Virus Alert!! | Page 7 | Forex Factory

Options

Go to
Permalinks
Print Thread

Similar Threads

False Virus alert on AVG for MT4 17 replies

Mt4 virus alert 8 replies

CCI Alert - audio and visual alert 1 reply

False Virus Alert in the MT4 update ! 7 replies

Attachments: Virus Alert!!
Exit Attachments

Virus Alert!!

  • #121
  • Apr 17, 2007 11:50am Apr 17, 2007 11:50am
Or just be on a linux machine... no problems here
Smile... Darwin loves you.
  • #122
  • Apr 17, 2007 11:54am Apr 17, 2007 11:54am
Quoting pablorpl
Hi everyone.

The virus attack to FF this weak is very bad news.

I show how block the conection to the virus trojan in D-link routers.

1. go to the admin center: 192.168.0.1 (login: admin pass
2. go to the advanced item.
3. go to filter (left panel).
4. select url blocking.
5. type: codecsoft
6. click on enabled and apply.

That's all
Good stuff mate, BitDefender also blocked it from even getting close
  • #123
  • Apr 17, 2007 12:00pm Apr 17, 2007 12:00pm
I'm a pc dummy lol but I use firefox most of the time. I couldn't access the factory from time to time but I don't think I picked up a virus. Ran my AVG and also BitDefender & they picked nothing up. I guess I'm OK

Quoting turbokaos
Good stuff mate, BitDefender also blocked it from even getting close
  • #124
  • Apr 17, 2007 12:13pm Apr 17, 2007 12:13pm
Quoting amenlo9
virus??my browser was freezing but never infected by virus
because you are smart enough to not use IE

even if Firefox is not as secured as the foundation is saying, it is far more secured than IE (what's more when a flaw is discovered, it is fixed within 2-3 days versus Microsoft who do not fix 3 years old security flaw )
  • #125
  • Apr 17, 2007 12:25pm Apr 17, 2007 12:25pm
gosh this really sucks, reading about all of you guys being infected wieghs heavy on the heart i just wish i could do something about this, i am sitting here unable to lend any help, its a very frusterating feeling. all we can do now is have faith in the dev team. they built this great site, and i have faith they will be able to defend it as well.

Relax and be happy.
  • #126
  • Apr 17, 2007 12:33pm Apr 17, 2007 12:33pm
Firefox just starts to eat memory and hang with the iframe. I installed the noscript addon after getting tired of manually disabling Javascript to take care of the problem. No scripting, no danger. We wanted the internet to be more "active", well, we got it Noscript is a nice addon for firefox which starts with a deny all approach and then you one by one whitelist trustworthy sites. You can also disable/enable all scripting globally via the icon in the status bar, which is handy. With IE you have to go into options and dig around there for active scripting and activeX, the latter shouldn't ever be enabled anyhow...IE+ActiveX = poison. You can use the same policy logic there via trusted sites. Also you can add that codecsoft net to the hosts file to block the dns entry in the first place or add it to the firewall rules as well...but for non-geeks the disabling of scripting is the fastest way of getting around the problem probably.
Trust price. Know yourself.
  • #127
  • Apr 17, 2007 2:46pm Apr 17, 2007 2:46pm
Do not worry

We will wait until everything is back to normal

I think now virus is removed, because my V protection did not detect it second time
kiss the trend
  • #128
  • Apr 17, 2007 2:50pm Apr 17, 2007 2:50pm


Quoting gpw797
Or just be on a linux machine... no problems here
  • #129
  • Apr 17, 2007 2:52pm Apr 17, 2007 2:52pm
the worst thing about IE is this activeX crap they started to compete with java 10-12 years ago. it doesn't work so nobody in their right mind uses it in production - seen any financial sites use it lately? they all use java applets / shockwave(flash) instead.

Quoting SeekingLight
Firefox just starts to eat memory and hang with the iframe. I installed the noscript addon after getting tired of manually disabling Javascript to take care of the problem. No scripting, no danger. We wanted the internet to be more "active", well, we got it Noscript is a nice addon for firefox which starts with a deny all approach and then you one by one whitelist trustworthy sites. You can also disable/enable all scripting globally via the icon in the status bar, which is handy. With IE you have to go into options and dig around there for active scripting and activeX, the latter shouldn't ever be enabled anyhow...IE+ActiveX = poison. You can use the same policy logic there via trusted sites. Also you can add that codecsoft net to the hosts file to block the dns entry in the first place or add it to the firewall rules as well...but for non-geeks the disabling of scripting is the fastest way of getting around the problem probably.
  • #130
  • Apr 17, 2007 3:34pm Apr 17, 2007 3:34pm
i've ran the report again and also found this info we can investigate:

Beldopryajev Mikhail Sergeevic Golubkova 34-88, Berdyask, FEDERATION 908887, RUSSIAN

as well as:

Nameserver
qw.fucksuckgay.com

DNS admin
[email protected]

as well as this site found on the same netblock owner:

2772668www.ls-sites.bizn/a, Nesakova st. 16-89, Moskow, 211906, Russian FederationJune 2005ApacheFreeBSD

This looks like the organisation responsible for codecsoft. It's site report matches as well. So we have two contact addresses, with the final destination being in Panama.

The netblock owner RBusiness Network is hosting dubious sites - mostly porn and looks like child-porn as well. Should we report these guys to the feds?
  • #131
  • Apr 17, 2007 3:49pm Apr 17, 2007 3:49pm
Just followed a couple of the links and found a site that made my stomach churn.

