Virus Issue

Wile E · Feb 12, 2010

Don't reformat. That's asinine. If your virus scanners recognized it, and it's still clean after a reboot, you should be fine.

TheMailMan78 · Feb 12, 2010

Wile E said:
Don't reformat. That's asinine. If your virus scanners recognized it, and it's still clean after a reboot, you should be fine.

OCD is a hellava disorder.

Nick89 · Feb 12, 2010

From what I can tell its a brand new virus thats just been released. Here is some info I found:

TrojanClicker:JS/Iframe.F

Encyclopedia entry
Updated: Feb 11, 2010 | Published: Feb 11, 2010

Aliases
HTML/Inor (AhnLab)
Trojan-Downloader.JS.Inor.a (Kaspersky)
JS.Psyme.AX (VirusBuster)
HTML/Framer.CP (AVG)
HEUR/HTML.Malware (Avira)
Trojan.Script.252764 (BitDefender)
VBS.Psyme.377 (Dr.Web)
Trojan-Downloader.JS.Psyme (Ikarus)
JS/Wonka (McAfee)
Mal/ObfJS-H (Sophos)

TheMailMan78 · Feb 12, 2010

Nick89 said:
From what I can tell its a brand new virus thats just been released. Here is some info I found:

TrojanClicker:JS/Iframe.F

Encyclopedia entry
Updated: Feb 11, 2010 | Published: Feb 11, 2010

Aliases
HTML/Inor (AhnLab)
Trojan-Downloader.JS.Inor.a (Kaspersky)
JS.Psyme.AX (VirusBuster)
HTML/Framer.CP (AVG)
HEUR/HTML.Malware (Avira)
Trojan.Script.252764 (BitDefender)
VBS.Psyme.377 (Dr.Web)
Trojan-Downloader.JS.Psyme (Ikarus)
JS/Wonka (McAfee)
Mal/ObfJS-H (Sophos)

Any idea WTF is does EXACTLY?

Nick89 · Feb 12, 2010

TheMailMan78 said:
Any idea WTF is does EXACTLY?

Symptoms

Network behavior

The following network behavior may indicate the presence of this malware:

*
Your browser is redirected to visit any of the following domains:
youdetoxtest.net
ad.103092804.com
*
There may be no common symptoms associated with this threat - links are activated within IFrames while viewing Web content on maliciously modified pages. Alert notifications from installed antivirus software may be the only symptom(s).

Technical Information (Analysis)

TrojanClicker:JS/Iframe.F is a detection for specially-formed obfuscated IFrame tags, which point to remote Web sites containing adware or unwanted content. It requires that the user view the Web site or open the HTML page in which it is located before it can perform its malicious actions.

about all I could find.

TheMailMan78 · Feb 12, 2010

Nick89 said:
Symptoms

Network behavior

The following network behavior may indicate the presence of this malware:

*
Your browser is redirected to visit any of the following domains:
youdetoxtest.net
ad.103092804.com
*
There may be no common symptoms associated with this threat - links are activated within IFrames while viewing Web content on maliciously modified pages. Alert notifications from installed antivirus software may be the only symptom(s).

Technical Information (Analysis)

TrojanClicker:JS/Iframe.F is a detection for specially-formed obfuscated IFrame tags, which point to remote Web sites containing adware or unwanted content. It requires that the user view the Web site or open the HTML page in which it is located before it can perform its malicious actions.

I see. So if I had clicked on the "pop-up" it would have taken me to a site and thats were the real fun would have began. That sounds like what Viper said. Basically this trojan is a cookie that redirects you constantly to bad shit. Am I correct?

Nick89 · Feb 12, 2010

TheMailMan78 said:
I see. So if I had clicked on the "pop-up" it would have taken me to a site and thats were the real fun would have began. That sounds like what Viper said. Basically this trojan is a cookie that redirects you constantly to bad shit. Am I correct?

You got it down.

TheMailMan78 · Feb 12, 2010

Nick89 said:
You got it down.

So there is not really of a chance this thing highjacked any personal info. Passwords and such.

Wile E · Feb 12, 2010

Sound like an annoyance, like most trojans.

