Virus attack after log in

[JRSBat]

After logging on, I have been getting pop-up notices from Norton 360 that it just blocked something. So far so good - nothing has gotten past Norton. I also have Ad-Aware (free version) running. I do not know if it has blocked anything.

Of course, as soon as I post this my entire system will crash...

 

[drknstrmyknight]

Turn off pop-ups in your web browser.

As this site gets more popular you will see the hackers go after this site. *Advertisement - not by the owners or mods of this site - just a member* That is why any donations to AK are welcome and needed to keep things up to date and running smoothly.

Indeed, if third party ads weren't needed for revenue, there would be little risk. As far as targeting AK, these ads are distributed to everyone serviced by Google. You no safer anywhere else. These ads have been a problem for Google for years (http://www.slideshare.net/Zash/google-analysis-of-fake-antivirus-distribution). Periodically, the malware writers find a way to circumvent the safeguards and for a short time the number of ads that get through will increase until controls are designed.

Many of these programs are installed by the users themselves responding to a popup that looks like a genuine message about a virus detection. Familiarize yourself with your anti-virus software. If you get a popup that you're suspicious of, either end the browser session through the task manager or shut down and restart.

 

[jntit]

It's true something is going on, I get warnings. Last night my computer shut down, even got a warning from firefox, that AK was a dangerous site It's going to take a while to get this fixed. John

 

[Hajidub]

After the cleanup, my WIN XP machine can't recognize wireless networks anymore, no reception at all. We've tried various troubleshooting to no avail. If anyone might be able to help troubleshoot, please shoot me a PM so we don't clutter up this thread.

Was the last step in the malware chain of events prior to reformatting! Expect a possible Windows activation window.

 

[jaymanaa]

http://www.infosecurity-magazine.co...holeexploit-kit-and-java-exploits-is-growing/

Here is the problem....

Hmm, I don't have Java, maybe that's a good thing.

 

[petehall347]

please consider swapping to another o/s if you are getting so many problems ..i did just that a few years ago ..i know some folk don't like change but it can be a change for the better ..i have been running ubuntu for a couple or 3 years now without a hitch .its free and easy to use . mac is another way to go and also a friendly community but you have to pay same as windows . i don't want to come across as preaching . but only as to help .

 

[24HACKER]

I have been having issues also - computer is running slow - I will have to paste my warnings.

 

[spartanmanor]

I do believe Java is the route.

 

[spartanmanor]

Ok I added NoScript to block those Darn Java enriched adds.

Here is a video on Cnet about it: http://www.youtube.com/watch?v=GzBqnLgOzwM

 

[parman]

Got attacked the last 2 days both were from attacking computer 178.18.243.189,80
yesterday it was called peteic.com and today it was called Remnas.com
Norton called both of them Malicious Toolkit Website 9
It doesn't happen anyother time I'm on the web. Thank God for Norton

 

[spartanmanor]

Yeah, I got attacked several times....no more will I allow the scripts from this site. I was up to date on everything before they got my computer. I am sure it is not coming directly from AK but I do log into this site many and I mean many times a day and those pesky adds are what did it.

 

[bob06]

I was getting hit at first login for a week. The past three days nothing. Maybe I'm cured.:scratch2:

 

[ossodiseppia]

I was getting hit at first login for a week. The past three days nothing. Maybe I'm cured.:scratch2:

I've been hit twice in the last week. Can't the site that is doing that be blocked?

 

[spartanmanor]

I've been hit twice in the last week. Can't the site that is doing that be blocked?

I think it is a random thing based on where you have visited and what ads are served up from those tracking cookies.

 

[toxcrusadr]

One would think this would be a problem for Google or whoever is buying the ad space. I suppose it is uncommon enough that they can afford not to worry about it, but if enough websites stopped selling ads because the ads are polluting their customers' computers, it would start to become a problem, wouldn't it? I mean someone has to be responsible.

 

[similost]

I just got a block stopping cross-site scripting when going into a thread to read it...

bummin....

and now it just happened three more times.. .first time ever and on this site today..

 

[similost]

and now it's happening with anything I click...

 

[spartanmanor]

and now it's happening with anything I click...

Welcome to the club. Disable Java for safe viewing on AK.

 

[bobbyonions]

I'm running xp sp3 current updates with ms security essentials and malwarebytes. Latest java updates.
Things were acting a little weird a couple weeks ago.

Now malwarebytes displays a message down in the taskbar periodically that says access has been blocked by potentially malicious site and gives an ip address. I've looked up a few of the addresses and most are from china.

Nothing else abnormal for me so I think malwarebytes is effectively blocking anything.

edit: the alerts now seem to have no correlation to when I'm on AK.

 

[spartanmanor]

I'm running xp sp3 current updates with ms security essentials and malwarebytes. Latest java updates.
Things were acting a little weird a couple weeks ago.

Now malwarebytes displays a message down in the taskbar periodically that says access has been blocked by potentially malicious site and gives an ip address. I've looked up a few of the addresses and most are from china.

Nothing else abnormal for me so I think malwarebytes is effectively blocking anything.

this is why I am blocking all Java scripts from this site.