Virus attack after log in

[Stephen J]

I had the same infection and had to reformat my hard drive and reinstall all my software.

:yes:......:thumbsdn:...........:thumbsdn:.........:thumbsdn:.........

Folks, if you get this, try the bleepingcomputer fix FIRST before any homebrew remedies. It's very easy and may save you LOTS of time and headache.

You will be out nothing except maybe another 5-10 minutes before you know if it's going to work or not. This is nothing if the other option is reloading your whole system from scratch.

Thanks for the advice.I hope I won't need it.

Haven't seen it on any of mine running firefox so far.

Barney

I'm running fire fox as well.When this first started happening a few weeks ago it wasn't affecting me.Must be persistent it eventually got in a f'ed up my computer.

 

[jimfet]

Ok. It got me twice. Yesterday and the day before. Each time it hit me I was was looking at naked foto's on AK.

The first one was of the Santana woofer, that needed reconing and the second, I was looking at a set of Acoustat speakers some one just got.

Each time, when I click off of the pics, AK shut down and the Virus started running. Each time I went straight to safe mode and removed them.

 

[bob06]

It has happened to me three mornings in a row when I first log on to AK. Then it doesn't happen again all day. Every time it's something different trying to get in. But only first thing in the morning. Is that something common. Is that when you guys are noticen it to. Or is it just first time loging in no matter what time it is.:scratch2:

 

[Stephen J]

This is no f'in good folks...can't hang with this BS............

 

[petehall347]

This is no f'in good folks...can't hang with this BS............

what you saying ? you have no probs or big probs ..? i have zero probs ,,,i don't mind helping out for free though .. damn computers they said it would make life easier ..who are they ?

 

[Lwrs10]

being super careful on AK until it gets sorted...

 

[sKiZo]

Regular runs with MalwareBytes AntiMalware is a good thing. I run and keep Norton AV updated regularly also. I had a rootkit a bit back that NAV found, but couldn't fix by itself - I ended up having to get a Kaspernov kit to do the job. Short story, no such thing as the "perfect" utility.

May seem counter-intuitive but ... turn off AUTOMATIC UPDATES on WindoHs machines. Some of the more invasive crap floating around today disguises itself as an OS update and will install itself as such. Turning automatic updates off prevents this. You do have to remember to check in with Microsoft regularly to stay current. With XP, the safest way for that is to open Explorer, click Help, Help and Support Center, then when that opens, Pick A Task and Windows Update. Safest way to know you're not being spoofed.

 

[kerrytat2]

Guys, if you're running windows. Before coming on here, go to Microsoft's website and download Microsoft Security Essentials. Update it, perform a scan, and download the latest version of browser. I've come on AK with multiple computers which have newest browsers and Microsoft Security Essentials and have yet to be attacked. I don't run any other virus software than that. It covers malware, spyware, virus', and keeps your computer updated.

This the way I roll and have been lucky so far,I am tracking this thread because it is dumb luck on my part that I have not been hit.Google Chrome and MSE is all for now,but am keeping in mind all this other advice.Kerry

 

[whoaru99]

May seem counter-intuitive but ... turn off AUTOMATIC UPDATES on WindoHs machines. Some of the more invasive crap floating around today disguises itself as an OS update and will install itself as such. Turning automatic updates off prevents this. You do have to remember to check in with Microsoft regularly to stay current. With XP, the safest way for that is to open Explorer, click Help, Help and Support Center, then when that opens, Pick A Task and Windows Update. Safest way to know you're not being spoofed.

I think leaving automatic updates "ON" is the best approach for most people because of the bolded sentence. Manually checking for updates every day usually isn't at the forefront of everyone's daily activity. Is there some risk? Maybe. However, I think over all far less risk with automatic updates enabled than not.

 

[Hajidub]

This post is not an attack towards any of the site admins. I usually hear about these posts and think, their machines must be infected already. 4 days ago (took me that long to get back up!!!) AK was my first site of the day. I had just read the xp antispyware 2012 thread that was recently locked. I posted to another thread and immediately caught something off the site. I never get virus', I keep my machine extremely clean and locked tight. Immediately after I posted to the thread, my Avast caught the Win32;Alureon [rtk], which btw originated in Moldovia (see 63PontiacGP's earlier post in this thread!!!). It's been 4 days of HELL since! Malwarebytes, Combofix, TDSSKiller, Spydoctor, Adaware S&D...all failed to fully eradicate this nasty bug. The bug started with popups (never get), registry changes, inability to open IE, and finally failure to open .exe or restore capabilities. It morphed depending on how close or techniques to remove changed. Finally just formatted and logged back in, even better protected I hope. The rootkit infected the Master Boot record, and distributed pieces throughout the system, encrypting itself as it went. GL to all.

 

[StevenZ]

I hate to say it, but maybe AK should shut down for a couple days or however long it takes to fix this problem. This is the only way to keep this site from infecting it's users.

 

[Hajidub]

Just had another one from 178.17.163.115 Shows from Moldovia

See my post above.

 

[juniorJBL]

Because the current crop of viruses comes in through Flash videos and images, it is essential also the keep all the Adobe updates done.

It's probably most important to keep Windows and Adobe updated.

:thmbsp:

If any of you are in the IT industry and keep up with "whats happening" Adobe is a bit behind and they are the target of LOT's of attacks. It is really important to keep ALL of your software up to date not just windows.

Virus attacks come only from compromised software (in general) so having your software up to date is not the responsibility of AK, I do know that The mods will do everything that they can to solve the problem so give it a chance.

As far as the "If you can't fix it, then I'm outa here" statements, those are just uncalled for, because you are responsible for your own computer.

Just remember " Be a better surfer and browse with caution on your mind all the time"
:thmbsp:

BTW Thanks mods for putting up with me!

 

[spartanmanor]

I did have my antivirus up to date and had caught an earlier attack and gotten rid of everything. The second attack is the one that did me in. I am now viewing AK without any external links. Of course the computer it hit was one running most of my design software. That was a joy to get going again a couple of days not to mention the cost.

 

[backinthelou]

I have gotten Win 7 Antivirus 2012 Alert TWICE from AK. I never get anything and now my laptop is F-Ed.

 

[DDDiscs]

I have to agree with you there backinthelou. I've been online since the web was just an obscure gateway through Prodigy. This is the first time my computer has been infected by a virus.

 

[treserious]

I have gotten Win 7 Antivirus 2012 Alert TWICE from AK. I never get anything and now my laptop is F-Ed.

This is a common infection, 100% of the time caused by nefarious scripting in an ad banner, otherwise known as "a drive by infection".

best bet is a combination of Malware bytes, manual cleanup in safe mode, and, if in your case it applies, a regfix to get your programs behaving normally.

the best way to protect against these drive by installations is to run adblock extensions in your browser, unfortunately, this site being a non profit, is maintained partially by ads.

The best protection is a vigilant web-it group who does heavy vetting of all ads, and the best thing would be to disallow any animated (flash) and scripted ads, period. single picture, with embedded link.

simple is best.

 

[qpagoda]

Off topic, but... I had a cousin (now deceased) who lived most of her life in Washington.

I've been here less than 6 years so probably didn't know her, but probably know people who did. Small community. Everybody knows everybody else's business.

 

[Hajidub]

I have gotten Win 7 Antivirus 2012 Alert TWICE from AK. I never get anything and now my laptop is F-Ed.

Part of the rootkit I caught was xp antispyware 2012.

 

[RobRoy]

no reports here but i don't run any antivirus programs

Coincidentally, your post matches your avatar.