Nick89 · Feb 12, 2010

TheMailMan78 said:
So there is not really of a chance this thing highjacked any personal info. Passwords and such.

Thats very rare mailman, I would only worry if you clicked the pop up and then continued using the computer for months.

TheMailMan78 · Feb 13, 2010

Nick89 said:
Thats very rare mailman, I would only worry if you clicked the pop up and then continued using the computer for months.

Thanks Nick. Im not formatting. Im going OCD on my OCD this time. :laugh:

However I will be watching this thing like a hawk.

95Viper · Feb 13, 2010

Just for TheMailMan78...Special delivery!

Just joking...Click Burn Dammit.

You are 99.2% safe.

I know, I'll just :slap:

myself.

TheMailMan78 · Feb 14, 2010

I was just on shack news and it took me to this. Of course I didnt click anything. Just closed the windows but DAMN IT! WTF is going on?!

Goodman · Feb 14, 2010

TheMailMan78 said:
I was just on shack news and it took me to this. Of course I didnt click anything. Just closed the windows but DAMN IT! WTF is going on?!

That is False Positive...pretty sure of it you're running Win7 & it shows you a WinXP windows... :rolleyes:

But if you want to make sure try SuperAntiSpyware
http://www.superantispyware.com/

But If you're to paranoid about it or want to make 100% sure that it's clean then delete MBR & reinstall...

TheMailMan78 · Feb 14, 2010

Goodman said:
That is False Positive...pretty sure of it you're running Win7 & it shows you a WinXP windows...

But if you want to make sure try SuperAntiSpyware
http://www.superantispyware.com/

But If you're to paranoid about it or want to make 100% sure that it's clean then delete MBR & reinstall...

Um yeah I know dude. Its a fishing site. My point was is that I seem to be a target for "cyber attacks" lately.

Clement · Feb 15, 2010

TheMailMan78 said:
Um yeah I know dude. Its a fishing site. My point was is that I seem to be a target for "cyber attacks" lately.

Well, now you know where your enemy lays, or at least a latent by-product. Maybe you could sniff a trail and take the battle to them

.

YautjaLord · Feb 15, 2010

Tell me if it helps, i handle Trojans & s**t like this : i had the pleasure to get both by pluging in the USB mass storage devices - once it was Lumix (a video/stills camera & Vista calls it mass storage, wtf ?

) & yesterday evening the external harddrive. With Lumix i was greated with raidhost.exe (i wondered then - "WTF? I don't have any RAID setup, just single HDD !!!!" :laugh:

) & today it was herss.exe. The cure ? RegScanner. The only prob you'll have is once [the] RegScanner detects it, you have to manually search & delete the values in RegEdit. The f***ers most likely sit in HKCU/HKLM/HKU/etc..... roots. Hope it helps.

Goodman · Feb 15, 2010

What happen?
How come TheMailMan78 got banned :confused:

Must be in another thread... :ohwell:

eidairaman1 · Feb 16, 2010

blkhogan said:
I would do a complete shutdown. Then cold boot it. There have been some reports of "reset files" or what ever they call em. They are files that sit dormate and are only triggered @ Windows startup. I didnt see any proof of that when I was dealing with .dq version.

I would also clear out any system restore files after the ordeal as some virus do infect those files.

System Name	The ClusterF**k
Processor	980X @ 4Ghz
Motherboard	Gigabyte GA-EX58-UD5 BIOS F12
Cooling	MCR-320, DDC-1 pump w/Bitspower res top (1/2" fittings), Koolance CPU-360
Memory	3x2GB Mushkin Redlines 1600Mhz 6-8-6-24 1T
Video Card(s)	Evga GTX 580
Storage	Corsair Neutron GTX 240GB, 2xSeagate 320GB RAID0; 2xSeagate 3TB; 2xSamsung 2TB; Samsung 1.5TB
Display(s)	HP LP2475w 24" 1920x1200 IPS
Case	Technofront Bench Station
Audio Device(s)	Auzentech X-Fi Forte into Onkyo SR606 and Polk TSi200's + RM6750
Power Supply	ENERMAX Galaxy EVO EGX1250EWT 1250W
Software	Win7 Ultimate N x64, OSX 10.8.4

