ALL MEMBERS: Virus/Trojan Alerts on ATS...

Originally posted by picklewalsh
Is the fact that every time i try to refresh a page on ATS i get a message saying your trying to download a ActiveX control from apple on to my PC?

One of the ads is likely just testing for the presence of QuickTime. It's a relatively common test.

Ahh OK. I was worried for a moment then.

Well as long as it isn't trying to do something it isn't suppose to

OK, this is not good.

I now have 5 instances of Java/ByteVerify (virus/trojan?) that my anti-virus software does not know how to treat.

I haven't had something like this in years!

Not saying it definitely came from ATS, but....

Anyone know what I should do?

Originally posted by loam
OK, this is not good.

I now have 5 instances of Java/ByteVerify (virus/trojan?) that my anti-virus software does not know how to treat.

I haven't had something like this in years!

Not saying it definitely came from ATS, but....

Anyone know what I should do?

Question loam, have you updated your java runtime enviorment recently?? because I just did before this happend to me because of a dell service I used, and the very next thing I got a trojan.

The WMF exploit isn't that old and most people don't update their Windows Media Player that often. Especialy the ones that use iTunes, Winamp or another media player instead of WMP.

So Its advised that everyone update their Windows Media Player to at least 10.

Originally posted by loam
I now have 5 instances of Java/ByteVerify (virus/trojan?) that my anti-virus software does not know how to treat.

When did this happen?


More info on this exploit attempt:
Java/ByteVerify

Java/ByteVerify.Exploit is not a virus as such. It is a method to exploit a security vulnerability in the Microsoft Virtual Machine.

[edit on 14-8-2006 by SkepticOverlord]

I myself had a few happenings from the site last night before I shut down my computer. This morning I can't even get in the computer. When I start it up it goes straight to the login user screen but there are no users. I can't even boot up in any of the safe modes to at least get to my files. Could this be a result of the trojan? Does anyone know how to bypass the user login screen in windows xp? I am on my work comp now.

Originally posted by SkepticOverlord
When did this happen?

Well the system scan ran overnight, so I assume the infection occurred sometime yesterday.

PLEASE try to write down the URL by right clicking on the banner, click "properties" and you'll see it toward the bottom.

Also, if you click on the banner, it will show the URL (briefly) that will tell us which network is serving it, Tribal Fusion, Fast click, Advertising.com, etc...

We really need this info to get this trash off our site and any other sites this may be affecting.

Thanks!

Springer...

I guess that ill just stay off ATS, till the problem is solved, cause im to cheap to pay for for Virus protection, So the only way we can get it, is if we click on the banner, right?

[edit on 8/14/2006 by The_Time_is_now]

You would do well to take a look at these:

Free Firewall

Free Anti-Virus

For all those with difficulties, I cannot recommend this site highly enough. Great for getting rid of those stubborn stains.

Originally posted by GradyPhilpott
You would do well to take a look at these:

Free Firewall

Free Anti-Virus

Thanks Grady, I totally forgot that there is free virus protection, lol. Do you know of anyplace where they have free software to get rid of spyware?

Here are three I use:

Ad-Aware-SE-Personal-Edition

Spybot-Search-Destroy

SpywareBlaster

Here's one for cleaning the extraneous files:

CCleaner

Grady,

Check this one out.....

I had trouble with Zonealarm causing my router to have to be reset.

I installed this one and "TADA" works perfectly. Free too..

www.filseclab.com...

Semper

I never heard of it, but if it works, I'm all for it.

Also, make sure your Windows firewall is off, if you're using XP.



[edit on 2006/8/15 by GradyPhilpott]

Filseclab turns the XP firewall off automatically.

I found this one when I discovered that Zone Alarm also interferes with some of the Forensics Programs I have to use on occasion.

Fliseclab is very adaptable. I used Zone Alarm for a long long time and still put it on friends computers that are not running a "DLink" Router. That is the Brand that Z-Alarm has the most trouble with.

Still have not found anything better than AVG though for antivirus...

Semper

Originally posted by Springer
PLEASE try to write down the URL by right clicking on the banner, click "properties" and you'll see it toward the bottom.

I got a wierd small all white window/browser at the bottom of my desktop as a popup on myats page, when I right clicked it to see properties it would minimize itself and I couldn't do anything with it but drag it around by the top bar. I moused over it in my taskbar though and that gave me the URL
images.abovetopsecret.com... -microsoft internet ex
I don't know if it is related as my virus scanner didn't go off this time but it was a really wierd little popup window that seemed intelligent enough to keep me from doing anything with it other than dragging it around.
Hope it helps.
Might sound paranoid, but is it possible one of you guys' advertisers isn't a conspiracy fan?

There's obviously a new scripting language.
Most likely an off-shoot of perl.
BAT's (orig. scr. lang.) are powerful right now.

Anyone else notice that some of the char's in your posts seem to dissapear or re-appear oddly?


Watch ^]13


[edit on 16-8-2006 by bothered]

Originally posted by twitchy
Might sound paranoid, but is it possible one of you guys' advertisers isn't a conspiracy fan?

As far as we can tell, this past weekend saw one of our ad networks (I believe ValueClick, formerly known as FastClick) had one or more ads infected with one or more variants of the recent attack on MySpace through infected advertising. It appears as though a handful of large boards were targeted, and we happened to be one of them.

Turning off the ads as soon as we noticed something funky seems to have significantly minimized the impact to ATS. I'll provide more details if I'm able to get more information.