• The move to the new server is done. There are some software and database maintenance updates in process. This has us passing the hat around to help out. We appreciate any donations. Seriously, even a dollar helps. The payment page may be found here - https://www.audiokarma.org/support.html

Virus attack after log in

Avast has been blocking it on my system since a couple days after I originally got it on 12/16. At least I think that's what it's blocking when the Avast alert pops up. Do you have Avast set for auto updating or are you manually updating daily?
 
I normally run Linux, and I have had no problems. Except I got a nice new Toshiba netbook for Christmas and it runs Windows 7. I wanted to use it like that to run my WT3 software and my Apple iTunes, which won't run on Linux. Well, I just got zapped, and I was all updated with the latest Win 7 patches and Windows anti-virus. My netbook is totally zorched. I can't even restore from the restore partition, and it has no CD-Rom and no rescue disks even if it had a CD-ROM. I am very very upset right now.

I won't be back to AK until this is resolved. I now have to send a netbook back to Amazon and hope they'll send me a new one. Very angry.
 
I normally run Linux, and I have had no problems. Except I got a nice new Toshiba netbook for Christmas and it runs Windows 7. I wanted to use it like that to run my WT3 software and my Apple iTunes, which won't run on Linux. Well, I just got zapped, and I was all updated with the latest Win 7 patches and Windows anti-virus. My netbook is totally zorched. I can't even restore from the restore partition, and it has no CD-Rom and no rescue disks even if it had a CD-ROM. I am very very upset right now.

I won't be back to AK until this is resolved. I now have to send a netbook back to Amazon and hope they'll send me a new one. Very angry.

Yeah.... it's a nasty virus, and Windows security doesn't block it. Before you send that computer back, try this, it worked for me.

Download ComboFix from this site (you might have to do it from another computer):

http://www.bleepingcomputer.com/download/anti-virus/combofix

Rename the downloaded executable to a different name (like abcd.exe).

Run the executable and let it work. If a rootkit was installed, it will let you know and reboot the system while cleaning up. One it completes (takes awhile), use Windows System Restore to restore to a previous date, it should work again.
 
Someone posted this, which I think belongs here:
http://www.audiokarma.org/forums/showthread.php?t=413756

You're right that I missed this thread, I'm the OP and am copying the text from that post here:

The last few days I have been getting the occasional malware alert. the offending website is ireaud.com. I have a .BMP file of the screen capture available for the IT gang if it will help. It's too big to just attach though.
 
Firefox for windows. On my iPod now. Tried anti rootkit and restore, failed. I'm an IT guy, but I hate freaking windows. Needed it for wt3 and iTunes. I'm do angry, my new netbook is a gd brick now.
 
Yeah.... it's a nasty virus, and Windows security doesn't block it. Before you send that computer back, try this, it worked for me.

Download ComboFix from this site (you might have to do it from another computer):

http://www.bleepingcomputer.com/download/anti-virus/combofix

Rename the downloaded executable to a different name (like abcd.exe).

Run the executable and let it work. If a rootkit was installed, it will let you know and reboot the system while cleaning up. One it completes (takes awhile), use Windows System Restore to restore to a previous date, it should work again.

Already done, nope.
 
It's those bleeping ads! Everyone needs to block them or AK needs to do away with them. Honestly I have no idea what AK makes but it has surely cost a lot of members here money and time are they worth it?
 
As far as we can tell, it's not the ads. This issue is affecting far more web sites than just AK. Guys, I need to stress as strongly as I can that we are very, very concerned about this, and we're doing everything we can to address it. The problem is that, although it's a horribly painful mess for those who've been hit by the malware, it's affecting such a small number of folks compared to the number that are logged in on any given day that it's really, really hard to come up with a common factor.

One of the more intriguing clues is that, as far as I've been able to tell, there have been zero hits to members running Chrome or to members running the most current version of FF. If anybody running Chrome or FF 9.0.1 has been infected, speak up.

Bill, every new pc came with the standard load signed off on when the final design was done. It's unlikely it has the latest version of FF.
 
Bill, every new pc came with the standard load signed off on when the final design was done. It's unlikely it has the latest version of FF.

My netbrick did not come with FF installed. I installed it from the FF website on Dec 25. So whatever version that was.
 
FYI, the netbrick was a Toshiba, with Win 7 Starter, patched as of this morning with all MS updates recommended and security patches. FF installed fresh as of Dec 25 so whatever version that was. Microsoft Security Essentials updated as of Dec 27. I was on AK and it suddenly popped up that rediculous fake virus waring "Security 2012" which is designed to look authentic. Of course I did not click on the buttons or download anything, but it was too late; by the time I saw the popup, my HD was wrecked. I could not run MS Security Essentials; it was knocked out. Could not run any app at all. Shutdown; it refused to shut down. Had to turn if off manually. Turned back on, went through MS startup repair facility; failed. Went another computer, found several websites with anti-rootkit boot files and put them on USB. Boooted up and searched; no virus found. Rebooted laptop; total brick. I have no back up disks, the network didn't come with any and it has no disk drives. SO I'm screwed.
 
FYI, the netbrick was a Toshiba, with Win 7 Starter, patched as of this morning with all MS updates recommended and security patches. FF installed fresh as of Dec 25 so whatever version that was. Microsoft Security Essentials updated as of Dec 27. I was on AK and it suddenly popped up that rediculous fake virus waring "Security 2012" which is designed to look authentic. Of course I did not click on the buttons or download anything, but it was too late; by the time I saw the popup, my HD was wrecked. I could not run MS Security Essentials; it was knocked out. Could not run any app at all. Shutdown; it refused to shut down. Had to turn if off manually. Turned back on, went through MS startup repair facility; failed. Went another computer, found several websites with anti-rootkit boot files and put them on USB. Boooted up and searched; no virus found. Rebooted laptop; total brick. I have no back up disks, the network didn't come with any and it has no disk drives. SO I'm screwed.

Total brick? Or does it boot and you just can't run .exe files?
 
Thankfully at home, AVG has been blocking it and removing the files well.

Just something I've noticed at home.... I leave my laptop setting with only AK open on it. It can sit there for a half hour without me touching it, then suddenly AVG will pop open stopping things from loading.

That really makes me think it's an ad, since that's the only thing on the AK pages that would be reloading or refreshing.
 
Back
Top Bottom