them is create a batch file with the dodgy files set to be deleted and name it autoexec.bat (or if autoexec.bat exists just add them to it). Then reboot normally.

    It works because autoexec.bat gets actioned before any Windows files get loaded.

  16. #16
    V.I.P grumpyy's Avatar
    Join Date
    Dec 2004
    Posts
    787
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Use Unlocker
    It can unlock any file or process from the right click context menu - then you can have your wicked way with it.
    _http://ccollomb.free.fr/unlocker/

  17. #17
    V.I.P grumpyy's Avatar
    Join Date
    Dec 2004
    Posts
    787
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Quote Originally Posted by zdrax View Post
    I only get this page when I try to visit a specific site. I thought it was a google page! But, I haven't noticed any malware, spyware or virus installed.
    "Reported attack site" is a Firefox feature- if it looks right, but it could be spoofed.

    _http://www.google.co.uk/search?hl=en&sa=X&oi=spell&resnum =0&ct=result&cd=1&q=reported+atta ck+site&spell=1

  18. #18
    V.I.P crabber's Avatar
    Join Date
    Dec 2004
    Posts
    1,601
    Thanks
    1,151
    Thanked 942 Times in 488 Posts
    I have cleared a couple of PC's of similar sh*te recently.
    Smitfraudfix run in safe mode was the answer, and then followed up with a full scan by superantispyware. This is a free and very good program.

  19. #19
    V.I.P bobi's Avatar
    Join Date
    Dec 2004
    Posts
    199
    Thanks
    0
    Thanked 0 Times in 0 Posts
    well guys i ended up reinstalling everything

    i was so ****ed , but now im on clean windows and im happy agein.

    this has been the wors virius i have had untill now, just spread like wild fire on my pc

    The spywayre that i gott was very nasty, as it just spread everywhere on my pc, folders , files amazing

    thank you for the replays guys, was nice to gett some help

    cheers

    bobi

  20. #20
    Junior Member
    Join Date
    Sep 2008
    Posts
    19
    Thanks
    0
    Thanked 0 Times in 0 Posts
    hi all Sparky dog gave correct answer.

    spybot .

    will remove all adware ,malware.

    will softstart yor computer second time you use it and wipe it clean.

    avg 7.5 will stop all the other nuisance ,rubbish.

    i run the two together.no probs since.

    cheers

Page 1 of 2 12 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •