Kami
Forum Cat
Posts: 40,064
Mini-Profile Theme: Kami's Mini-Profile
#f35f71
156500
0
Offline
Jul 24, 2021 11:48:29 GMT -8
Kami
40,064
July 2010
kamiyakaoru
Kami's Mini-Profile
|
Post by Kami on Dec 6, 2009 15:55:00 GMT -8
all right, thanks. =] a minute after posting that i got another and sent another report, so hopefully that helps.
|
|
inherit
129272
0
Jan 15, 2011 14:36:42 GMT -8
Houston
22
August 2008
watchtalkworld
|
Post by Houston on Dec 6, 2009 16:12:27 GMT -8
I have been dealing with quite a few computers with that problem. Not sure if it is an ad or particular site causing the issues as most of my clients do not surf "questionable" sites as children have access to their computers. Here is what I have had to do to get rid of the issues: Download Malwarebytes, Spybot, and Ccleaner. They are all free and will remove it all. The "shield" and what seems like an antivirus warning is real as it has downloaded itself on to your computer, obviously without your permission (make sure to check your browser settings for privacy and security). The three programs I recommended have done the trick in cleaning the computer as not one single program I have found will clean out everything. Please note, you will want to download those programs on a different computer and burn them to CD. The reason being is the "shield" program will not always allow them to fully download. There are many articles and websites that state McAfee and Norton will let them slip by. Which all the computers I have seen these issues on have either McAfee or Norton. Thanks Blackicekitten9 I'm passing this over to the guys on my site who have experienced the problem and also report what Patrick has done. Thanks for this as well Patrick. Cheers Everyone Weenson
|
|
marcum318d
Junior Member
back in business again? lol
Posts: 245
inherit
109271
0
Jul 27, 2020 16:04:20 GMT -8
marcum318d
back in business again? lol
245
August 2007
marcum318d
|
Post by marcum318d on Dec 6, 2009 17:24:18 GMT -8
hmfic318d.proboards.comthis is what one of my members just sent me...what do I do? this his message to me..... Dave, Hate to burst your bubble, but, someone or something is using your site to steal data from others...or, plant tracking cookies, implant virus's......... IT HAPPEN'S ON YOUR SITE!! No other site gives me this issue, so the solution for me is to not use it again......... I'm finished with this....... I am not going to bring it up again.... Attached is the latest attempt.... Before that, it was a massive data extraction attempt, I shut the machine down... Before that, a virus implant attempt..... I have 3 computers in the house, a laptop I travel with, one the family uses and one I use for back-up. All have had attempts for the above.... My machines are not infected... I run good stuff and have active alerts when an attempt to implant, extract or plant is in progress......... Best of luck....... Bud
|
|
blackicekitten9
Junior Member
No cat anywhere ever gave anyone a straight answer.
Posts: 254
inherit
90171
0
Dec 29, 2010 18:39:14 GMT -8
blackicekitten9
No cat anywhere ever gave anyone a straight answer.
254
October 2006
blackicekitten9
|
Post by blackicekitten9 on Dec 6, 2009 18:36:37 GMT -8
Thanks Blackicekitten9 I'm passing this over to the guys on my site who have experienced the problem and also report what Patrick has done. Thanks for this as well Patrick. Cheers Everyone WeensonYou are welcome. It's amazing what our normal antivirus programs allow through without our knowledge. One of the computers I fixed belong to my boss. His computer is used by everyone (including kids)... McAfee allowed infections such as Vundo, Antispyware 2010, Antivirus System Pro, and Virut.. and a lot more.. as I found over 190 infections, viruses, trojans.. took over 16 hours of scanning between the three programs and many reboots to get rid of it all. I used to use Norton (the one that had all the tools) and my computer still got infected. So I do not trust either of those. More info on some of these: Vundo, or the Vundo Trojan (also known as Virtumonde or Virtumondo and sometimes referred to as MS Juan) is a Trojan horse that is known to cause popups and advertising for rogue antispyware programs, and sporadically other misbehavior including performance degradation and denial of service with some websites including Google and Facebook. PC Antispyware 2010 is another rogue security program from the same family as WinReanimator, PC Security 2009 and Home Antivirus 2010. The bogus application is promoted through the use of Trojan Braviax. This Trojan virus displays fake security alerts about possible or supposedly existing malware infections. The main goal of PCAntispyware 2010 is to coerce you into purchasing the program. You should uninstall PC Antispyware 2010 from your PC if it is already infected. Antispyware 2010 will block antivirus programs to protect itself from being detected and removed. ......it still has a way of running even after you kill the processes. Antivirus System Pro is a rogue anti-spyware that uses false scan results, fake security alerts, and Internet Explorer hijacking in order to have you purchase this program. It is because of these actions that we classify Antivirus System Pro as a rogue anti-spyware