GoFuckYourself.com - Adult Webmaster Forum

GoFuckYourself.com - Adult Webmaster Forum (https://gfy.com/index.php)
-   Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)
-   -   Wtf is going on here-virus???? (https://gfy.com/showthread.php?t=1131295)

fspwebmaster 01-17-2014 11:42 AM

Wtf is going on here-virus????
 
I was just browsing GFY (with Chrome) and clicked on a thread than went to Sexter.me while I was there I clicked on one of the images and this popped up.

It locked up my browser tighter than a rats' a$$. Has anyone ever run across this before?

I restarted my computer and everything was fine.

http://xxxpornpinboard.com/Capture.JPG

http://xxxpornpinboard.com/Capture2.JPG

seeandsee 01-17-2014 11:53 AM

looks like some malware on your side, not gfy

also get into safe mode and scan all, don't get fucked with encryption scheme

anexsia 01-17-2014 12:07 PM

Better hope you don't pick up one of those encryption viruses...that shit will fuck all your data up

Get a decent antivirus: Avast, Bitdefender, NOD32 and combine it with Malwarebytes Antimalware

Tofu 01-17-2014 12:08 PM

Quote:

Originally Posted by seeandsee (Post 19948189)
looks like some malware on your side, not gfy

also get into safe mode and scan all, don't get fucked with encryption scheme

:2 cents:

RJHere 01-17-2014 12:13 PM

Quote:

Originally Posted by fspwebmaster (Post 19948159)
I was just browsing GFY (with Chrome) and clicked on a thread than went to Sexter.me while I was there I clicked on one of the images and this popped up.

I got the same shit:disgust

itto 01-17-2014 12:22 PM

By the look of it, it seems to be a html ransomware called "browlock". Its just a tricky piece of javascript that creates a 150-iframe-loop to make you think your browser is locked. Usually, turning off javascript and closing the browser (or actually clicking "close" 150 time) should do the trick. There's no malware per se installed on your machine. (IF i'm right, and it is the typical browlock fbi-moneypak-scam).

.

postalsex 01-17-2014 12:26 PM

you have a virus my friend. safest bet if you can afford it is to reinstall windows from scratch and format everything. will take you a long time but so will atinvirus scans take and you are not really sure if it is all gone...

RJHere 01-17-2014 12:53 PM

Quote:

Originally Posted by postalsex (Post 19948235)
you have a virus my friend. safest bet if you can afford it is to reinstall windows from scratch and format everything. will take you a long time but so will atinvirus scans take and you are not really sure if it is all gone...

You've just made my day.:1orglaugh:1orglaugh:1orglaugh

fspwebmaster 01-17-2014 02:24 PM

Did some searching and came up with this http://www.system-tips.net/remove-po...atch-org-scam/

adultchatpay 01-17-2014 10:49 PM

That sucks, it's for your anti virus to work.

HerPimp 01-17-2014 11:06 PM

Free version of malwarebytes should fix it up, if it blocks install, turn your computer all the way off for a few seconds, power on, install...

fspwebmaster 01-17-2014 11:12 PM

Quote:

Originally Posted by HerPimp (Post 19948795)
Free version of malwarebytes should fix it up, if it blocks install, turn your computer all the way off for a few seconds, power on, install...

It ticks me off that Webroot didn't catch it's usually good at catching everything. I ran the free version of Malwarebytes and it took care of it. Went ahead and bought the Pro version to keep on top of things.

Creatine 01-17-2014 11:46 PM

That's a pop up I believe. Got it a few times and wasn't able to close the window. Had to open task manager and force firefox close, re open it and then force it again.

Pain in the ass is what it is.

247mg 01-17-2014 11:49 PM

This is called ransom ware spyware. You need to install Microsoft Security Essential to get rid this off perm.

To get this spyware removed from your PC try System Restore from Safe Mode and it's done!

the Shemp 01-18-2014 01:29 AM

format c:

xshake 01-18-2014 01:35 AM

malware, report that domain to site where it shows

CurrentlySober 01-18-2014 01:55 AM

Just take a really long piss into the back of your PC where the fan inlet is. That will cure the problem - Urine is sterile.

3xmedia 01-18-2014 02:55 AM

got same shit from pornhub recently.

it locked up my browser (javascript probably), so I dropped it by ctrl+alt+delele.... everything was fine then.

