AwayGoalsRule Football Forum

The Internet's Finest Football Forum

Get moneyback specials on your football betting at PaddyPower


It is currently Mon Nov 20, 2017 2:37 pm

All times are UTC [ DST ]




Post new topic Reply to topic  [ 21 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: Is this a virus?
PostPosted: Wed Nov 23, 2011 1:42 pm 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Mon Sep 15, 2008 11:56 am
Posts: 7998
Location: 52 Festive Road
Highscores: 6
DON'T CLICK THE LINK

http://bgfashions.com/components/com_ag ... hp?html128

I got sent this link and pressed it (doh!) anyway it opened a blank page (maybe because I run no script) I have since found out that the person the email came from didn't send it.

Does this mean I now have a virus?


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Wed Nov 23, 2011 1:45 pm 
Offline
General of the Army
General of the Army
User avatar

Joined: Mon Sep 15, 2008 2:12 am
Posts: 19588
Highscores: 1
How tempting is it to click that link :lol:

_________________
Because I'm young enough to be all pi**ed off
But I'm old enough to be jaded
I'm at the age where I want things to change
But with age my hopes have faded


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Wed Nov 23, 2011 1:50 pm 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Mon Sep 15, 2008 11:56 am
Posts: 7998
Location: 52 Festive Road
Highscores: 6
idontfeardeath wrote:
How tempting is it to click that link :lol:


:lol:

It's just a blank page when I did it, but that might be just because of my no script thing.

Searching on google it looks like they sell perfume?

I'm running my Security Essentials scan just in case.


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Thu Nov 24, 2011 5:02 am 
Offline
General
General
User avatar

Joined: Sun Sep 07, 2008 8:27 pm
Posts: 17205
Location: Over there.
Highscores: 2
I clicked it but Firefox intercepted the dodgy page and blocked it.

Quote:
Reported Attack Page!


This web page at 62.122.74.107 has been reported as an attack page and has been blocked based on your security preferences.


Attack pages try to install programs that steal private information, use your computer to attack others, or damage your system.Some attack pages intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners


So it does look like the site is infected, but Firefox keeps you safe. Unless you use IE?

http://go.eset.com/us/online-scanner

_________________
A conclusion is the place where you got tired of thinking.

Image
Image


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Thu Nov 24, 2011 5:51 am 
Offline
General
General
User avatar

Joined: Sun Sep 07, 2008 8:27 pm
Posts: 17205
Location: Over there.
Highscores: 2
Mr Carrot wrote:
idontfeardeath wrote:
How tempting is it to click that link :lol:


:lol:

It's just a blank page when I did it, but that might be just because of my no script thing.

Searching on google it looks like they sell perfume?

I'm running my Security Essentials scan just in case.


That NoScript extension is great and will save you many a disaster! And I know it alone is keeping many users with FF rather than defecting to Opera... including me.

I did go to the page, had to have a look :geek: and it's nearly blank with scripts blocked, a bare minimum of content (about 30 words and a tiny image - nothing like a sales site) and many scripts contained in the page code that could do pretty much anything just like dodgy sites would, plus I couldn't help noticing the 'looks safe' fake ending to the link you posted...

'/com_ag_google_analytics2/mysite.php?html128'

No reputable company/webmaster is going to put their stuff in a directory called 'com_ag_google_analytics2' - but it would look kinda legit to a newbie... 'com' sounds expected, as does 'google' and if they ask a techie friend about 'google analytics' they'll be told it's everywhere on lots of sites and it's safe to allow... but it's not Google Analytics at all. More like the URL has been doctored to get a set length and leave something familiar-ish on the bit of the URL displayed in the browser address bar for the purpose of reassuring the user imo.

A site best avoided if you don't want an infected PC. Or worse if you give them your bank details! There's plenty of places to get stuff that you've heard of, or that don't look so obviously dodgy.

_________________
A conclusion is the place where you got tired of thinking.

Image
Image


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Thu Nov 24, 2011 8:26 am 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Mon Sep 15, 2008 11:56 am
Posts: 7998
Location: 52 Festive Road
Highscores: 6
Thanks Con

so how do I know if I'm ok.

I ran a security essentials check and it came back ok.


