|
ddt
Dec 13, 2008, 9:07 PM
Post #1 of 42
(12698 views)
Shortcut
Registered: May 21, 2005
Posts: 2304
|
Hi everyone,
Looks like there is a security problem with one of the banner ads running on Rockclimbing.com. Some users have reported an anti-virus/malware warning when viewing certain pages on the site.
We're looking into the problem as a matter of urgency and will keep you posted as we resolve this as soon as possible.
DDT
(This post was edited by ddt on Dec 13, 2008, 10:58 PM)
|
|
|
|
|
limeydave
Dec 13, 2008, 9:27 PM
Post #2 of 42
(12665 views)
Shortcut
Registered: Nov 23, 2006
Posts: 2453
|
I got that virus this morning - took me a couple of hours to clean it up after an AVG update killed my machine and put me in a permanent reboot.
If anyone gets it, google is your friend, you just need to stop the process running and delete the .url files associated with the malware.
Ugh.
Thanks DDT for cleaning up.
|
|
|
|
|
blondgecko
Moderator
Dec 13, 2008, 9:58 PM
Post #3 of 42
(12633 views)
Shortcut
Registered: Jul 2, 2004
Posts: 7666
|
Yeah, I picked it up too.
This appears to have worked for me in getting rid of it.
|
|
|
|
|
jt512
Dec 13, 2008, 10:03 PM
Post #4 of 42
(12625 views)
Shortcut
Registered: Apr 12, 2001
Posts: 21904
|
Windows is such an adorable little operating system.
Jay
|
|
|
|
|
cfal
Dec 13, 2008, 10:24 PM
Post #5 of 42
(12596 views)
Shortcut
Registered: Jun 25, 2007
Posts: 9
|
Hey so this is where I got that. I spent a few hours dealing with the virus. "Extra antivir" apparently is a fake antivirus software that tells you you have all sorts of trojans and worms, and to remove them, you need to buy the full version. It's very well written, and makes some registry changes that makes it look like windows is telling you to upgrade to the full version. Uses blue screen of death and the windows startup page to pretend it resets. I was very impressed. Nothing seemed to be able to get rid of it, but this http://www.besttechie.net/.../12/03/zlob-removal/ worked wonders with a full scan.
good luck if you got it.
-cfal
|
|
|
|
|
ddt
Dec 13, 2008, 10:25 PM
Post #6 of 42
(12595 views)
Shortcut
Registered: May 21, 2005
Posts: 2304
|
Please note that we have temporarily disabled ads for all users till we resolve this issue.
Thanks,
DDT
|
|
|
|
|
Valarc
Dec 13, 2008, 10:42 PM
Post #7 of 42
(12573 views)
Shortcut
Registered: Apr 20, 2007
Posts: 1473
|
jt512 wrote: Windows is such an adorable little operating system. Jay
indeed.
Although, to be fair, if I were on windows I still doubt I would have been infected with this either. Still, a big ha-ha to those who still use that POS OS.
|
|
|
|
|
axelvanettinger
Dec 13, 2008, 10:45 PM
Post #8 of 42
(12571 views)
Shortcut
Registered: Jun 2, 2005
Posts: 71
|
OR you just don't accept stupid pop-up spam... to prevent is better than repair...
|
|
|
|
|
ddt
Dec 13, 2008, 10:57 PM
Post #9 of 42
(12557 views)
Shortcut
Registered: May 21, 2005
Posts: 2304
|
With the (temporary) removal of all ads, RC.com is once again safe to use. 
|
|
|
|
|
blondgecko
Moderator
Dec 13, 2008, 10:58 PM
Post #10 of 42
(12554 views)
Shortcut
Registered: Jul 2, 2004
Posts: 7666
|
It comes in through a vulnerability in Adobe Acrobat and/or Reader. A patch is available.
|
|
|
|
|
kovacs69
Dec 14, 2008, 12:10 AM
Post #11 of 42
(12507 views)
Shortcut
Registered: Jun 16, 2005
Posts: 607
|
If you were running rc.com Tweaks I believe it didn't affect you because there are no ads when you run tweaks. If I am wrong them let me know.
jb
|
|
|
|
|
j_ung
Dec 14, 2008, 12:14 AM
Post #12 of 42
(12502 views)
Shortcut
Registered: Nov 21, 2003
Posts: 18690
|
Well, that wasn't a good day at all. Thanks guys for the tips on cleaning machines.
Edit: Scratch that. Looks like ads -- minus the evil ones -- will be back on tomorrow. I'll be online most of the day watching.
