Wtf is going on here-virus????

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • fspwebmaster
    Registered User
    • Jun 2012
    • 81

    #1

    Wtf is going on here-virus????

    I was just browsing GFY (with Chrome) and clicked on a thread than went to Sexter.me while I was there I clicked on one of the images and this popped up.

    It locked up my browser tighter than a rats' a$$. Has anyone ever run across this before?

    I restarted my computer and everything was fine.



    XXX Porn Pinboard-Pin Your Porn, Get DoFollow Backlinks, Done! | FreeSexPins | Asian Porn Videos | Free Porn Videos
  • seeandsee
    Check SIG!
    • Mar 2006
    • 50945

    #2
    looks like some malware on your side, not gfy

    also get into safe mode and scan all, don't get fucked with encryption scheme
    BUY MY SIG - 50$/Year

    Contact here

    Comment

    • anexsia
      Confirmed User
      • May 2010
      • 5735

      #3
      Better hope you don't pick up one of those encryption viruses...that shit will fuck all your data up

      Get a decent antivirus: Avast, Bitdefender, NOD32 and combine it with Malwarebytes Antimalware

      Comment

      • Tofu
        The Video Specialist
        • Jul 2003
        • 5615

        #4
        Originally posted by seeandsee
        looks like some malware on your side, not gfy

        also get into safe mode and scan all, don't get fucked with encryption scheme
        tofu916 video services - tofu916.com
        twitter: tofu916 | skype: tofu916 | tel: 916-672-TOFU | e: tofu # tofu916.com

        Comment

        • RJHere
          Confirmed User
          • Jan 2013
          • 234

          #5
          Originally posted by fspwebmaster
          I was just browsing GFY (with Chrome) and clicked on a thread than went to Sexter.me while I was there I clicked on one of the images and this popped up.
          I got the same shit

          Comment

          • itto
            Confirmed User
            • Jul 2006
            • 1364

            #6
            By the look of it, it seems to be a html ransomware called "browlock". Its just a tricky piece of javascript that creates a 150-iframe-loop to make you think your browser is locked. Usually, turning off javascript and closing the browser (or actually clicking "close" 150 time) should do the trick. There's no malware per se installed on your machine. (IF i'm right, and it is the typical browlock fbi-moneypak-scam).

            .

            Comment

            • postalsex
              Confirmed User
              • Dec 2013
              • 400

              #7
              you have a virus my friend. safest bet if you can afford it is to reinstall windows from scratch and format everything. will take you a long time but so will atinvirus scans take and you are not really sure if it is all gone...
              Best Converting CAMS

              Comment

              • RJHere
                Confirmed User
                • Jan 2013
                • 234

                #8
                Originally posted by postalsex
                you have a virus my friend. safest bet if you can afford it is to reinstall windows from scratch and format everything. will take you a long time but so will atinvirus scans take and you are not really sure if it is all gone...
                You've just made my day.

                Comment

                • fspwebmaster
                  Registered User
                  • Jun 2012
                  • 81

                  #9
                  Did some searching and came up with this http://www.system-tips.net/remove-po...atch-org-scam/
                  XXX Porn Pinboard-Pin Your Porn, Get DoFollow Backlinks, Done! | FreeSexPins | Asian Porn Videos | Free Porn Videos

                  Comment

                  • adultchatpay
                    Let's Make Money
                    • Dec 2008
                    • 8785

                    #10
                    That sucks, it's for your anti virus to work.

                    Comment

                    • HerPimp
                      Confirmed User
                      • Mar 2006
                      • 1197

                      #11
                      Free version of malwarebytes should fix it up, if it blocks install, turn your computer all the way off for a few seconds, power on, install...

                      Comment

                      • fspwebmaster
                        Registered User
                        • Jun 2012
                        • 81

                        #12
                        Originally posted by HerPimp
                        Free version of malwarebytes should fix it up, if it blocks install, turn your computer all the way off for a few seconds, power on, install...
                        It ticks me off that Webroot didn't catch it's usually good at catching everything. I ran the free version of Malwarebytes and it took care of it. Went ahead and bought the Pro version to keep on top of things.
                        XXX Porn Pinboard-Pin Your Porn, Get DoFollow Backlinks, Done! | FreeSexPins | Asian Porn Videos | Free Porn Videos

                        Comment

                        • Creatine
                          Confirmed User
                          • Apr 2013
                          • 1060

                          #13
                          That's a pop up I believe. Got it a few times and wasn't able to close the window. Had to open task manager and force firefox close, re open it and then force it again.