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Thu Nov 24, 2011 11:45 am 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Mon Sep 15, 2008 11:56 am
Posts: 7998
Location: 52 Festive Road
Highscores: 6
I ran the scanner you linked, it found 1 threat... from that sopcast download you sent me :lol:

Don't think it was anything major. Hopefully I'm in the clear.


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Thu Nov 24, 2011 6:35 pm 
Offline
General
General
User avatar

Joined: Sun Sep 07, 2008 8:27 pm
Posts: 17205
Location: Over there.
Highscores: 2
Mr Carrot wrote:
I ran the scanner you linked, it found 1 threat... from that sopcast download you sent me :lol:

Don't think it was anything major. Hopefully I'm in the clear.


Oh? What was the infection? I don't think that was your problem, if you even had one? I got nothing bad from the webpage and neither should you with NoScript blocking things. Also, some things get detected when they are really OK... my copy of Sopcast is fine and from the same place. Sometimes stuff is flagged because it can be misused, etc.

Your best bet is running and rerunning the scanner until nothing is found, edit settings to scan inside archives/deep scan and once it's clear, a second opinion would be a good idea and again scan until it shows nothing there. There's links to other online scanners in the Oops I have a virus thread.

_________________
A conclusion is the place where you got tired of thinking.

Image
Image


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Thu Nov 24, 2011 7:42 pm 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Mon Sep 15, 2008 11:56 am
Posts: 7998
Location: 52 Festive Road
Highscores: 6
I can't remember what it was, it was nothing though I think.

I'll run it on my laptop too, now and see what happens


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Fri Nov 25, 2011 9:30 am 
Offline
Major General
Major General

Joined: Wed Oct 01, 2008 2:55 pm
Posts: 11695
Highscores: 1
Mr Carrot wrote:
I ran the scanner you linked, it found 1 threat... from that sopcast download you sent me :lol:


:nono: naughty Con... stop sending Mr C infected links!!

:coffee:

_________________
idontfeardeath wrote:
Spawny wrote:
But James and Pak both said they were voting JSP


:doh:

You know what Paks like. He's probably voted JSP for woman of the year or something.


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Fri Nov 25, 2011 10:28 am 
Offline
General
General
User avatar

Joined: Sun Sep 07, 2008 8:27 pm
Posts: 17205
Location: Over there.
Highscores: 2
Wasn't from me. I downloaded it myself at the time, scanned it and ran it and found it to be safe using Nod. :geek: :nur:

A lot of the ads on there will take you to bad places, though half the time if something gets flagged up it's just the sopadver.exe part getting falsely flagged as a problem because Sopcast is advertisement supported and often advert stuff is considered malware whether it is or not. And it's not in this case. Also sometimes Sopcast is flagged as a "potentially dangerous/unwanted application" simply because it's P2P technology that *could* be legally misused. But of course we know this, that's why we've got it installed to watch the footy. :wink:

_________________
A conclusion is the place where you got tired of thinking.

Image
Image


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Fri Nov 25, 2011 10:42 am 
Offline
Major General
Major General

Joined: Wed Oct 01, 2008 2:55 pm
Posts: 11695
Highscores: 1
So you're not just trying to get Carrot's PC knackered so he can't get on AGR anymore?

_________________
idontfeardeath wrote:
Spawny wrote:
But James and Pak both said they were voting JSP


:doh:

You know what Paks like. He's probably voted JSP for woman of the year or something.


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Fri Nov 25, 2011 11:01 am 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Mon Sep 15, 2008 11:56 am
Posts: 7998
Location: 52 Festive Road
Highscores: 6
I looked up the problem file on tinternet and the main course of action seemed to be delete if you want to, didn't really matter.


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Fri Nov 25, 2011 11:35 am 
Offline
General
General
User avatar

Joined: Sun Sep 07, 2008 8:27 pm
Posts: 17205
Location: Over there.
Highscores: 2
Glad it's sorted. Always better to be safe than sorry though.

And for anyone who doesn't know, running with NoScript added to FireFox will save you loads of potential drive-by website infections, highly recommended for anyone that hasn't got it installed.

_________________
A conclusion is the place where you got tired of thinking.

Image
Image


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Fri Nov 25, 2011 11:43 am 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Mon Sep 15, 2008 11:56 am
Posts: 7998
Location: 52 Festive Road
Highscores: 6
conscience wrote:
Glad it's sorted. Always better to be safe than sorry though.

