Virus attack after log in
- Thread starter JCAUPS1
- Start date
ossodiseppia
Well-Known Member
petehall347
the brandy coffee man
this is whois info ..http://whois.domaintools.com/178.17.163.115
if you google search the ip it comes up with info on a trojan
if you google search the ip it comes up with info on a trojan
bobbyonions
AK Member
My antivirus put a trojan in quarantine a couple days ago, likely from here. Why quarantine instead of delete? Should I delete it?
whoaru99
Epic Member
A number of us have acknowledged we're not blaming AK and don't believe it's AK, per se. However, that doesn't imply such things should go unreported or unchecked, IMHO.
Personally, I'd recommend doing what I'm now doing. Running a virtual machine. Everything is free and install/setup is pretty much painless...just like installing other programs. I have the one I'm using and a copy of it for backup. If I would somehow get infected I'd just delete the infected VM and rename the clean one. Two minutes and back in business.
Personally, I'd recommend doing what I'm now doing. Running a virtual machine. Everything is free and install/setup is pretty much painless...just like installing other programs. I have the one I'm using and a copy of it for backup. If I would somehow get infected I'd just delete the infected VM and rename the clean one. Two minutes and back in business.
Last edited:
winters860
Super Member
Ditto. I went through this yesterday morning. I blamed it on my surfing for... uh... other sites.
happened again to me too now, same virus as last week AND another one. AK I love ya, but if this happens one more time I have to go.
StevenZ
Texas or nothin'
Guys, if you're running windows. Before coming on here, go to Microsoft's website and download Microsoft Security Essentials. Update it, perform a scan, and download the latest version of browser. I've come on AK with multiple computers which have newest browsers and Microsoft Security Essentials and have yet to be attacked. I don't run any other virus software than that. It covers malware, spyware, virus', and keeps your computer updated.
js1138
Super Member
I think you guys should reconsider what browser your are using, what AV software you are running, what version, and whether you keep Windows up-to-date.
I browse frequently using Chrome and FireFox, using Security Essentials, and I have not received so much as a warning. I do not have scripts or popups disabled.
I think it would benefit everyone if thos having the problem would post their configuration.
Windows version, whether all updates are done, virus scanner brand and version.
I browse frequently using Chrome and FireFox, using Security Essentials, and I have not received so much as a warning. I do not have scripts or popups disabled.
I think it would benefit everyone if thos having the problem would post their configuration.
Windows version, whether all updates are done, virus scanner brand and version.
petehall347
the brandy coffee man
it would also help if you report back with the page you was on at the time
js1138
Super Member
Here's the best way to recover from a bd virus infection:
1. From another computer, download the Kaspersky recovery program and build a bootable CD. All this is free. Once you have the CD built, you can copy it and keep it for future use. It boots before Windows, so the virus can't disable it. It updated itself after loading, so you don't have to worry about having the latest version.
2. Run the Kaspersky recovery. If it's a really bad virus, Windows may be damaged.
3. If Windows is damaged, You may have to reinstall, or do a repair/reinstall. You don't have to reformat, and you don't lose your documents.
4. At this point it would be nice if you did a System State Backup prior to the problem. For those of you who don't yet have a problem, this would be a nice time to do a System State backup. This is equivalent to System Restore, except that viruses can't disable it. All the registry entries and program files are bundled into a nice, compact backup file. You can do a clean Windows install, restore the System State,and be back in business.
5. An occasional boot disk image backup is also nice. Even nicer if you combine this with more frequent System State backups.
Acronis backup has a free version that you can use if you have a WD or Seagate USB drive for doing your backups. You get the free version from the WD or Seagate site. Seagate calls it MaxBlast.
I've restored at least a dozen drives from images made with this program. It works well because it's intended use is to move your system from an old drive to a new, larger drive. It has to work well.
whoaru99
Epic Member
Can't say if it's the same thing, but if it seems so did you use the bleepingcomputer fix?
That bleepingcomputer process worked for me with no loss of data, no restoring Windows nor programs, etc. Took about 5 minutes to read the article and download the utilities and run them, then whatever time it takes for Malwarebytes to scan your computer and remove the dead stuff. Key is though, you must run the utilities first, before Malwarebytes, to kill the malware processes so they don't morph and prevent Malwarebytes from deleting them.
Last edited:
spartanmanor
Lunatic Member
I had the same infection and had to reformat my hard drive and reinstall all my software.
whoaru99
Epic Member
Folks, if you get this, try the bleepingcomputer fix FIRST before any homebrew remedies. It's very easy and may save you LOTS of time and headache.
You will be out nothing except maybe another 5-10 minutes before you know if it's going to work or not. This is nothing if the other option is reloading your whole system from scratch.
You will be out nothing except maybe another 5-10 minutes before you know if it's going to work or not. This is nothing if the other option is reloading your whole system from scratch.
wajobu
Boing Boom Tschak
Literally, it may not be an AK issue, but the fact that it's coming from adverts through the AK portal, in my opinion, makes it an AK issue. Something needs to be done with these third party ads...if it means increasing a subscription rate to get rid of these ads, then so be it.
js1138
Super Member
You can't control what comes in as ads, because any system can be subverted. Perhaps the only safe ads are text ads.
I went back over all the posts in this thread looking for the key information: What brand and version of antivirus was bypassed, and was Windows fully updated? I didn't find any such information.
The simple fact is that browsing is not safe, and the only way to maximize safety is to keep Windows updated and keep a good AV program updated.
Because the current crop of viruses comes in through Flash videos and images, it is essential also the keep all the Adobe updates done.
It's probably most important to keep Windows and Adobe updated.
drknstrmyknight
Addicted Member
Where I work we have resorted to running our own ad server and inspecting every ad that we run as well as not allowing ads with encrypted scripting. This has cost us time and money and reduced our revenue and increased our costs. but the brokers we were using simply did not sanitize their content enough. AK's between a rock and a hard place here with revenue and demand. If enough folks subscribed perhaps additional controls could be put into place or 3rd party ads eliminated, so if you're NOT a subscriber remember that you consume resources that must be paid for.
Many of the safety tips above are valid for any surfing you do and having your system up to date, locked down and backed up is your responsibility as much as it is the website operators to use best practices. It's a collaborative effort, so let's all do our part.
Many of the safety tips above are valid for any surfing you do and having your system up to date, locked down and backed up is your responsibility as much as it is the website operators to use best practices. It's a collaborative effort, so let's all do our part.
Similar threads