program. When installed, Antivirus System pro will be configured to start automatically when you log into Windows. Once running it will scan your computer and display numerous infections that do not actually exist. Furthermore, it will state it will not remove these infections unless you first purchase the program. This method of stating there are infections, but not removing it until you purchase it, is just another tactic to have you purchase the software. (this one usually pops up a warning with a shield, you can see the shield in the task bar bottom right of your monitor)....it still has a way of running even after you kill the processes. Virut is a virus that infects any executable files and screensavers that the user accesses. The parasite also opens a back door providing the attacker with unauthorized remote access to the compromised computer. The intruder can upload and run arbitrary files. There were many others that these four allow to get onto your computer... you end up with browser hijacks (redirects), internet pages not loading, popups with warnings, pages loading (with or without inappropriate content)... Not a good thing at all. Glad I could help you... and hope I helped others. I have had to learn the hard way, trial and error as to what helps keep the computer running smoothly. Added edit: [/IMG]this his message to me..... Dave, Hate to burst your bubble, but, someone or something is using your site to steal data from others...or, plant tracking cookies, implant virus's......... IT HAPPEN'S ON YOUR SITE!! No other site gives me this issue, so the solution for me is to not use it again......... I'm finished with this....... I am not going to bring it up again.... Attached is the latest attempt.... Before that, it was a massive data extraction attempt, I shut the machine down... Before that, a virus implant attempt..... I have 3 computers in the house, a laptop I travel with, one the family uses and one I use for back-up. All have had attempts for the above.... My machines are not infected... I run good stuff and have active alerts when an attempt to implant, extract or plant is in progress......... Best of luck....... Bud [/quote] I did a quick search of the site your image states.. it is a questionable site.. armyprotection80.com ... Google brings up a bunch of sites stating stay away from it... I visited your proboards in both firefox ad IE.. I did not get the unsafe warning. I would recommend your member closing the browser and reopening to go to your proboards. I am not sure how a site can be in an ad here on proboards as the armyprotection80.com has been marked bad. If your member has the same problem again, I know it is a broken record, maybe have him run one of the scans I suggested? I know the admins may have better advice.. but between dealing with computers that users use to view porn .. and clients computers that do not have porn.. I know using a different program may help and is worth a bit of a time.
|
|
inherit
125541
0
Aug 9, 2013 18:36:31 GMT -8
GoneCamping
20
June 2008
gonecamping
|
Post by GoneCamping on Dec 6, 2009 20:15:44 GMT -8
I had to deal with Braviax a while back, it was so badly embedded the only way I was able to get rid of it was to reformat... I used Pocket Killbox to get up & running while infected as that program will allow you to kill the process on the NEXT time you restart (only), then I could copy files I didn't want to loose... after a few times doing that I was able to copy over everything I wanted, then reformatted... NOTHING I tried would get rid of Braviax, which has a sister rogue called CRU629...
You would think as problematic and well known as these variants are, the REAL anti-virus companies would have done something about catching, containing & eliminating them by now...
|
|
blackicekitten9
Junior Member
No cat anywhere ever gave anyone a straight answer.
Posts: 254
inherit
90171
0
Dec 29, 2010 18:39:14 GMT -8
blackicekitten9
No cat anywhere ever gave anyone a straight answer.
254
October 2006
blackicekitten9
|
Post by blackicekitten9 on Dec 6, 2009 21:23:42 GMT -8
I had to deal with Braviax a while back, it was so badly embedded the only way I was able to get rid of it was to reformat... I used Pocket Killbox to get up & running while infected as that program will allow you to kill the process on the NEXT time you restart (only), then I could copy files I didn't want to loose... after a few times doing that I was able to copy over everything I wanted, then reformatted... NOTHING I tried would get rid of Braviax, which has a sister rogue called CRU629... You would think as problematic and well known as these variants are, the REAL anti-virus companies would have done something about catching, containing & eliminating them by now... I have to agree. I know the admins here said that our forums are now limited to strictly Google ads.. but I think Google needs to be told what is happening with the ads.... maybe some how it is getting embedded and slipping through Google's security? I have gained a lot of experience when it comes to reformatting, partitioning and all that. I have learned to periodically back up with external drives. I have a program though that will recover anything on a drive that was reformatted.