And for anyone who doesn't know, running with NoScript added to FireFox will save you loads of potential drive-by website infections, highly recommended for anyone that hasn't got it installed.


That has been an excellant addition since you mentioned it last :thumbup:


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Tue Mar 20, 2012 6:04 pm 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Mon Sep 15, 2008 11:56 am
Posts: 7998
Location: 52 Festive Road
Highscores: 6
My C Cleaner keeps hanging on Internet Explorer, but I never use this. It just cleared 84 files from there for some reason.

I'll run that online scanner Cons added to here a while ago.


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Tue Mar 20, 2012 11:49 pm 
Offline
General
General
User avatar

Joined: Sun Sep 07, 2008 8:27 pm
Posts: 17205
Location: Over there.
Highscores: 2
Mr Carrot wrote:
My C Cleaner keeps hanging on Internet Explorer, but I never use this. It just cleared 84 files from there for some reason.

I'll run that online scanner Cons added to here a while ago.


Good plan with the online scanner if you're not sure. :thumbup:

CCleaner finds a lot of ad stuff and cookies that are more of an annoyance than a genuine threat, admittedly they can be a privacy threat, but the eset nod scanner should soon put things right.

_________________
A conclusion is the place where you got tired of thinking.

Image
Image


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Wed Mar 21, 2012 8:36 am 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Mon Sep 15, 2008 11:56 am
Posts: 7998
Location: 52 Festive Road
Highscores: 6
Thanks Con, came up a blank. Can't believe I have a virus as I am very careful. Weird hoe the IE keeps racking up temp files though. Unless it's something to do with my VPN to the office.


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Wed Mar 21, 2012 12:33 pm 
Offline
General
General
User avatar

Joined: Sun Sep 07, 2008 8:27 pm
Posts: 17205
Location: Over there.
Highscores: 2
Mr Carrot wrote:
Thanks Con, came up a blank. Can't believe I have a virus as I am very careful. Weird hoe the IE keeps racking up temp files though. Unless it's something to do with my VPN to the office.


Do you actually have a virus or just some cookies etc. listed by CCleaner? If the eset NOD scan is showing clear the chances are you aren't infected, though you could double check with a second scan and/or second scanner... there's links here.

These days they can be hidden in websites advertisement images or just about anywhere else, even on famous large sites eg it's happened to Google Ads before with rogue advertisers, which is why having a virus scanner is so important to stem the tide. It's easy done if you happen to click the wrong link, you no longer have to visit some dodgy, dark corner of the interwebs to find a virus.

According to a Corday, a Team Manager for Microsoft Support (although from 2008 it's regarding the same phenomenon), "the only reason for apparent 'extras' on a closed IE is the ability to go back to a crashed session. If you don't want this feature:

Tools>Internet Options>Advanced In Browsing Uncheck Enable Automatic Crash Recovery".

I'm not sure this is applicable to you, but if you don't really use IE then it won't hurt to follow the advice.

Of course this may not stop IE collecting temp files, as Windows Update and potentially other applications too could be using it to phone home and do their thing. Services such as Outlook or Windows Live Mail, etc. will also use Internet Explorer's temporary internet files and cookies etc. so I don't think it's anything to be too concerned about, and CCleaner will take take of the crap cleaning just fine.

I dunno how your VPN would affect it tbh, though it's possible that it also uses some of these temporary files and/or even stores it's files from the current session on your hard disk somewhere as 'virtual storage', but these are often cleared when you disconnect for security reasons so I wouldn't worry about those either.

EDIT: If any of the scanners find anything nasty, take note of the exact name of the infection and post it here, it often helps to find specific removal instructions.

_________________
A conclusion is the place where you got tired of thinking.

Image
Image


Top
 Profile Send private message  
 
 Post subject: Re: Is this a virus?
PostPosted: Wed Mar 21, 2012 1:21 pm 
Offline
Brigadier General
Brigadier General
User avatar

Joined: Mon Sep 15, 2008 11:56 am
Posts: 7998
Location: 52 Festive Road
Highscores: 6
All the scanners come up blank.

Now you mention it, it is since the last windows update it's been hanging on the IE part of the cleaning.

Thanks


Top
 Profile Send private message  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 21 posts ]  Go to page 1, 2  Next

All times are UTC [ DST ]


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
cron