Forum Home
Press F1
 
Thread ID: 81806 2007-08-07 23:59:00 IS THIS SPYWARE/NASTY? denisegun (9804) Press F1
Post ID Timestamp Content User
577945 2007-08-07 23:59:00 Today when I typed in a web address www.howstuffworks.com the window showed up (supposedly) as Microsoft alerting me to hidden porn files which may be lurking in my computer and all would be well if I downloaded some sort of Cleanup program. etc. I know for a fact that my computer is squeaky and a friend mentioned to me a couple of days ago that they had the same thing. Is this a scam? I closed the window and did nothing by the way. denisegun (9804)
577946 2007-08-08 00:18:00 It looks fishy.I tried it using a linux CD OS and it is a Brazillian outfit.After looking around I got a popup saying my puter could have a registry problem and would I like to scan for errors I said no but it went ahead and found 180 errors which was really good since I was running from a CD and linux does not have a registry. kjaada (253)
577947 2007-08-08 00:46:00 Yup, you're infected with some kind of trojan/spyware/virus. Run the usual checks, eg Hijackthis, Adaware, Spybot, and your anti-virus app. And of course ensure your firewall is enabled at all times. Greg (193)
577948 2007-08-08 00:47:00 Definately DO NOT click the "download to clean up" link!
Your best bet is to download Hijackthis (www.trendsecure.com),run a scan with it and paste the resulting log here and someone will be able to tell you if there is anything lurking in your comp.
bevy121 (117)
577949 2007-08-08 00:48:00 ha!! you beat me to it Greg! :) bevy121 (117)
577950 2007-08-08 00:49:00 It comes up with the genuine site from Xtra. If you used the link as typed in your post and got something different your ISP's DNS could be pointing at the wrong place for some reason.

Edit: Both denisegun and kjaada infected???
PaulD (232)
577951 2007-08-08 00:56:00 It comes up with the genuine site from Xtra. If you used the link as typed in your post and got something different your ISP's DNS could be pointing at the wrong place for some reason.

Edit: Both denisegun and kjaada infected???
See my post above THIS IS A NASTY SITE if extra say it is ok something is very wrong.
It is in Brazil.
kjaada (253)
577952 2007-08-08 00:56:00 It comes up with the genuine site from Xtra

Dont quite understand your answer there Paul?
"howstuffworks.com" has nothing to do with xtra?
bevy121 (117)
577953 2007-08-08 01:01:00 Using Xtra from my connection I get the genuine "Howstuffworks" site. From another ISP using a different DNS to translate the address to an IP address I could possibly go somewhere else.


kjaada does the site you get look like the Google cache of Howstuffworks or not?
PaulD (232)
577954 2007-08-08 01:01:00 PaulD,u did not read my post properly.
I used a linux bootable CD to check out the site I am not infected.I also doubt the origonal poster is infected as they did not click on "things"
kjaada (253)
1 2 3 4 5 6