|
|
#e61919
1
0
1
Sept 28, 2023 13:31:20 GMT -8
VS Admin
20,147
January 2000
admin
|
Post by VS Admin on Dec 7, 2009 0:18:09 GMT -8
I had to deal with Braviax a while back, it was so badly embedded the only way I was able to get rid of it was to reformat... I used Pocket Killbox to get up & running while infected as that program will allow you to kill the process on the NEXT time you restart (only), then I could copy files I didn't want to loose... after a few times doing that I was able to copy over everything I wanted, then reformatted... NOTHING I tried would get rid of Braviax, which has a sister rogue called CRU629... You would think as problematic and well known as these variants are, the REAL anti-virus companies would have done something about catching, containing & eliminating them by now... I have to agree. I know the admins here said that our forums are now limited to strictly Google ads.. but I think Google needs to be told what is happening with the ads.... maybe some how it is getting embedded and slipping through Google's security? I have gained a lot of experience when it comes to reformatting, partitioning and all that. I have learned to periodically back up with external drives. I have a program though that will recover anything on a drive that was reformatted. We have been in constant contact with the company that manages our ads and they are well aware of the situation. We have been working on this for days and will continue to do so. In the mean time, only ads from Google will display instead of from other ad networks as well. Patrick
|
|
inherit
132137
0
Apr 28, 2012 8:28:31 GMT -8
wvtbred
61
October 2008
wctbred
|
Post by wvtbred on Dec 7, 2009 8:49:17 GMT -8
I have many users complaining that they had to have computers worked on to get rid of this crap. Doesn't seem to be happening anymore but a lot of harm has been done.
|
|
blackicekitten9
Junior Member
No cat anywhere ever gave anyone a straight answer.
Posts: 254
inherit
90171
0
Dec 29, 2010 18:39:14 GMT -8
blackicekitten9
No cat anywhere ever gave anyone a straight answer.
254
October 2006
blackicekitten9
|
Post by blackicekitten9 on Dec 7, 2009 9:31:32 GMT -8
We have been in constant contact with the company that manages our ads and they are well aware of the situation. We have been working on this for days and will continue to do so. In the mean time, only ads from Google will display instead of from other ad networks as well. Patrick Thank you.
|
|
inherit
149801
0
Jul 24, 2010 4:10:41 GMT -8
shewithoutaname
17
December 2009
shewithoutaname
|
Post by shewithoutaname on Dec 7, 2009 11:28:26 GMT -8
VIRUS ALERT!I submitted the form. I took a screen shot but because I hit ESC when I load a page hoping to stop the ads from coming, there's no add to show. However, it shows the anti-virus software pop-up and part of the URL that it was downloading from. (If you scroll to the bottom of the screen shot, it will show you even more of the URL. screenshot of virus detectionI'm trying to copy some of the stuff off my board and I shouldn't even be going there at all because of this. Looks like I may be leaving proboards since they won't take the ads down while they nail the problem. And I've been here 5 years in Jan. I am curious. Is Avast your normal security program? Also, i noticed three tabs open. What is the very first tab? Things do not always come from the tab that is open right in front you but can also come from other open tabs that you are not currently viewing. I am not saying that its not coming from your proboards forum... but it could be coming from other open tabs. Just a thought. I did look up the advtunix information avast stated it found.. and its not limited to proboards... many other nonproboards forums are having issues. www.google.com/search?q=advtunix&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-aI am not sure proboards can do anything about it. I still stand by the three programs I recommended to boost the antivirus you already have. Yes, it is. We also run ad-aware and spybot and I have at times run TrendMicro's Housecall. Dh has been pretty happy with what we have. He's familiar with anti-virus programs and researched when our McAfee was up. The other tab is another scrapbooking website - scrapjazz. The ads they run are for their online store at Scrapbook.com I go there all the time and there have been no problems and no one has said they've had problems. I actually posted a warning about proboards because I know members at scrapjazz also go to another proboard and one person said she had a problem at that other one.
|
|
blackicekitten9
Junior Member
No cat anywhere ever gave anyone a straight answer.
Posts: 254
inherit
90171
0
Dec 29, 2010 18:39:14 GMT -8
blackicekitten9
No cat anywhere ever gave anyone a straight answer.
