7 {{ upvoteCount | shortNum }}
7 {{ upvoteCount | shortNum }}

I Need Info On What Caused This Browser Attack

by Steven Wagenheim
6 replies
  • OFF TOPIC
    • |
I'm hoping some of the technical people here can help me figure out what caused
this browser attack.

I was at this other forum. I was in the process of refreshing one of the sub
forum pages. When the page refreshed, instead of taking me back to the page,
it took me to a page that had a Windows box about 1/3 of the way down the
page that read...

"Your PC Has Been Found to Have A Virus"

Or something like that.

It then had an OK box under it to click. Obviously, I didn't.

I tried to close the browser, but hitting the X in the upper right hand corner,
it wouldn't let me. So I right clicked at the bottom of the task bar and
clicked close all windows but nothing happened.

Finally, I went to Task Manager and just forced a shut down.

Okay, what causes this? I have the URL that came up when the page came
up. I'm trying to help the site that the attack occurred on.

Thanks.
  • Profile picture of the author Patrician
    Just a sleezy pop up ad - I am surprised this is the first time you have seen this *2&&^*

    It is just a super-sleeze marketing ploy - they make you think something is wrong and you are in desperate need of their help to resolve your problem.

    The truth is they are the only "virus" problem you have. I am amazed lately although I have super security several ways including pop up blockers everywhere - I am still getting pop-ups now and then -

    With that said now that they have touched you I would do a scan with your regular security/anti-virus program -

    I would also clear my browser cache - delete all history, temp files and cookies. Just for the heck of it.
    Signature

    Patricia Brucoli
    Plug-In Profit Site Helpdesk

    {{ DiscussionBoard.errors[8005947].message }}
    • Profile picture of the author Steven Wagenheim
      Originally Posted by Patrician View Post

      Just a sleezy pop up ad - I am surprised this is the first time you have seen this *2&&^*

      It is just a super-sleeze marketing ploy - they make you think something is wrong and you are in desperate need of their help to resolve your problem.

      The truth is they are the only "virus" problem you have. I am amazed lately although I have super security several ways including pop up blockers everywhere - I am still getting pop-ups now and then -

      With that said now that they have touched you I would do a scan with your regular security/anti-virus program -

      I would also clear my browser cache - delete all history, temp files and cookies. Just for the heck of it.
      How did this pop up ad take over the whole site? After refreshing the page,
      I was no longer at MTGSalvation. I was at some other URL that I wrote down.

      How is this even possible?
      Signature
      {{ DiscussionBoard.errors[8005958].message }}
  • Profile picture of the author Jeff Burritt
    Banned
    Sorry I don't know what caused it. But I detected similar behavior on another forum too a while back. And obviously did not like it.

    Here are a few steps I've used in the past to make sure I didn't inadvertently receive any viruses or nasty cookies which seem to be a favorite of some hackers who don't care about cookie regulations.

    PC Steps:
    Save and backup stuff you want to keep.
    Download and run ccleaner by Piriform.
    Hard flush dns settings: Start, Accessories, rightclick on command prompt as admin, then type 'ipconfig/flushdns'
    Run 'full' scan by Microsoft Security Essentials.

    If you want to be extra careful, you can always browse certain sites using a vps. Then it's not on your machine.

    Plus, I sometimes download 'free software' on an old laptop. I download it there first. Scan it. Then run it. And it if works fine, then will move it to one of my good PCs.
    {{ DiscussionBoard.errors[8005984].message }}
  • Profile picture of the author Dennis Gaskill
    Steve, I had that happen to me once. I'll send you a PM. I don't want to use the name of the "thing" here because it would just give someone else with ill intent the keyword to look for so they could do the same thing.
    Signature

    Just when you think you've got it all figured out, someone changes the rules.

    {{ DiscussionBoard.errors[8006136].message }}
    • Profile picture of the author Steven Wagenheim
      Originally Posted by Dennis Gaskill View Post

      Steve, I had that happen to me once. I'll send you a PM. I don't want to use the name of the "thing" here because it would just give someone else with ill intent the keyword to look for so they could do the same thing.
      Thanks Dennis. PM received. Yeah, I already knew how to kill it. I just wanted
      to know what causes it? How do these people do this? But I guess that's not
      info you really want to release over a public forum as it'll only give some people
      ideas.
      Signature
      {{ DiscussionBoard.errors[8006165].message }}
      • Profile picture of the author Dennis Gaskill
        Originally Posted by Steven Wagenheim View Post

        Thanks Dennis. PM received. Yeah, I already knew how to kill it. I just wanted
        to know what causes it? How do these people do this? But I guess that's not
        info you really want to release over a public forum as it'll only give some people
        ideas.
        If it's the same thing I told you about, it's a "feature." If I recall correctly, it's just a line of code added to the source code.
        Signature

        Just when you think you've got it all figured out, someone changes the rules.

        {{ DiscussionBoard.errors[8007366].message }}

Trending Topics