Forum Home
Press F1
 
Thread ID: 81806 2007-08-07 23:59:00 IS THIS SPYWARE/NASTY? denisegun (9804) Press F1
Post ID Timestamp Content User
577955 2007-08-08 01:03:00 Today when I typed in a web address the window showed up (supposedly) as Microsoft alerting me to hidden porn files all would be well if I downloaded some sort of Cleanup program.

Supposedly is right. Its been hijacked.

All spyware is nasty, even just the annoying but not necessarily dangerous ad type stuff.

And the download will of course want yoour credit card for payment (before or after the scan), which will of course find 1000's of bogus problems.

Which is not to say you don't have problems, you have one spyware, then you have many.

Download Spybot, AdAware SE Personal and Hijackthis.
pctek (84)
577956 2007-08-08 01:04:00 Nothing wrong with 'howstuffworks' as far as I'm concerned. Also been visiting there for a long time.

Incidently, the Brazillian connection is just a Spanish language version of the the site. The main site is based in Atlanta:
www.howstuffworks.com

hsw.uol.com.br

Er, or rather Portuguese version
Terry Porritt (14)
577957 2007-08-08 01:09:00 From another ISP using a different DNS to translate the address to an IP address I could possibly go somewhere else.
Well I suppose it's possible but very unlikely
bevy121 (117)
577958 2007-08-08 01:16:00 PaulD,u did not read my post properly.
I used a linux bootable CD to check out the site I am not infected.I also doubt the origonal poster is infected as they did not click on "things"

I was responding to the other posters that assumed that denisegun had been hijacked. For that to be valid you would have had to have been as well.

The real site appears to be served locally from Akamai
PaulD (232)
577959 2007-08-08 01:50:00 All this is all very well but,the Brazillian site said I had a heap of registry problems when I do not have a registry.
Could someone please tell denisegun what they should do assuming they could have a problem.The initial problem seems to have been ignored.
kjaada (253)
577960 2007-08-08 02:06:00 Once again - Start with the hijackthis suggestion- then people can see what is there, if anything and make a recommendation from there bevy121 (117)
577961 2007-08-08 02:18:00 Whether or not denisegun has been hijacked why did kjaada also end up on the wrong site using a linux cd? Assuming that it is the wrong site and not rogue ads being served up from the real site.

kjaada did you compare the web page you got with the real site or was it something obviously different? You can use the Google cache if you still end up with a Brazillian outfit trying it directly.
PaulD (232)
577962 2007-08-08 02:22:00 Thanks everyone, Did what Kajaada suggested and downloaded and ran Hijackthis and nothing came up. I do have Spyware and AVG so I guess they were all working. I did spyware check as soon as it happened. Lucky I didn't click on anything - just closed the window. Thanks again. denisegun (9804)
577963 2007-08-08 02:24:00 Sorry bout that and I should have said.
I used the URL that denisegun posted in her post.
So of course I went to the same site.
kjaada (253)
577964 2007-08-08 02:53:00 I used the URL that denisegun posted in her post also - I never went to brazil or had any message saying "I had a heap of registry problems" or anything else like that - The site I got to and still get is the correct howstuffworks site
.


downloaded and ran Hijackthis and nothing came up

Nothing came up?
you should have a log, which - unless you are experienced in diagnosing HJT logs - wouldnt be at all easy to know if there was anything undesireable there or not - you would need to POST the log and have someone like Speedy to give the "all clear" or not
bevy121 (117)
1 2 3 4 5 6