Possible malware imbedded here?

[black_dust]

I must say it appears the mod response to this has been.... well, somewhat leisurely, to say the least. I understand that resolving these things takes time, and they are probably busy at work behind the scenes, but at least a warning/update sticky to inform people of the threat, advise them on how to protect themselves, and keep us updated on the situation would be appreciated.

Indeed, the less tech savy people are highly at risk

 

[Steyin]

Haven't read throught the thread, but is this the same issue as the pop-up that has been coming up at the board index for the last few days now? When I go to the index a box pops up telling me that IE or FF needs an update to view something and if you happen to press OK, it starts downloading a exe file, which I assume is a virus.

EDIT: Yeah ok its the same thing.

 

[Franklin Richards]

My display drivers are screwed. I'm not entirely sure it has anything to do with this but I'm covering my bases. I'm in safemode scanning junk as we speak. I've also been reinstalling my drivers where I can. But sometimes the monitor on my laptop just stops.

I'm getting the green squares here and there too.


Anywho. Just thought I'd post problems I've had since all this began.

 

[FaT_tONle]

Ok, my browser has been redirecting all over the place tonight{I think I even got a naughty site}, and it seems to only when I'm on the Hype.

I don't get the pop ups... but something is definitely up... no matter what thread... every time I go on the Hype my CPU has been freezing up. Not getting the pop ups... but it's definitely just not my CPU... my CPU literally needs 5-10 minutes to recover.

 

[Kahoot]

Here's what I got from my McAfee:

Each line is for every page I loaded or refreshed.

Since the McAfee I have installed is a corporate application, it logs these issues to a corporate server. SHH is not a blocked site here at work, and I don't get in trouble for viewing it here and there, but if this keeps up, there's a chance that the site or worse - the IP, will get blocked from our servers.

That's what I've been getting too.

 

[wiegeabo]

fil.exe

http://www.akademikerzeitung.ch

I have a Mac, and I'm getting the same thing.

Exactly what I'm getting. And I have an ad blocker turned on.

 

[Paradyme]

I keep getting a bunch of messages popping up on my On-Access Scan that a Trojan virus keeps making its way in everytime I bring this forum up. Any news on whats going on with this?

Nevermind just checked a page back. I guess is there any update on it?

 

[Twitch]

Just spent 2 hours fighting this son of a ***** off my computer. System Restore seems to be the only resort to killing it off.

God

 

[Drakon]

From what I can gather, we're still working on it.

 

[Drakon]

I just tried something, let's see if this works.

 

[SuperHeroHype]

Yes, we are.

 

[The Joker]

The boards just randomly changed the style of the board to the classic redux on me when I refreshed a page....

Gremlins in the system lol.

 

[FaT_tONle]

Can we get the real colors back please?

 

[Drakon]

The colors are my doing. I'm testing to see if the ad problems we're having are only from the light blue theme, and as such, I've disabled it for the time being. If the red/white/blue is too bright for you, please feel free to try the Dynamite Skin, which is a black/orange theme. I'm going to have the blue theme disabled for at least a day or so, to see if that alleviates the problems with the bad ads.

 

[Daisy]

I'm still using the vBulletin blue theme. That doesn't seem very 'disabled' to me.

 

[Drakon]

I'm still using the vBulletin blue theme. That doesn't seem very 'disabled' to me.

The page timed out on me because I kicked my modem unplugged. It should be disabled now.

 

[Daisy]

Yup... now it is.

 

[Silicon Surfer]

The other day I got a small window that said to properly view this page I needed to download a plugin. The Hype was one of two tabs that I had open at the time so I don't know that it was the Hype that it was coming from. The URL for the site is akademikerzeitung.ch. Since I wasn't trying to look at that page I used the task manager to shut it down.

 

[Spade]

Things got retro while I was away. But at least I'm not getting Spybot alerts 24/7.

 

[Wushuboy]

http://safeweb.norton.com/report/show?url=superherohype.com

superherohype.com

Summary
•Threats to your computer: 14
•Threats to your identity: 0
•Annoyance factors: 6

Total threats on this site: 20

 

[Wushuboy]

Drive-By Downloads (what's this?)
Threats found: 14
Here is a sample:

Threat Name: MSIE DHTML CreateControlRange Code Exec
Location: http://forums.superherohype.com/index.php



Threat Name: MSIE DHTML CreateControlRange Code Exec
Location: http://forums.superherohype.com/member.php?u=46101



Threat Name: MSIE DHTML CreateControlRange Code Exec
Location: http://forums.superherohype.com/member.php?u=22651



Threat Name: MSIE DHTML CreateControlRange Code Exec
Location: http://forums.superherohype.com/member.php?u=75524



Threat Name: Processes Started
Location: http://forums.superherohype.com/member.php?u=32472



Threat Name: Processes Started
Location: http://forums.superherohype.com/forumdisplay.php?f=315



Threat Name: Processes Started
Location: http://forums.superherohype.com/member.php?u=21704



Threat Name: Processes Started
Location: http://forums.superherohype.com/forumdisplay.php?f=22



Direct link to:
Location: http://forums.superherohype.com/



Direct link to:
Location: http://forums.superherohype.com/forumdisplay.php?f=22




Hard to Uninstall (what's this?)
Threats found: 6
Here is a sample:

Threat Name: Unnamed Hard to Uninstall
Location: http://forums.superherohype.com/member.php?u=32472



Threat Name: Unnamed Hard to Uninstall
Location: http://forums.superherohype.com/member.php?u=21704



Threat Name: Unnamed Hard to Uninstall
Location: http://forums.superherohype.com/forumdisplay.php?f=22



Threat Name: Unnamed Hard to Uninstall
Location: http://forums.superherohype.com/forumdisplay.php?f=315



Direct link to:
Location: http://forums.superherohype.com/



Direct link to:
Location: http://forums.superherohype.com/forumdisplay.php?f=22

 

[Daisy]

Well, the Annoyance factors could just be the Circut City ads.

 

[wiegeabo]

The other day I got a small window that said to properly view this page I needed to download a plugin. The Hype was one of two tabs that I had open at the time so I don't know that it was the Hype that it was coming from. The URL for the site is akademikerzeitung.ch. Since I wasn't trying to look at that page I used the task manager to shut it down.

Seems like that's what we're all getting too. I knew it was malware right away. No site should just randomly ask you to download something. And any official plugins would be authored by the browsers company (Microsoft, Firefox, Opera, etc...), not some seemingly random name. Even after canceling it tried to install, but Avast! antivirus caught the trojan and wiped it out before it could get a foothold on my system.

 

[the_ultimate_evil]

see now i'm worried, i have cancelled it the few time it popped up. but every scan i have done nothing has turned up, so i assumed it didn't install

 

[Silicon Surfer]

It didn't install on my system. I have AVG free, Ad-Aware, and Spybot and they show nothing. I also have What's Running? 2.2 that I use to see what IP addresses my computer is linked to. They all show nothing suspicious.