Klen 01-18-2014 02:59 AM

One of advantages of using linux-i never get infested :)

Darkhorse 01-18-2014 03:14 AM

Quote:

Originally Posted by the Shemp (Post 19948835)
format c:

lol ;)

least will be nice and clean:)

Klen 01-18-2014 03:16 AM

Also,even if you are on windows,i suggest to use cloud storage for your data,then you can also give a damn about viruses.

Klen 01-18-2014 03:17 AM

Quote:

Originally Posted by Darkhorse (Post 19948895)
lol ;)

least will be nice and clean:)

Actualy before when that command was actualy used(during dos/win 3.11/win95/98 era) executing that during infestation with MBR virus it was'nt helpful unless you cleaned MBR record as well.

Darkhorse 01-18-2014 03:25 AM

Quote:

Originally Posted by KlenTelaris (Post 19948898)
Actualy before when that command was actualy used(during dos/win 3.11/win95/98 era) executing that during infestation with MBR virus it was'nt helpful unless you cleaned MBR record as well.

Oh snap, that would have sucked for sure.

Harmon 01-18-2014 07:29 AM

It's located in your System32 file on your C: drive. Delete folder System32 and all should be well.

EddyTheDog 01-18-2014 07:33 AM

I hit that site the other day - It's just a java alert that goes below the screen edge so you can not close it...

Close it in task manager and that will be the end of it - No virus.....

fspwebmaster 01-18-2014 03:31 PM

Quote:

Originally Posted by xshake (Post 19948840)
malware, report that domain to site where it shows

The domain name was policesitewatch.org was registered on 1/13/14 and I'm pretty sure they planted it themselves.

I had 2 urls open when it popped up one was gfy and the other was sexter so I'm not sure which on it popped up from

Creatine 01-18-2014 05:22 PM

Quote:

Originally Posted by fspwebmaster (Post 19949478)
The domain name was policesitewatch.org was registered on 1/13/14 and I'm pretty sure they planted it themselves.

I had 2 urls open when it popped up one was gfy and the other was sexter so I'm not sure which on it popped up from

I own Sexter. I use plugrush pop up ads, could it be plugrush?

Creatine 01-18-2014 05:31 PM

I just opened a fresh browser and visited Sexter.me and clicked on an image and a popup came up with this.
http://s9.postimg.org/sv5mtwj8v/sext...ush_pop_up.png

I have just removed plugrush popup ads from the website.

It shouldn't show up anymore.

Pretty shitty that something like this would slip through.

itto 01-18-2014 05:38 PM

JUST READ WHAT I FUCKING SAID ON POST #6

it's prolly on plugrush.

Creatine 01-18-2014 05:41 PM

Quote:

Originally Posted by itto (Post 19949560)
JUST READ WHAT I FUCKING SAID ON POST #6

it's prolly on plugrush.

http://www.quickmeme.com/img/45/45a6...b37e8c7d69.jpg

fspwebmaster 01-18-2014 06:12 PM

Quote:

Originally Posted by Creatine (Post 19949552)
I just opened a fresh browser and visited Sexter.me and clicked on an image and a popup came up with this.
http://s9.postimg.org/sv5mtwj8v/sext...ush_pop_up.png

I have just removed plugrush popup ads from the website.

It shouldn't show up anymore.

Pretty shitty that something like this would slip through.

Did you contact PlugRush to let them know about it?

Not sure if or how they can find it but they should be made aware of it.

Klen 01-18-2014 07:16 PM

Quote:

Originally Posted by EddyTheDog (Post 19949050)
I hit that site the other day - It's just a java alert that goes below the screen edge so you can not close it...

Close it in task manager and that will be the end of it - No virus.....

Well that's funny,so someone was toolazy to make an actual virus and made a fake one ?
Tho,that could be reason why plugrush didnt detected it.

fspwebmaster 01-18-2014 09:30 PM

Quote:

Originally Posted by KlenTelaris (Post 19949629)
Well that's funny,so someone was toolazy to make an actual virus and made a fake one ?
Tho,that could be reason why plugrush didnt detected it.

It may be a fake virus, but when the page popped up (as well as the warning that pops when you try to exit it) I'm sure some poor sucker will fall for it and pay the "fine".

The form for paying the fine seems to work, of course I didn't go through the whole process because I knew it was BS.

I know I had a WTF moment when it first popped up on me LOL


All times are GMT -7. The time now is 11:26 PM.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123