Wtf is going on here-virus???? - GoFuckYourself.com

fspwebmaster · 01-17-2014, 11:42 AM

I was just browsing GFY (with Chrome) and clicked on a thread than went to Sexter.me while I was there I clicked on one of the images and this popped up.

It locked up my browser tighter than a rats' a$$. Has anyone ever run across this before?

I restarted my computer and everything was fine.

seeandsee · 01-17-2014, 11:53 AM

looks like some malware on your side, not gfy

also get into safe mode and scan all, don't get fucked with encryption scheme

anexsia · 01-17-2014, 12:07 PM

Better hope you don't pick up one of those encryption viruses...that shit will fuck all your data up

Get a decent antivirus: Avast, Bitdefender, NOD32 and combine it with Malwarebytes Antimalware

Tofu · 01-17-2014, 12:08 PM

Quote:

Originally Posted by seeandsee

looks like some malware on your side, not gfy

also get into safe mode and scan all, don't get fucked with encryption scheme

RJHere · 01-17-2014, 12:13 PM

Quote:

Originally Posted by fspwebmaster

I was just browsing GFY (with Chrome) and clicked on a thread than went to Sexter.me while I was there I clicked on one of the images and this popped up.

I got the same shit

itto · 01-17-2014, 12:22 PM

By the look of it, it seems to be a html ransomware called "browlock". Its just a tricky piece of javascript that creates a 150-iframe-loop to make you think your browser is locked. Usually, turning off javascript and closing the browser (or actually clicking "close" 150 time) should do the trick. There's no malware per se installed on your machine. (IF i'm right, and it is the typical browlock fbi-moneypak-scam).

.

postalsex · 01-17-2014, 12:26 PM

you have a virus my friend. safest bet if you can afford it is to reinstall windows from scratch and format everything. will take you a long time but so will atinvirus scans take and you are not really sure if it is all gone...

RJHere · 01-17-2014, 12:53 PM

Quote:

Originally Posted by postalsex

you have a virus my friend. safest bet if you can afford it is to reinstall windows from scratch and format everything. will take you a long time but so will atinvirus scans take and you are not really sure if it is all gone...

You've just made my day.

fspwebmaster · 01-17-2014, 02:24 PM

Did some searching and came up with this http://www.system-tips.net/remove-po...atch-org-scam/

adultchatpay · 01-17-2014, 10:49 PM

That sucks, it's for your anti virus to work.

HerPimp · 01-17-2014, 11:06 PM

Free version of malwarebytes should fix it up, if it blocks install, turn your computer all the way off for a few seconds, power on, install...

fspwebmaster · 01-17-2014, 11:12 PM

Quote:

Originally Posted by HerPimp

Free version of malwarebytes should fix it up, if it blocks install, turn your computer all the way off for a few seconds, power on, install...

It ticks me off that Webroot didn't catch it's usually good at catching everything. I ran the free version of Malwarebytes and it took care of it. Went ahead and bought the Pro version to keep on top of things.

Creatine · 01-17-2014, 11:46 PM

That's a pop up I believe. Got it a few times and wasn't able to close the window. Had to open task manager and force firefox close, re open it and then force it again.

Pain in the ass is what it is.

247mg · 01-17-2014, 11:49 PM

This is called ransom ware spyware. You need to install Microsoft Security Essential to get rid this off perm.

To get this spyware removed from your PC try System Restore from Safe Mode and it's done!

the Shemp · 01-18-2014, 01:29 AM

format c:

xshake · 01-18-2014, 01:35 AM

malware, report that domain to site where it shows

CurrentlySober · 01-18-2014, 01:55 AM

Just take a really long piss into the back of your PC where the fan inlet is. That will cure the problem - Urine is sterile.

3xmedia · 01-18-2014, 02:55 AM

got same shit from pornhub recently.

it locked up my browser (javascript probably), so I dropped it by ctrl+alt+delele.... everything was fine then.

Klen · 01-18-2014, 02:59 AM

One of advantages of using linux-i never get infested

Darkhorse · 01-18-2014, 03:14 AM

Quote:

Originally Posted by the Shemp

format c:

lol ;)

least will be nice and clean

Klen · 01-18-2014, 03:16 AM

Also,even if you are on windows,i suggest to use cloud storage for your data,then you can also give a damn about viruses.

Klen · 01-18-2014, 03:17 AM

Quote:

Originally Posted by Darkhorse

lol ;)

least will be nice and clean

Actualy before when that command was actualy used(during dos/win 3.11/win95/98 era) executing that during infestation with MBR virus it was'nt helpful unless you cleaned MBR record as well.

Darkhorse · 01-18-2014, 03:25 AM

Quote:

Originally Posted by KlenTelaris

Actualy before when that command was actualy used(during dos/win 3.11/win95/98 era) executing that during infestation with MBR virus it was'nt helpful unless you cleaned MBR record as well.

