Hi. I'm Ian and I have a warning about Youtube!

Hi all. Im new to ATS but I had to make an account so I could warn you all about something I've had happen to me TWICE on Youtube this week. I must preface this with the fact that I DO NOT: watch porn, download strange files or go to strange websites. I DO: keep my computer up to date and have a very good anti Virus and firewall. so, once on Monday and once tonight I was watching youtube videos (Nibiru, LHC, Magnets ect...) and I went to go smoke, I dont smoke in the house. when I came back I had a popup on my screen saying a malicious file had been found. mind you, this all looked VERY Windows Official. same symbols, same colors, all that. the first time, I fell for it. I clicked ok and it took me to another window that was a "Computer scan". it said "25 Viruses and 13 Spyware found! Remove now?" I clicked yes. it downloaded a setup .exe file. I clicked it and it ran. I ran another scan on my computer and the whole time it was saying stuff like "Trojan activity found" and "files damaged". I clicked "remove now" and it took me to a website that wanted $99 to "clean my computer" after it did that it started systematically blocking all my internet browsers. Google Chrome? Blocked! IE8? Blocked! Firefox? Blocked. then it got scary... I opened my control panel to see if I could restore my computer to an earlier date... Control Panel? BLOCKED! I finally found a work around but it took awhile, seeing as it was shutting down every program I tried to open.

so. it being gone. I cleaned up my computer and went about my life thinking nothing of it.

here is me on youtube again tonight... out to smoke... "Malicious file found!" I tried to close it but to no avail. I clicked exit and guess what? it downloaded the .exe anyway! only this time Chrome said "this file seems malicious. Discard?" I clicked yes. file gone. pop up gone. computer? fine.

I just wanted to warn you all because this Virus is VERY subversive and prolific! I don't know how it works, where it comes from or who made it but I know it is coming from youtube! watch out ATS.

Originally posted by Ibanezman
it downloaded a setup .exe file. I clicked it and it ran.

That was a silly thing to do...

reply to post by mileysubet


I know. Im rather ashamed of myself for that. but as you can see from later in my post that I clicked cancel the second time and it still started the download.

Open up task manager, find the program it is running as ( most of the time a couple random numbers), right click and go to file, delete and your fine. These programs are tricky, it was still in your computer and tried to get you to do it again. Problem solved i get it many of times from watching porn

You fell for the oldest trick in the book my friend. You just gotta love those trojan bots that spam popular websites to get them a sucker.

Here is a clue, if it pops up in your browser, its not your antivirus....its another web page, just click the X to close. And when it asks if your sure, click yes.

The only thing you should ever worry about is YOUR antivirus software poppin up on you. When yours does it, its legit.

Do you use IE or Firefox? If FIrefox, there are add ons you can download that will nip that in the bud real quick. IE? not so much.

I actually take Firefox over IE hands down.

it's an ad for protection that is built in....I swear....that's micro soft

Click here for more information.

reply to post by Kastogere


I clicked the [X] and nothing happened. it refuses to close unless you click "ok" or "cancel". and I use Google Chrome Primarily. like 99.9% of the time.

reply to post by Ibanezman

what ver of Windows,, was it XP sp3,,or later ver.?
thech in me ,,curious me.

reply to post by Ibanezman


ain't ur fault,,
only solution too stop from infection,,at least back the,,,
" the 3 finger salute",,
then "stop it " the Prog.
seems its back.
hmp.

Originally posted by BobAthome
reply to post by Ibanezman

 

what ver of Windows,, was it XP sp3,,or later ver.?
thech in me ,,curious me.

I have Windows XP Professional.

Originally posted by Ibanezman
I must preface this with the fact that I DO NOT: ... download strange files

Yes, yes you do.
And you run them as well.

If you fell for it, you deserved it.

I hope it taught you a lesson. Next time something pops up, no matter how offical it looks DO NOT download anything it ask you to. If you had a virus, trojan, or anything similar your computer isn't automatically going to ask you to download something to fix the problem.

Go to bleepingcomputer.com and look for a download called combofix read the instructions though if you can. you may have to save it under a different name. run it as administrator if it won't open. it depends on how infected your computer has become. the virus that you have is not really that terrible, they are just trying to scam money out of you. this happened to me a couple of times (i didn't click open .exe file or anything though) and my dad has been fixing computers for 30 years (he is now a systems tech analyst and Cisco certified network professional CCNP)...he told me to do what I just told you to do. It got rid of the problem. Make sure you follow all the directions though.

Oh disclaimer

Do your own research. I take no responsibility for any advice I'm giving you, just telling you what worked for me! Thanks for the heads up anyways about youtube. I try never to click on ANY strange links ever. My little 1 and a half year old when he gets a hold of my mouse no telling what strange and horrible things will land in my computer hes the reason I got that virus in the first place!


Also if your computer is already so infected (it will get to the point you cannot even open files you may have to go somewhere else save that combofix on a usb drive or something and transfer it that way. the download refreshes every half hour or so so that it's brand new because that virus will keep trying to shut it down.


Here is the link www.bleepingcomputer.com...

Originally posted by Ibanezman
[...] I clicked "remove now" and it took me to a website that wanted $99 to "clean my computer" after it did that [...]

So an unknown popup on your pc linked you to an unknown page that wanted $99 and you still went ahead and clicked yes?

I'm sorry but some people are practically asking to get ripped off.

Sounds like whats known as a "rogue" virus. Some are VERY malicious. Most believe that they are created the Russian mafia etc. First time I have heard of them coming through YouTube.

Recommend that you use Firefox with the NoScript addon, it can be a big hassle because you are always having to temporarily allow sites permission but the alternative as you have found is not much better.

reply to post by Ibanezman


Welcome to ATS friend..and thanks for heads up..Cheers Coco

Originally posted by Ibanezman
reply to post by mileysubet

 

I know. Im rather ashamed of myself for that. but as you can see from later in my post that I clicked cancel the second time and it still started the download.

I know the one you speak of. It looks very official. I have Norton so I get a warning anytime something like that pops up. If not for Norton I too would've clicked yes for the download.

What Ps's me off is this virus has been around for a few years now and no one seems to be going after the culprit that sprung it.

Yea I used to see that back in the day havent for awhile though....are you using internet explorer? When I did that my computer got the rootkit virus which as a pain to get rid of. My suggestion would be to download and run combofix as someone else suggested its free and works like a charm. After that download google chrome and add to it the ad block plus extension. That should solve all your problems. I would suggest downloading AVG but you already have anti virus software. Good luck! And never download anything that pops up...ever.


Posted Via ATS Mobile: m.abovetopsecret.com

reply to post by Ibanezman


Same thing happened to me a week ago

here's what to do

download Malwarebytes Anti-Malware

turn off computer then turn back on going in to Safemode Networking (press F8)

once you are running on safemode

run Malwarebytes

That should pick it up no probs

You may have to run it a couple of times but it will work