254
October 2006
blackicekitten9
|
Post by blackicekitten9 on Dec 7, 2009 12:51:21 GMT -8
I am curious. Is Avast your normal security program? Also, i noticed three tabs open. What is the very first tab? Things do not always come from the tab that is open right in front you but can also come from other open tabs that you are not currently viewing. I am not saying that its not coming from your proboards forum... but it could be coming from other open tabs. Just a thought. I did look up the advtunix information avast stated it found.. and its not limited to proboards... many other nonproboards forums are having issues. www.google.com/search?q=advtunix&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-aI am not sure proboards can do anything about it. I still stand by the three programs I recommended to boost the antivirus you already have. Yes, it is. We also run ad-aware and spybot and I have at times run TrendMicro's Housecall. Dh has been pretty happy with what we have. He's familiar with anti-virus programs and researched when our McAfee was up. The other tab is another scrapbooking website - scrapjazz. The ads they run are for their online store at Scrapbook.com I go there all the time and there have been no problems and no one has said they've had problems. I actually posted a warning about proboards because I know members at scrapjazz also go to another proboard and one person said she had a problem at that other one. We tried trendmicro, but it never found all the stuff. I used to have ad-aware but found it was useless. I had to remake my "attack kit" with malwarebytes, spybot (always check for updates before use), and ccleaner (registry cleaner, clears out empty files no longer in use, etc)... we use them in that order. I have not used Avast in a long time as it never seemed to keep things off the computer, thankfully they were never really bad things. Patrick and the other admins are on the right track with notifying google about the issue with infected ads. I am sure they will have it all sorted out as soon as possible. They have always been there for proboards members and they are doing their best to fix the problem.
|
|
singitbacktome
inherit
-3820274
0
May 17, 2024 4:30:39 GMT -8
singitbacktome
0
January 1970
GUEST
|
Post by singitbacktome on Dec 7, 2009 13:29:59 GMT -8
I just had my Avast! anti virus, popup a Trojan virus alert, I was browsing random Proboards websites. Sadly, before I could get a sceenshot, I x'd out of the page. I'm running a scan on my computer; but, good luck with the virus problem.
|
|
CM
New Member
Government's first duty is to protect the people, not run their lives
Posts: 181
inherit
136499
0
Jan 9, 2018 14:10:57 GMT -8
CM
Government's first duty is to protect the people, not run their lives
181
January 2009
carlsbadmark
|
Post by CM on Dec 7, 2009 14:13:43 GMT -8
I just had my Avast! anti virus, popup a Trojan virus alert, I was browsing random Proboards websites. Sadly, before I could get a sceenshot, I x'd out of the page. I'm running a scan on my computer; but, good luck with the virus problem. Many thanks to the hard working people at PB but it’s not just PorBoards the same thing happened to me at Image Shack and Soda Head. The advert folks need to figure out a way to stop this.
|
|
#e61919
1
0
1
Sept 28, 2023 13:31:20 GMT -8
VS Admin
20,147
January 2000
admin
|
Post by VS Admin on Dec 7, 2009 15:21:18 GMT -8
I just had my Avast! anti virus, popup a Trojan virus alert, I was browsing random Proboards websites. Sadly, before I could get a sceenshot, I x'd out of the page. I'm running a scan on my computer; but, good luck with the virus problem. Are you sure this happened on a ProBoards site? Given the measures we have taken I do not think it is possible at this point, but I am of course open to investigate this. What is the URL of the forum that you experienced this on?
|
|
inherit
149801
0
Jul 24, 2010 4:10:41 GMT -8
shewithoutaname
17
December 2009
shewithoutaname
|
Post by shewithoutaname on Dec 7, 2009 18:08:12 GMT -8
We tried trendmicro, but it never found all the stuff. I used to have ad-aware but found it was useless. I had to remake my "attack kit"; with malwarebytes, spybot (always check for updates before use), and ccleaner (registry cleaner, clears out empty files no longer in use, etc)... we use them in that order. I have not used Avast in a long time as it never seemed to keep things off the computer, thankfully they were never really bad things. Patrick and the other admins are on the right track with notifying google about the issue with infected ads. I am sure they will have it all sorted out as soon as possible. They have always been there for proboards members and they are doing their best to fix the problem. It was a long time since I had last run it, I always wondered how great a job it did, but when I ran it the other day it found 2 things. (I believe I posted it in a thread.) Dh said avast seems to be a top one for freebies and it's worked for us. It stopped that one that came up I posted. We haven't *knock on wood* had virus problems, it usually mealy worms (or whatever he called it LOL) that he has to use another program for. I think that's what he said. I read him your post and there was one of them you posted he said he didn't like (or care for?) but he couldn't remember which one. Of course, we have spybot, so it wasn't that one. LOL
|
|