Oh snap, that would have sucked for sure.

Harmon · 01-18-2014, 07:29 AM

It's located in your System32 file on your C: drive. Delete folder System32 and all should be well.

EddyTheDog · 01-18-2014, 07:33 AM

I hit that site the other day - It's just a java alert that goes below the screen edge so you can not close it...

Close it in task manager and that will be the end of it - No virus.....

fspwebmaster · 01-18-2014, 03:31 PM

Quote:

Originally Posted by xshake

malware, report that domain to site where it shows

The domain name was policesitewatch.org was registered on 1/13/14 and I'm pretty sure they planted it themselves.

I had 2 urls open when it popped up one was gfy and the other was sexter so I'm not sure which on it popped up from

Creatine · 01-18-2014, 05:22 PM

Quote:

Originally Posted by fspwebmaster

The domain name was policesitewatch.org was registered on 1/13/14 and I'm pretty sure they planted it themselves.

I had 2 urls open when it popped up one was gfy and the other was sexter so I'm not sure which on it popped up from

I own Sexter. I use plugrush pop up ads, could it be plugrush?

Creatine · 01-18-2014, 05:31 PM

I just opened a fresh browser and visited Sexter.me and clicked on an image and a popup came up with this.

I have just removed plugrush popup ads from the website.

It shouldn't show up anymore.

Pretty shitty that something like this would slip through.

itto · 01-18-2014, 05:38 PM

JUST READ WHAT I FUCKING SAID ON POST #6

it's prolly on plugrush.

Creatine · 01-18-2014, 05:41 PM

Quote:

Originally Posted by itto

JUST READ WHAT I FUCKING SAID ON POST #6

it's prolly on plugrush.

fspwebmaster · 01-18-2014, 06:12 PM

Quote:

Originally Posted by Creatine

I just opened a fresh browser and visited Sexter.me and clicked on an image and a popup came up with this.

I have just removed plugrush popup ads from the website.

It shouldn't show up anymore.

Pretty shitty that something like this would slip through.

Did you contact PlugRush to let them know about it?

Not sure if or how they can find it but they should be made aware of it.

Klen · 01-18-2014, 07:16 PM

Quote:

Originally Posted by EddyTheDog

I hit that site the other day - It's just a java alert that goes below the screen edge so you can not close it...

Close it in task manager and that will be the end of it - No virus.....

Well that's funny,so someone was toolazy to make an actual virus and made a fake one ?
Tho,that could be reason why plugrush didnt detected it.

fspwebmaster · 01-18-2014, 09:30 PM

Quote:

Originally Posted by KlenTelaris

Well that's funny,so someone was toolazy to make an actual virus and made a fake one ?
Tho,that could be reason why plugrush didnt detected it.

It may be a fake virus, but when the page popped up (as well as the warning that pops when you try to exit it) I'm sure some poor sucker will fall for it and pay the "fine".

The form for paying the fine seems to work, of course I didn't go through the whole process because I knew it was BS.

I know I had a WTF moment when it first popped up on me LOL

01-17-2014, 11:42 AM	#1
fspwebmaster Registered User Industry Role: Join Date: Jun 2012 Location: Pinning the world of porn one image at a time Posts: 81	Wtf is going on here-virus???? I was just browsing GFY (with Chrome) and clicked on a thread than went to Sexter.me while I was there I clicked on one of the images and this popped up. It locked up my browser tighter than a rats' a$$. Has anyone ever run across this before? I restarted my computer and everything was fine. __________________ XXX Porn Pinboard-Pin Your Porn, Get DoFollow Backlinks, Done! \| FreeSexPins \| Asian Porn Videos \| Free Porn Videos

01-17-2014, 11:53 AM	#2
seeandsee Check SIG! Industry Role: Join Date: Mar 2006 Location: Europe (Skype: gojkoas) Posts: 50,945	looks like some malware on your side, not gfy also get into safe mode and scan all, don't get fucked with encryption scheme __________________ BUY MY SIG - 50$/Year Contact here

01-17-2014, 12:26 PM	#7
postalsex Confirmed User Industry Role: Join Date: Dec 2013 Posts: 400	you have a virus my friend. safest bet if you can afford it is to reinstall windows from scratch and format everything. will take you a long time but so will atinvirus scans take and you are not really sure if it is all gone... __________________ Best Converting CAMS

01-17-2014, 02:24 PM	#9
fspwebmaster Registered User Industry Role: Join Date: Jun 2012 Location: Pinning the world of porn one image at a time Posts: 81	Did some searching and came up with this http://www.system-tips.net/remove-po...atch-org-scam/ __________________ XXX Porn Pinboard-Pin Your Porn, Get DoFollow Backlinks, Done! \| FreeSexPins \| Asian Porn Videos \| Free Porn Videos