System Name	TheMailbox 5.0 / The Mailbox 4.5
Processor	RYZEN 1700X / Intel i7 2600k @ 4.2GHz
Motherboard	Fatal1ty X370 Gaming K4 / Gigabyte Z77X-UP5 TH Intel LGA 1155
Cooling	MasterLiquid PRO 280 / Scythe Katana 4
Memory	ADATA RGB 16GB DDR4 2666 16-16-16-39 / G.SKILL Sniper Series 16GB DDR3 1866: 9-9-9-24
Video Card(s)	MSI 1080 "Duke" with 8Gb of RAM. Boost Clock 1847 MHz / ASUS 780ti
Storage	256Gb M4 SSD / 128Gb Agelity 4 SSD , 500Gb WD (7200)
Display(s)	LG 29" Class 21:9 UltraWide® IPS LED Monitor 2560 x 1080 / Dell 27"
Case	Cooler Master MASTERBOX 5t / Cooler Master 922 HAF
Audio Device(s)	Realtek ALC1220 Audio Codec / SupremeFX X-Fi with Bose Companion 2 speakers.
Power Supply	Seasonic FOCUS Plus Series SSR-750PX 750W Platinum / SeaSonic X Series X650 Gold
Mouse	SteelSeries Sensei (RAW) / Logitech G5
Keyboard	Razer BlackWidow / Logitech (Unknown)
Software	Windows 10 Pro (64-bit)
Benchmark Scores	Benching is for bitches.

System Name	9th Level
Processor	AMD Ryzen 5 5600X
Motherboard	MSI X570 Carbon wifi
Cooling	EK Basic 360, x2 250mm, x1 140mm, x1 120mm fans.
Memory	32GB Corsair Vengeance 3200mhz.
Video Card(s)	EVGA RTX 3080 12GB FTW3
Storage	500gb ssd, 2tb ssd, 6tb HD.
Display(s)	MSI 27" Curved 1440p@165hz
Case	HAF 932
Power Supply	Corsair HX850W
Software	Windows 10 64bit

System Name	TheMailbox 5.0 / The Mailbox 4.5
Processor	RYZEN 1700X / Intel i7 2600k @ 4.2GHz
Motherboard	Fatal1ty X370 Gaming K4 / Gigabyte Z77X-UP5 TH Intel LGA 1155
Cooling	MasterLiquid PRO 280 / Scythe Katana 4
Memory	ADATA RGB 16GB DDR4 2666 16-16-16-39 / G.SKILL Sniper Series 16GB DDR3 1866: 9-9-9-24
Video Card(s)	MSI 1080 "Duke" with 8Gb of RAM. Boost Clock 1847 MHz / ASUS 780ti
Storage	256Gb M4 SSD / 128Gb Agelity 4 SSD , 500Gb WD (7200)
Display(s)	LG 29" Class 21:9 UltraWide® IPS LED Monitor 2560 x 1080 / Dell 27"
Case	Cooler Master MASTERBOX 5t / Cooler Master 922 HAF
Audio Device(s)	Realtek ALC1220 Audio Codec / SupremeFX X-Fi with Bose Companion 2 speakers.
Power Supply	Seasonic FOCUS Plus Series SSR-750PX 750W Platinum / SeaSonic X Series X650 Gold
Mouse	SteelSeries Sensei (RAW) / Logitech G5
Keyboard	Razer BlackWidow / Logitech (Unknown)
Software	Windows 10 Pro (64-bit)
Benchmark Scores	Benching is for bitches.

System Name	9th Level
Processor	AMD Ryzen 5 5600X
Motherboard	MSI X570 Carbon wifi
Cooling	EK Basic 360, x2 250mm, x1 140mm, x1 120mm fans.
Memory	32GB Corsair Vengeance 3200mhz.
Video Card(s)	EVGA RTX 3080 12GB FTW3
Storage	500gb ssd, 2tb ssd, 6tb HD.
Display(s)	MSI 27" Curved 1440p@165hz
Case	HAF 932
Power Supply	Corsair HX850W
Software	Windows 10 64bit

