| Forum Index > BW General |
|
pR0gR4m3R
Spain1446 Posts
On September 26 2009 13:09 Manifesto7 wrote: I get the warning everywhere afreeca is used. You get it in many TL blogs with image links too. Google tells me before entering afreeca that is a badware website | ||
|
Mandalor
Germany2362 Posts
On September 26 2009 16:33 PanN wrote: 1.) Why would you talk about something you have no idea about? You can get rid of it with many programs, mal-ware bytes, or spybot S&D would be fine. 2.) You don't reformat a CPU, you reformat a harddrive. 1) he's right. I had that happen to me about half a year ago. I tried every anti-virus/-malware program you can think of and it didn't help. 2) cpu is sometimes used as an abreviation for computer. We all knew what he was talking about anyway. | ||
motbob
United States12546 Posts
On September 26 2009 19:57 Mandalor wrote: 2) cpu is sometimes used as an abreviation for computer. What? lol | ||
|
Mandalor
Germany2362 Posts
 | ||
|
cyronc
218 Posts
sry i couldnt resist ... | ||
|
TheFoReveRwaR
United States10657 Posts
On September 26 2009 21:49 cyronc wrote: cpu is almost everytime used as an abrevation for central processing unit LOL =) sry i couldnt resist ... That was a real knee slapper. I had a virus(it couldve been an error too I suppose) recently that made it impossible to log in to windows. Could've been related. I can't remember exactly but I'm pretty sure I got it after doing an update to flash player. I thought it was odd because I had already updated flash player not too long ago but stupidly I did it anyway. | ||
|
50bani
Romania480 Posts
Artosis your site is infected! Had to restore factory settings. I was running Opera under Win XP. The funny thing is I did not even try to download it, it started itself so to speak... I think it is an attack using the Adobe plug-ins | ||
|
PanN
United States2828 Posts
On September 27 2009 00:25 50bani wrote: It is malware!! Artosis your site is infected! Had to restore factory settings. I was running Opera under Win XP. The funny thing is I did not even try to download it, it started itself so to speak... I think it is an attack using the Adobe plug-ins Wait, you reformatted? | ||
|
RyanS
United States620 Posts
![[image loading]](http://img35.imageshack.us/img35/2218/capturenk.png) For those that posted earlier about the afreeca warning, this is not the same thing. I would avoid the site until it is fixed if you do not have a good anti-virus or can't spot a fake Adobe update page. ^.^ | ||
|
Doso
Germany769 Posts
| ||
|
50bani
Romania480 Posts
Yup. Restored factory contents to be more specific, since it is a "brand-name" computer. No problem saving stuff on DVD or USB stick but you have to reinstall stuff. | ||
|
Shikyo
Finland33997 Posts
On September 27 2009 02:45 50bani wrote: Yup. Restored factory contents to be more specific, since it is a "brand-name" computer. No problem saving stuff on DVD or USB stick but you have to reinstall stuff. Well, it of course can be a problem since the virus/worm/whatever could be in some of the files you saved. | ||
|
PanN
United States2828 Posts
On September 27 2009 02:45 50bani wrote: Yup. Restored factory contents to be more specific, since it is a "brand-name" computer. No problem saving stuff on DVD or USB stick but you have to reinstall stuff. I got the virus from site, didn't click anything. Ran a scan with mal-ware bytes, and spybot. Rebooted in safe mode, scanned again. Rebooted normally, computer was fine. You guys reformatting are insane. | ||
|
Monstah-_-
249 Posts
On September 26 2009 19:57 Mandalor wrote: 1) he's right. I had that happen to me about half a year ago. I tried every anti-virus/-malware program you can think of and it didn't help. 2) cpu is sometimes used as an abreviation for computer. We all knew what he was talking about anyway. LOL. You mean Central processing unit? | ||
|
Deleriux
10 Posts
If you check the page source right at the very bottom someone has inserted javascript. The javascript does this basically: Creates a string value such as: ODYFYQZYNMxCMACTFBaEQXEYpGZFCNCWsKCEDYQLeFKSaKQHCFAKKQrDNOGcUOOQVhYWBSMKQQI.TXNOEOcVUZoNATm (this is what I get) then removes all capital letters to get the site name which in my example is: xapserach.com It then proceeds to add a link to this website to the [ head ] html element to browsers that renders the page as a [ script ] element. So once the site is loaded your browser adds something like this - [ head ] [ script ] xapsearch.com attack site code goes here. [ /script ] [ /head ] I'm willing to bet whatever is hosted (or was hosted) there was even more javascript that installs exploits through peoples browsers. Please fix this. If you dont believe me open the page source yourself and you'll see the javascript. | ||
|
CoL_Fuehrer
Russian Federation124 Posts
On September 26 2009 16:33 PanN wrote: 1.) Why would you talk about something you have no idea about? You can get rid of it with many programs, mal-ware bytes, or spybot S&D would be fine. 2.) You don't reformat a CPU, you reformat a harddrive. Owned | ||
|
SonuvBob
Aiur21550 Posts
On September 27 2009 04:31 Deleriux wrote: Please fix this. If you dont believe me open the page source yourself and you'll see the javascript. Yeah, Artosis is away at WCG USA though. Don't know anyone else behind scforall. | ||
|
Patriot.dlk
Sweden5462 Posts
Going full scans now | ||
|
TerraIncognita
Germany55 Posts
Tiny little pain in the ass but I got rid of it. It's strongly recommended to avoid this site, until this security problem has solved at 100%. For those, which got also infected: Malwarebytes cleaned this sucker perfectly. | ||
|
Alphonsse
United States518 Posts
| ||
| ||
|
|
OSC
Kung Fu Cup
Classic vs Solar
herO vs Cure
Reynor vs GuMiho
ByuN vs ShoWTimE
Tenacious Turtle Tussle
The PondCast
RSL Revival
Solar vs Zoun
MaxPax vs Bunny
Kung Fu Cup
WardiTV Korean Royale
PiGosaur Monday
RSL Revival
Classic vs Creator
Cure vs TriGGeR
Kung Fu Cup
[ Show More ] |
|
|
EPT
