One of the voting sites gives a virus | Announcements | Forum

A A A

Please consider registering
guest

sp_LogInOut Log In sp_Registration Register

Register | Lost password?
Advanced Search

— Forum Scope —




— Match —





— Forum Options —





Minimum search word length is 4 characters - maximum search word length is 84 characters

sp_Feed Topic RSS dirt
One of the voting sites gives a virus
Topic Rating: +1 (1 votes) 
March 6, 2013
12:12 pm
WallyBean
Salida, Colorado
Member
Members
Forum Posts: 128
Member Since:
November 25, 2012
sp_UserOfflineSmall Offline

Opened tabs of all the voting sites at the same time so I am not sure which one kicked it at me but I had one of those windows pop up that warns you have been infected, which is actually the virus and anything you click puts it on.  Probably from an ad on one of the sites.  Just a heads up to be on the lookout, I will wait a few days to vote so it can be found and cleaned up by whichever site is having the issue.  Ran combofix to clean my pc and it gave me

 

Infected copy of c:\windows\system32\wshtcpip.dll was found and disinfected

"The road to hell is paved with good intentions." -unknown
March 6, 2013
1:17 pm
meatbawllz
Owner
Forum Posts: 2475
Member Since:
June 20, 2011
sp_UserOfflineSmall Offline

WallyBean said
Opened tabs of all the voting sites at the same time so I am not sure which one kicked it at me but I had one of those windows pop up that warns you have been infected, which is actually the virus and anything you click puts it on.  Probably from an ad on one of the sites.  Just a heads up to be on the lookout, I will wait a few days to vote so it can be found and cleaned up by whichever site is having the issue.  Ran combofix to clean my pc and it gave me

 

Infected copy of c:\windows\system32\wshtcpip.dll was found and disinfected

 Has anyone else had this issue, or does anyone know which one? So we can remove the link to it on the site? Thanks wally for letting us know!

Founder and owner of VeteranCraft. "He who says he can, and he who says he can't, are both usually right." -Confucious
March 6, 2013
1:42 pm
Emulated
Canada!
Member
Members


Staff Alumni
Forum Posts: 3206
Member Since:
February 1, 2012
sp_UserOfflineSmall Offline

I am going to go ahead and assume that it's an advertisement window on one of the sites, not the site itself. I vote as often as I can remember, and I haven't gotten any virus alerts or strange process trees running in my Task Manager (although I'm not sure if bad programs show up there, to be honest.)

Anthony Hughes

#Vetra
March 6, 2013
1:55 pm
Infectablegamer
Guest
Guests

Yes, I got that notification from my antivirus finding that file and removing it... :/

March 20, 2013
11:32 pm
WallyBean
Salida, Colorado
Member
Members
Forum Posts: 128
Member Since:
November 25, 2012
sp_UserOfflineSmall Offline

Happened again, different virus this time but I believe it came from an ad that loads on the PMC site.  No popup this time but pretty obvious something is wrong when it all starts running like crap suddenly.  Sorry I didn't copy paste the virus cleaned up by combofix this time, assumed it was the same, another windows32 system file attacked.

"The road to hell is paved with good intentions." -unknown
March 21, 2013
9:35 am
meatbawllz
Owner
Forum Posts: 2475
Member Since:
June 20, 2011
sp_UserOfflineSmall Offline

WallyBean said
Happened again, different virus this time but I believe it came from an ad that loads on the PMC site.  No popup this time but pretty obvious something is wrong when it all starts running like crap suddenly.  Sorry I didn't copy paste the virus cleaned up by combofix this time, assumed it was the same, another windows32 system file attacked.

I am going to temporarily remove the link to PMC voting page from our dropdown, and notify PMC. Thanks for the heads up Wally.

Founder and owner of VeteranCraft. "He who says he can, and he who says he can't, are both usually right." -Confucious
March 22, 2013
12:23 pm
sebasgokart
The Interwebs!
Member
Members
Forum Posts: 68
Member Since:
February 12, 2013
sp_UserOfflineSmall Offline
7sp_Permalink sp_Print
+1

"AdBlock" :)

Talented Builder, Architect and Redstoner - Creator of the EpicCraft Handguide to Minecraft Building
Forum Timezone: America/New_York

Most Users Ever Online: 734

Currently Online:
4 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Top Posters:

Emulated: 3206

ryanpitts: 1300

Dalferes: 747

Pherian: 660

Okarim: 594

Member Stats:

Guest Posters: 10

Members: 27647

Moderators: 3

Admins: 2

Forum Stats:

Groups: 8

Forums: 45

Topics: 6229

Posts: 27413

Newest Members: Davsidvah, TerryLok, raizick, Raphaelacask, isosorbide 20mg cost, RobssertMet, LeslieSteld, EneFrort, AnetClado, Qeegooni, JnerSnige, Lesliesak, ChongLog, Richuardkirty, Wujwcoorn, Albertrib, EwnDuede, DavidRep, Histdece, RonnieSpure

Moderators: terrorisly: 424, mudwog: 127, LightWarriorK: 2154

Administrators: meatbawllz: 2475, frelling: 3264