Virus Issue

Wile E

Power User

TheMailMan78

Big Member

Nick89

TheMailMan78

Big Member

Nick89

TheMailMan78

Big Member

Nick89

TheMailMan78

Big Member

Wile E

Power User

Nick89

TheMailMan78

Big Member

95Viper

Super Moderator

TheMailMan78

Big Member

Attachments

Goodman

TheMailMan78

Big Member

Clement

New Member

YautjaLord

Goodman

eidairaman1

The Exiled Airman

System Name	Main PC
Processor	PII 925 x4 @3.724GHz (266x14) 1.525v NB 2660 1.425v
Motherboard	Gigabyte AM3 GA-890XA-UD3 (790x+SB850)
Cooling	Scythe Mugen 2 rev.B
Memory	Hyperx 8GB (2x4) 1600@1418 8-7-7-20-27-1t
Video Card(s)	GTX 680
Storage	256GB SSD / 2TB HDD
Display(s)	LCD Samsung 24" 16:9
Case	Cooler Master HAF 912
Audio Device(s)	On-Board HD
Power Supply	CM 750w GX \|3.3v@25a\|5v@25a\|12v@60a
Software	Kubuntu dual boot /Windows 7 Ultimate 64bit
Benchmark Scores	later...

System Name	Work Horse
Processor	E5200@3.000@1.2 (12.5x240) (Limited by mobo mem volts) ::[Evil Glare]-I'm gonna mod you!::
Motherboard	4COREDUAL-SATA2 R2
Cooling	AC Freezer Pro 7; AC Accelero S1 <-These two are bad ass!
Memory	(2gb G.Skill F2-8500-CL5D-2GBPK) @ 1.9v/320MHz/3:4/4-4-4-10-16-2T
Video Card(s)	X1950GT 621/729 (Will do more)
Storage	Seagate 320; 2x1TB WD
Display(s)	ViewSonic 19" Widescreen
Case	Black, Sturdy.
Audio Device(s)	Onboard DAC works great.
Power Supply	Enermax EG365P-VE
Software	Fedora x64; WinXP32
Benchmark Scores	Once, I programmed for a little over 22.5 hours straight.

System Name	PCGOD
Processor	AMD FX 8350@ 5.0GHz
Motherboard	Asus TUF 990FX Sabertooth R2 2901 Bios
Cooling	Scythe Ashura, 2×BitFenix 230mm Spectre Pro LED (Blue,Green), 2x BitFenix 140mm Spectre Pro LED
Memory	16 GB Gskill Ripjaws X 2133 (2400 OC, 10-10-12-20-20, 1T, 1.65V)
Video Card(s)	AMD Radeon 290 Sapphire Vapor-X
Storage	Samsung 840 Pro 256GB, WD Velociraptor 1TB
Display(s)	NEC Multisync LCD 1700V (Display Port Adapter)
Case	AeroCool Xpredator Evil Blue Edition
Audio Device(s)	Creative Labs Sound Blaster ZxR
Power Supply	Seasonic 1250 XM2 Series (XP3)
Mouse	Roccat Kone XTD
Keyboard	Roccat Ryos MK Pro
Software	Windows 7 Pro 64

System Name	YautjaLord
Processor	Ryzen 9 5900x @ 3700MHz
Motherboard	Gigabyte X570 Aorus Xtreme rev. 1.1
Cooling	EK-XE360mm front/SE360mm top/3xVardar 120mm top/3xbe quiet! Light Wings 120mm High Speed PWM/etc....
Memory	HyperX Predator 4x8GB 4000MHz @ 4000MHz
Video Card(s)	1xGigabyte RTX 3080 Master 10GB rev. 3.0 (watercooled)
Storage	Samsung 980 Pro 1TB (system)/Samsung 960 Pro M.2 NVMe (system) \|Samsung T7 Shield 1TB USB Type-C
Display(s)	LG 27GN950-B 4k IPS 1ms 144Hz HDR
Case	be quiet! Dark Base Pro 900 rev. 2 Black/Orange
Audio Device(s)	Integrated
Power Supply	Corsair HX1200
Mouse	Dragonwar ELE-G4.1 laser gaming mouse 9500dpi
Keyboard	Corsair K60 Pro Low Profile
Software	Windows 10 Pro 64-bit 21H2