Malware and the new CSB forum

Sean · Post by **Sean** » Mon Feb 21, 2011 12:31 am

The thing is guys, your scanners may well have gotten rid of it...

...and then you went back to Reboot for reinfection!

Lord Jim · Post by **Lord Jim** » Mon Feb 21, 2011 12:33 am

WHATEVER YOU DO, DON'T CLICK ON ANY OF THE LINKS THAT APPEAR ON THE RE-DIRECTED PAGES!!!!

Those are Google Adsense links, which means you'll be putting money into the pocket of the motherfucker who hijacked your search function....

Lord Jim · Post by **Lord Jim** » Mon Feb 21, 2011 12:38 am

The thing is guys, your scanners may well have gotten rid of it...

...and then you went back to Reboot for reinfection

Well, if Re-boot was the source of the infection, all I can tell you is that the procedure I've followed has solved the problem for me....

It's a bitch when you have a website that's been hacked with malware files....

I just went through that with one of my sites, and it's a major pain in the ass....

If you don't get on top of it right away, it will not only turn off anyone who goes there, it will also turn your site in to search engine repellent.

The Hen · Post by **The Hen** » Mon Feb 21, 2011 2:20 am

Sean wrote:The thing is guys, your scanners may well have gotten rid of it...

...and then you went back to Reboot for reinfection!

I think that is the case.

I told Gob this morning about the alert that the Hatch's new anti-virus picked up when I tried to open the New CSB site. He wasn't worried and opened it on our puter.

I reckon we now have to disinfect again.

I will occassionally try to log in to the New site on the Hatch's box. If I come up with that warning, I will be leaving it alone.

I thought it was important enough to get a message to the G immediately. Hopefully he got your email Sean. (God knows WHY it was so difficult to get one through though. You'd think it was me that was being malicious.)

Sean · Post by **Sean** » Mon Feb 21, 2011 2:30 am

Well some believed that you were trying to bring the CSB to it's knees Hen...

Lord Jim · Post by **Lord Jim** » Mon Feb 21, 2011 2:31 am

Sean wrote:The thing is guys, your scanners may well have gotten rid of it...

...and then you went back to Reboot for reinfection!

I think that is the case.

Not necessarily....

If you haven't gotten the underlying virus totally removed, re-infection isn't necessary....

Lord Jim · Post by **Lord Jim** » Mon Feb 21, 2011 2:33 am

To be honest, I strongly doubt that Re-boot is the source for this, (apparently it's all over the web now) or you'd expect that more folks than just you and I who have been to the site would have been infected with it....

Sean · Post by **Sean** » Mon Feb 21, 2011 2:35 am

Not necessarily....

If you haven't gotten the underlying virus totally removed, re-infection isn't necessary....

True... in which case I recommend Symantec as a cure. It's what I have on my work machine (the corporate version) and I have experienced no malware problems. I've just checked the logs (I do a daily scan) and it's been obliterating the little fucker before I even get to know it's there!

Gob · Post by **Gob** » Mon Feb 21, 2011 3:14 am

Solution to Fight the Malware

The good news is that you can solve this issue in just quick minutes and without difficulty. You can manually remove the malware by following these steps:

1. Go to your Control Panel and unhide devices under your hardware device manager.

2. Look for "TDSSserv.sys". Right click it and disable. Remember DO NOT uninstall it or else the malware will reappear once the computer has restarted.

3. After disabling it, you reboot your computer.

4. Update your antivirus software as quickly as possible once your computer has restarted.

Read more: http://www.articlesbase.com/security-ar ... z1EYkjssZR
Under Creative Commons License: Attribution

loCAtek · Post by **loCAtek** » Mon Feb 21, 2011 4:32 am

Then I misunderstood you Hen, thought you didn't want my assistance, anymore? FYI You're free to ask it anytime.

quaddriver · Post by **quaddriver** » Mon Feb 21, 2011 4:51 am

Lord Jim wrote: I have AVG,)

We interrupt this post for an important public message.

Highlighted above is part of the problem. I am currently on a team investigating AVG and various updates it takes in automatically since it exists in the open source world.

