Rec'd a Virus Warning while accessing the forum

rockin7e

Well-known member
I am using avast virus protection and just now rec'd the message that it blocked the following from infecting my computer.......

And why, when I log out of the forum it doesn't keep me logged out??? I log out and come back hours later or the next day and I am already logged in?? Never had these kind of issues with the old forum....

Infection Details



URL:

http://blinginghushed.biz/mysql/radmind/...



Process:

C:\Program Files (x86)\Internet Explorer...



Infection:

JS:Pdfka-gen@bhv [Expl]
 
Passed the information on to Ken. I'm not getting any kind of warning.
That's odd that you can't stay logged out and I can't stay logged in! I'm sure he will have an answer for you.
 
rockin7e - did you run an online scan to determine if your comp is clean? Little things like staying logged in when you know you logged out {and cleared temp files/cookies to boot!} or windows forcing themselves to be on top, or a myriad of other odd behaviors *can* indicate an infection.

I ask because mine caught something, and I assumed it was dealt with, when it actually wasn't.

My infection was for;

Trojan:Win32/Sirefef!cfg
Trojan:Win32/Sirefef.AE

which is known as Zeroaccess or Zero Access and took me almost 2 days at g4 to get rid of:

http://www.sweepsadvantage.com/foru...jan-Win32-Sirefef!cfg-Trojan-Win32-Sirefef-AE

I highly recommend g4 - they will walk you through it all step by step!

Read & follow this before posting:

http://forums.g4tv.com/showthread.p...kthis-Instructions-What-To-Do-Before-You-Post
 
my computer is clean... the warning said the page I was trying to access was infected (which was when I was trying to access my inbox for a private message) just before the virus warning came up ... a box with a message stating that this page required java to run?? I uninstalled java several days ago after learning java could easily be hacked...at this point in time I have no idea??? Yes I have done online scans......
 
OK, just had the thought and would have kicked myself if I didn't say something!

Malwarebytes has been blocking for me too, but with so many windows open, all I know for sure, is that it's thru IE, not FF.
 
Oh yeah - tip I just picked up from that thread I linked - IFRAME is probably the issue:


Viruses or other malware get embedded in to webpages through iFrame exploits commonly, or through vulnerable plugin exploitation. For iFrame exploits, malware authors can create a small (1x1px) iFrame, which contains scripts necessary to run malware on a target machine by automatically downloading and installing malware. The vulnerable plugin problem happens when people fail to update Adobe Reader, Adobe Flash Player, Java Runtime Environment, Apple QuickTime, Mozilla Firefox, etc. Many times, malware authors use these vulnerable versions of the plugins to distribute an exploit, which can allow them to take control of a computer.

He told me how to protect:

Here are some tips to reduce the potential for spyware infection in the future:
1. Make your Internet Explorer more secure - This can be done by following these simple instructions:

From within Internet Explorer click on the Tools menu and then click on Options.
Click once on the Security tab
Click once on the Internet icon so it becomes highlighted.
Click once on the Custom Level button.
Change the Download signed ActiveX controls to Prompt
Change the Download unsigned ActiveX controls to Disable
Change the Initialize and script ActiveX controls not marked as safe to Disable
Change the Installation of desktop items to Prompt
Change the Launching programs and files in an IFRAME to Prompt
Change the Navigate sub-frames across different domains to Prompt
When all these settings have been made, click on the OK button.
If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.
 
Back
Top