(This post was edited by j_ung on Dec 14, 2008, 2:52 AM)
|
|
|
|
|
j_ung
Dec 14, 2008, 12:14 AM
Post #13 of 42
(12500 views)
Shortcut
Registered: Nov 21, 2003
Posts: 18690
|
kovacs69 wrote: If you were running rc.com Tweaks I believe it didn't affect you because there are no ads when you run tweaks. If I am wrong them let me know. jb
Actually, that's probably true. The way we fixed this was to turn off the ads.
|
|
|
|
|
churningindawake
Dec 14, 2008, 1:30 AM
Post #14 of 42
(12462 views)
Shortcut
Registered: Jul 5, 2007
Posts: 5292
|
Yes. I have the same problem. Tt is called Extra Antivir. It puts sex related icons on your desktop that keep restoring themselves.
|
|
|
|
|
blondgecko
Moderator
Dec 14, 2008, 1:40 AM
Post #15 of 42
(12455 views)
Shortcut
Registered: Jul 2, 2004
Posts: 7666
|
churningindawake wrote: Yes. I have the same problem. Tt is called Extra Antivir. It puts sex related icons on your desktop that keep restoring themselves.
Use one of the two links above to get rid of it, and until you do, ignore any warning messages that pop up. While it doesn't seem to be directly dangerous, it does give you messages flagging essential system files as infected. Delete them and you're screwed.
|
|
|
|
|
tradrenn
Dec 14, 2008, 2:01 AM
Post #16 of 42
(12430 views)
Shortcut
Registered: Jan 16, 2005
Posts: 2990
|
jt512 wrote: Windows is such an adorable little operating system. Jay
Are you using Vista by any chance ?
My Vista doesn't allow me to use Adobe for now, it turned it off.
Other than that I'm good to go and I don't even have any antivirus software installed.
|
|
|
|
|
jt512
Dec 14, 2008, 4:13 AM
Post #17 of 42
(12378 views)
Shortcut
Registered: Apr 12, 2001
Posts: 21904
|
tradrenn wrote: jt512 wrote: Windows is such an adorable little operating system. Jay Are you using Vista by any chance ?
God, no. Linux.
|
|
|
|
|
caleb_danner
Dec 14, 2008, 8:38 AM
Post #19 of 42
(12329 views)
Shortcut
Registered: Nov 18, 2007
Posts: 226
|
go mac/linux we don't have that problem
(This post was edited by caleb_danner on Dec 14, 2008, 8:38 AM)
|
|
|
|
|
caleb_danner
Dec 14, 2008, 8:40 AM
Post #20 of 42
(12324 views)
Shortcut
Registered: Nov 18, 2007
Posts: 226
|
how much would we have to pitch in to not have adds?
i like not having them
|
|
|
|
|
jt512
Dec 14, 2008, 2:31 PM
Post #21 of 42
(12302 views)
Shortcut
Registered: Apr 12, 2001
Posts: 21904
|
caleb_danner wrote: how much would we have to pitch in to not have adds? i like not having them
"Ads" is spelled with one "d," and you don't have to pitch in anything. Get Rc.com Tweaks from userscripts.org (also available from my web site (but it is down through 12/20/08), and/or use Privoxy.
Jay
(This post was edited by jt512 on Dec 14, 2008, 2:32 PM)
|
|
|
|
|
Valarc
Dec 14, 2008, 2:57 PM
Post #22 of 42
(12295 views)
Shortcut
Registered: Apr 20, 2007
Posts: 1473
|
Or alternatively, use the "Adblock" plugin for firefox to remove ads from everything you visit.
I sometimes feel slightly guilty about browsing the web mostly ad-free, but then I see some malware shit like this happen, and I'm reminded why I started using ad blockers in the first place.
Ads have gone from simple banners to animated monstrosities that play sound and spread to cover what you're reading, eat up CPU cycles, and occasionally infect your computer with some nastiness. Do yourself a favor and block them, it saves a lot of headaches.
|
|
|
|
|
churningindawake
Dec 14, 2008, 4:19 PM
Post #23 of 42
(12280 views)
Shortcut
Registered: Jul 5, 2007
Posts: 5292
|
blondgecko wrote: Yeah, I picked it up too. This appears to have worked for me in getting rid of it.
Worked for me as well!
|
|
|
|
|
fitzontherocks
Dec 15, 2008, 2:20 AM
Post #24 of 42
(12125 views)
Shortcut
Registered: Jun 11, 2003
Posts: 864
|
j, are you going to say which ad it was?
|
|
|
|
|
j_ung
Dec 15, 2008, 2:31 AM
Post #25 of 42
(12121 views)
Shortcut
Registered: Nov 21, 2003
Posts: 18690
|
Oh, yeah, I'm sorry. I thought it had been mentioned. It was a Coors Light bit that came in from one of the ad networks.
|
|
|
|
|
|
) 
1