If you also have limewire you are fucked. About 5-6weeks ago I was in a position to monitor its transmission traffic amongst a number of machines. today i got a stream of about 4 hours to 3-4 sporadic inbound connections to a slave computer, from or because of CSB2

Thus far there are only 2 surefire cures for what you are experiencing.

1) run linux. I recommend ubuntu 10.4 If you can implant onto ubuntu from FF via this website, I guarantee you a GS14 in cyber by the end of the week.

2) run norton internet 2010/2011, reload SP3 if on XP, migrate to ie8, disable all search engine uploads, get bing off the damn computer, dont use google chrome and disable pretty much ALL addons for explorer. then create a non-admin account for surfing. (ie6 is the only GAO/NIST/TIGTA approved browser, but it only works if you pay Mr Gates $2Gs for a special verison of XPpro, and then again you have to wear a badge to get it.

And of course, do not install AVG.

you may now return to hatred.

loCAtek · Post by **loCAtek** » Mon Feb 21, 2011 5:24 am

Oh yea, that's what I got: Norton.

Gob · Post by **Gob** » Mon Feb 21, 2011 5:48 am

quaddriver wrote: I am currently on a team investigating AVG and various updates it takes in automatically since it exists in the open source world.

AVG is not open source.

Oh, and Norton is shit...

loCAtek · Post by **loCAtek** » Mon Feb 21, 2011 5:57 am

Well, I've no malware

Sean · Post by **Sean** » Mon Feb 21, 2011 6:03 am

Indeed Strop...

AVG

You might want to tell that team to sit tight for a while Quad...

BTW Is that what the Dept of the Treasury does these days?

quaddriver · Post by **quaddriver** » Mon Feb 21, 2011 6:56 am

Gob wrote:
quaddriver wrote: I am currently on a team investigating AVG and various updates it takes in automatically since it exists in the open source world.

AVG is not open source.

Oh, and Norton is shit...

yessir, it is. you can pay for it if you want, or request the modules for your own development.

If you think norton is shit, Ill give you a couple IPs and if you can get anything but a banner of my choosing, name your price.

quaddriver · Post by **quaddriver** » Mon Feb 21, 2011 7:08 am

Sean wrote:Indeed Strop...

AVG

You might want to tell that team to sit tight for a while Quad...

BTW Is that what the Dept of the Treasury does these days?

it is what security does. the first word in the name of my section is 'security'. hmmm. aside from what various malcontents say in posts, what do you REALLY think I do each day that allows me such impunity in cyberspace? the real world sean. not the fantasy one yinz have spawned. of course my advice is free. you can listen or not. but if I tell you what software you should run and what you shouldnt, you really oughta listen....or not, I dont care.

Lord Jim · Post by **Lord Jim** » Mon Feb 21, 2011 7:49 am

Quad is quite correct when he say "his boss" is Tim Geithner....

To exactly the same degree as a PFC has Bob Gates for a "Boss"....

Sean · Post by **Sean** » Mon Feb 21, 2011 9:26 am

quaddriver wrote:
Sean wrote:Indeed Strop...

AVG

You might want to tell that team to sit tight for a while Quad...

BTW Is that what the Dept of the Treasury does these days?
it is what security does. the first word in the name of my section is 'security'. hmmm. aside from what various malcontents say in posts, what do you REALLY think I do each day that allows me such impunity in cyberspace? the real world sean. not the fantasy one yinz have spawned. of course my advice is free. you can listen or not. but if I tell you what software you should run and what you shouldnt, you really oughta listen....or not, I dont care.

Fuck me! Remind me not to ask you a civilised question again...

Lord Jim · Post by **Lord Jim** » Mon Feb 21, 2011 9:39 am

I'm sorry, I can't resist this....The content of Quad's last post put me in mind of a B Sci-fi film...

what do you REALLY think I do each day that allows me such impunity in cyberspace?

the real world sean. not the fantasy one yinz have spawned.

You mean Quad is from The Planet Yinz?!

Yes, You Pat Nixon look-alike...That's exactly what I mean...

Plan B Forum

Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum

Re: Malware and the new CSB forum