                          Pain in the ass is what it is.
                          Last edited by Creatine; 01-17-2014, 09:47 PM.

                          Comment

                          • 247mg
                            Yellowplum / 247mg
                            • Feb 2008
                            • 2162

                            #14
                            This is called ransom ware spyware. You need to install Microsoft Security Essential to get rid this off perm.

                            To get this spyware removed from your PC try System Restore from Safe Mode and it's done!
                            247mg.com - Indian Affiliate Program - Over 50+ Sites To Promote - Monetize Your INDIAN Traffic Today!

                            Comment

                            • the Shemp
                              congrats to the winners
                              • Nov 2001
                              • 10891

                              #15
                              format c:
                              i use Vacares...so should you
                              Submit your picture galleries to my site...Outlaw TGP

                              Comment

                              • xshake
                                Porno videos
                                • Nov 2011
                                • 223

                                #16
                                malware, report that domain to site where it shows

                                Comment

                                • CurrentlySober
                                  Too lazy to wipe my ass
                                  • Aug 2002
                                  • 38949

                                  #17
                                  Just take a really long piss into the back of your PC where the fan inlet is. That will cure the problem - Urine is sterile.


                                  👁️ 👍️ 💩

                                  Comment

                                  • 3xmedia
                                    Confirmed User
                                    • Apr 2004
                                    • 5738

                                    #18
                                    got same shit from pornhub recently.

                                    it locked up my browser (javascript probably), so I dropped it by ctrl+alt+delele.... everything was fine then.
                                    Last edited by 3xmedia; 01-18-2014, 12:59 AM.
                                    ---

                                    Comment

                                    • Klen
                                      • Aug 2006
                                      • 32235

                                      #19
                                      One of advantages of using linux-i never get infested

                                      Comment

                                      • Darkhorse
                                        Horsing Around
                                        • Sep 2002
                                        • 5879

                                        #20
                                        Originally posted by the Shemp
                                        format c:
                                        lol ;)

                                        least will be nice and clean

                                        Comment

                                        • Klen
                                          • Aug 2006
                                          • 32235

                                          #21
                                          Also,even if you are on windows,i suggest to use cloud storage for your data,then you can also give a damn about viruses.

                                          Comment

                                          • Klen
                                            • Aug 2006
                                            • 32235

                                            #22
                                            Originally posted by Darkhorse
                                            lol ;)

                                            least will be nice and clean
                                            Actualy before when that command was actualy used(during dos/win 3.11/win95/98 era) executing that during infestation with MBR virus it was'nt helpful unless you cleaned MBR record as well.

                                            Comment

                                            • Darkhorse
                                              Horsing Around
                                              • Sep 2002
                                              • 5879

                                              #23
                                              Originally posted by KlenTelaris
                                              Actualy before when that command was actualy used(during dos/win 3.11/win95/98 era) executing that during infestation with MBR virus it was'nt helpful unless you cleaned MBR record as well.
                                              Oh snap, that would have sucked for sure.

                                              Comment

                                              • Harmon
                                                ( ͡ʘ╭͜ʖ╮͡ʘ)
                                                • Mar 2004
                                                • 20012

                                                #24
                                                It's located in your System32 file on your C: drive. Delete folder System32 and all should be well.
                                                [email protected]

                                                Comment

                                                • EddyTheDog
                                                  Just Doing My Own Thing
                                                  • Jan 2011
                                                  • 25433

                                                  #25
                                                  I hit that site the other day - It's just a java alert that goes below the screen edge so you can not close it...

                                                  Close it in task manager and that will be the end of it - No virus.....