01-17-2014, 11:06 PM	#11
HerPimp Confirmed User Industry Role: Join Date: Mar 2006 Location: Earth Posts: 1,197	Free version of malwarebytes should fix it up, if it blocks install, turn your computer all the way off for a few seconds, power on, install... __________________

01-17-2014, 12:07 PM	#3
anexsia Confirmed User Industry Role: Join Date: May 2010 Posts: 5,735	Better hope you don't pick up one of those encryption viruses...that shit will fuck all your data up Get a decent antivirus: Avast, Bitdefender, NOD32 and combine it with Malwarebytes Antimalware

01-17-2014, 12:22 PM	#6
itto Confirmed User Industry Role: Join Date: Jul 2006 Location: world wide Posts: 1,363	By the look of it, it seems to be a html ransomware called "browlock". Its just a tricky piece of javascript that creates a 150-iframe-loop to make you think your browser is locked. Usually, turning off javascript and closing the browser (or actually clicking "close" 150 time) should do the trick. There's no malware per se installed on your machine. (IF i'm right, and it is the typical browlock fbi-moneypak-scam). .

01-17-2014, 10:49 PM	#10
adultchatpay Let's Make Money Industry Role: Join Date: Dec 2008 Posts: 8,784	That sucks, it's for your anti virus to work.

01-17-2014, 11:46 PM	#13
Creatine Confirmed User Industry Role: Join Date: Apr 2013 Posts: 1,060	That's a pop up I believe. Got it a few times and wasn't able to close the window. Had to open task manager and force firefox close, re open it and then force it again. Pain in the ass is what it is. Last edited by Creatine; 01-17-2014 at 11:47 PM..

01-17-2014, 11:49 PM	#14
247mg Yellowplum / 247mg Industry Role: Join Date: Feb 2008 Location: Nicosia, CY Posts: 2,162	This is called ransom ware spyware. You need to install Microsoft Security Essential to get rid this off perm. To get this spyware removed from your PC try System Restore from Safe Mode and it's done! __________________ 247mg.com - Indian Affiliate Program - Over 50+ Sites To Promote - Monetize Your INDIAN Traffic Today!

01-18-2014, 01:29 AM	#15
the Shemp congrats to the winners Industry Role: Join Date: Nov 2001 Location: Echo Beach Posts: 10,891	format c: __________________ i use Vacares...so should you Submit your picture galleries to my site...Outlaw TGP

01-18-2014, 01:35 AM	#16
xshake Porno videos Industry Role: Join Date: Nov 2011 Posts: 220	malware, report that domain to site where it shows __________________ only the best porno video

01-18-2014, 01:55 AM	#17
CurrentlySober Too lazy to wipe my ass Industry Role: Join Date: Aug 2002 Location: A Public Bathroom Posts: 38,677	Just take a really long piss into the back of your PC where the fan inlet is. That will cure the problem - Urine is sterile. __________________ My AI Handywork... My Dream Gal... XXX 👁️ 👍️ 💩

01-18-2014, 02:55 AM	#18
3xmedia Confirmed User Industry Role: Join Date: Apr 2004 Posts: 5,728	got same shit from pornhub recently. it locked up my browser (javascript probably), so I dropped it by ctrl+alt+delele.... everything was fine then. Last edited by 3xmedia; 01-18-2014 at 02:59 AM..

01-18-2014, 02:59 AM	#19
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	One of advantages of using linux-i never get infested

01-18-2014, 03:16 AM	#21
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	Also,even if you are on windows,i suggest to use cloud storage for your data,then you can also give a damn about viruses.

01-18-2014, 07:29 AM	#24
Harmon ( ͡ʘ╭͜ʖ╮͡ʘ) Industry Role: Join Date: Mar 2004 Posts: 20,010	It's located in your System32 file on your C: drive. Delete folder System32 and all should be well. __________________ [email protected]

01-18-2014, 07:33 AM	#25
EddyTheDog Just Doing My Own Thing Industry Role: Join Date: Jan 2011 Location: London, Spain, New Zealand, GFY - Not Croydon... Posts: 25,209	I hit that site the other day - It's just a java alert that goes below the screen edge so you can not close it... Close it in task manager and that will be the end of it - No virus.....

01-18-2014, 05:31 PM	#28
Creatine Confirmed User Industry Role: Join Date: Apr 2013 Posts: 1,060	I just opened a fresh browser and visited Sexter.me and clicked on an image and a popup came up with this. I have just removed plugrush popup ads from the website. It shouldn't show up anymore. Pretty shitty that something like this would slip through. Last edited by Creatine; 01-18-2014 at 05:34 PM..

01-18-2014, 05:38 PM	#29
itto Confirmed User Industry Role: Join Date: Jul 2006 Location: world wide Posts: 1,363	JUST READ WHAT I FUCKING SAID ON POST #6 it's prolly on plugrush. __________________