                                                  Comment

                                                  • fspwebmaster
                                                    Registered User
                                                    • Jun 2012
                                                    • 81

                                                    #26
                                                    Originally posted by xshake
                                                    malware, report that domain to site where it shows
                                                    The domain name was policesitewatch.org was registered on 1/13/14 and I'm pretty sure they planted it themselves.

                                                    I had 2 urls open when it popped up one was gfy and the other was sexter so I'm not sure which on it popped up from
                                                    XXX Porn Pinboard-Pin Your Porn, Get DoFollow Backlinks, Done! | FreeSexPins | Asian Porn Videos | Free Porn Videos

                                                    Comment

                                                    • Creatine
                                                      Confirmed User
                                                      • Apr 2013
                                                      • 1060

                                                      #27
                                                      Originally posted by fspwebmaster
                                                      The domain name was policesitewatch.org was registered on 1/13/14 and I'm pretty sure they planted it themselves.

                                                      I had 2 urls open when it popped up one was gfy and the other was sexter so I'm not sure which on it popped up from
                                                      I own Sexter. I use plugrush pop up ads, could it be plugrush?

                                                      Comment

                                                      • Creatine
                                                        Confirmed User
                                                        • Apr 2013
                                                        • 1060

                                                        #28
                                                        I just opened a fresh browser and visited Sexter.me and clicked on an image and a popup came up with this.


                                                        I have just removed plugrush popup ads from the website.

                                                        It shouldn't show up anymore.

                                                        Pretty shitty that something like this would slip through.
                                                        Last edited by Creatine; 01-18-2014, 03:34 PM.

                                                        Comment

                                                        • itto
                                                          Confirmed User
                                                          • Jul 2006
                                                          • 1364

                                                          #29
                                                          JUST READ WHAT I FUCKING SAID ON POST #6

                                                          it's prolly on plugrush.

                                                          Comment

                                                          • Creatine
                                                            Confirmed User
                                                            • Apr 2013
                                                            • 1060

                                                            #30
                                                            Originally posted by itto
                                                            JUST READ WHAT I FUCKING SAID ON POST #6

                                                            it's prolly on plugrush.

                                                            Comment

                                                            • fspwebmaster
                                                              Registered User
                                                              • Jun 2012
                                                              • 81

                                                              #31
                                                              Originally posted by Creatine
                                                              I just opened a fresh browser and visited Sexter.me and clicked on an image and a popup came up with this.


                                                              I have just removed plugrush popup ads from the website.

                                                              It shouldn't show up anymore.

                                                              Pretty shitty that something like this would slip through.
                                                              Did you contact PlugRush to let them know about it?

                                                              Not sure if or how they can find it but they should be made aware of it.
                                                              XXX Porn Pinboard-Pin Your Porn, Get DoFollow Backlinks, Done! | FreeSexPins | Asian Porn Videos | Free Porn Videos

                                                              Comment

                                                              • Klen
                                                                • Aug 2006
                                                                • 32235

                                                                #32
                                                                Originally posted by EddyTheDog
                                                                I hit that site the other day - It's just a java alert that goes below the screen edge so you can not close it...

                                                                Close it in task manager and that will be the end of it - No virus.....
                                                                Well that's funny,so someone was toolazy to make an actual virus and made a fake one ?
                                                                Tho,that could be reason why plugrush didnt detected it.

                                                                Comment

                                                                • fspwebmaster
                                                                  Registered User
                                                                  • Jun 2012
                                                                  • 81

                                                                  #33
                                                                  Originally posted by KlenTelaris
                                                                  Well that's funny,so someone was toolazy to make an actual virus and made a fake one ?
                                                                  Tho,that could be reason why plugrush didnt detected it.
                                                                  It may be a fake virus, but when the page popped up (as well as the warning that pops when you try to exit it) I'm sure some poor sucker will fall for it and pay the "fine".

                                                                  The form for paying the fine seems to work, of course I didn't go through the whole process because I knew it was BS.

                                                                  I know I had a WTF moment when it first popped up on me LOL
                                                                  XXX Porn Pinboard-Pin Your Porn, Get DoFollow Backlinks, Done! | FreeSexPins | Asian Porn Videos | Free Porn Videos

                                                                  Comment

                                                                  Working...