These people should be burned alive.
No man is smart, except by comparison to those who know less!
  • #132
  • Apr 17, 2007 4:54pm Apr 17, 2007 4:54pm
1. I use NOD32, it withstood the attacks alright.

2. These periodical several hours of FF-lessness showed me how addicted I am to FF...

3. People are asking about a good ***free*** antivirus program. Come on. For the price of a tiny stop-loss, get yourself a decent AV that updates itself several times a day!
sans peur et sans reproche
  • #133
  • Apr 17, 2007 10:21pm Apr 17, 2007 10:21pm
Quoting Isotonic
i've ran the report again and also found this info we can investigate:

Beldopryajev Mikhail Sergeevic Golubkova 34-88, Berdyask, FEDERATION 908887, RUSSIAN

as well as:

Nameserver
qw.fucksuckgay.com

DNS admin
[email protected]

as well as this site found on the same netblock owner:

2772668www.ls-sites.bizn/a, Nesakova st. 16-89, Moskow, 211906, Russian FederationJune 2005ApacheFreeBSD

This looks like the organisation responsible for codecsoft. It's site report matches as well. So we have two contact addresses, with the final destination being in Panama.

The netblock owner RBusiness Network is hosting dubious sites - mostly porn and looks like child-porn as well. Should we report these guys to the feds?
I seriously doubt that this is the originator of the attack (not that he doesn't fit the profile). It could pretty much be another defaced site.
  • #134
  • Edited 12:06am Apr 18, 2007 12:03am | Edited 12:06am
Quoting radyfox
In right corner of my desktop is written:"Your computer is infected! Windows has detected virus infection!". My HD is full of viruses. One of them restart my PC every hour... Now I try to instal bunch of antivirus and antispyware software...
Firstly, please restart your computer in Safe Mode (by repeatedly pressing F8 right before Windows starts) and manually delete the following infected folder:

C:\Documents and Settings\HP User\Application Data\Sun\Java\Deployment\cache

To make sure that you will find it, you need to enable the option Show Hidden Files and Folders. In order to enable it do as follows:

1. Open My Computer, then click on Tools > Folder Options.
2. Go to the View tab, search for the option "Show hidden files and folders" and make sure it is enabled.

Secondly, you should also delete the content of your Recycle Bin. To do this, please right-click the icon and select the "Empty Recycle Bin" option. Please do that for every Windows account on your computer.

Finally, please run another full scan with your VC to make sure your system is clean.
Do not focus on making money; focus on protecting what you have.
  • #135
  • Apr 18, 2007 12:28am Apr 18, 2007 12:28am
My VP told me it had stopped the attack on about 500 occasions. Unfortunately, it missed it 508 times. The above was taken from their support. I'm just running a final scan.
Do not focus on making money; focus on protecting what you have.
  • #136
  • Apr 18, 2007 12:41am Apr 18, 2007 12:41am
Well that was a fun excersise in reformatting. 7 hours later and everything is back to pre-virus condition on my surfing PC. The drag of this particular timing is i reformat every January and July...so i just got done with this chore a couple months back. Fortunately my standalone trading pc was not effected as i don't use it for anything but trading software.

: ) Thom
  • #137
  • Apr 18, 2007 1:03am Apr 18, 2007 1:03am
Quoting accrete
Fortunately my standalone trading pc was not effected as i don't use it for anything but trading software.
Same as me. But still a nuisance. But what is the point of virus protection software? In fairness to my provider they allow you to send your log file if it can't fix the virus and they came back with a tailor made soltion for me in 40 minutes.

But it shouldn't get through in the first place. And from the carnage in this thread all were running VP and for most it failed.
Do not focus on making money; focus on protecting what you have.
  • #138
  • Apr 18, 2007 4:03am Apr 18, 2007 4:03am
Quoting Isotonic
i've ran the report again and also found this info we can investigate:

Beldopryajev Mikhail Sergeevic Golubkova 34-88, Berdyask, FEDERATION 908887, RUSSIAN

as well as:

Nameserver
qw.fucksuckgay.com

DNS admin
[email protected]

as well as this site found on the same netblock owner:

2772668www.ls-sites.bizn/a, Nesakova st. 16-89, Moskow, 211906, Russian FederationJune 2005ApacheFreeBSD

This looks like the organisation responsible for codecsoft. It's site report matches as well. So we have two contact addresses, with the final destination being in Panama.

The netblock owner RBusiness Network is hosting dubious sites - mostly porn and looks like child-porn as well. Should we report these guys to the feds?
I was sure that someone would be from Russia. Russian hackers are very famous, one Russian guy in ICQ contacted me and told me that for 500$ he could redirect any cellphone call to my cellphone and no one would have known anything about it.

But also we have hacked over 50 Russian sites
kiss the trend
  • #139
  • Apr 18, 2007 6:19am Apr 18, 2007 6:19am
Quoting Isotonic
The netblock owner RBusiness Network is hosting dubious sites - mostly porn and looks like child-porn as well. Should we report these guys to the feds?
The US has no jurisdiction in Russia as you know - IMO we should look after our own back yards and not try and police the world. Whilst disgusting in places the internet cannot be censored. Unless you choose to move to China of course. Even then there's ways round the censorship.

With freedom comes evil. The fact is that censorship always defeats its own purpose, for it creates, in the end, the kind of society that is incapable of exercising real discretion.
Do not focus on making money; focus on protecting what you have.
  • #140
  • Apr 18, 2007 11:05am Apr 18, 2007 11:05am
I'm using Maxthon browser and have several tabs running all the time in it, so I was on ff site all the time not even knowing about the virus thing. I did get a trojan horse called adv[1].asp (or something like this), but my antivirus (Norton Antivirus) showed me which directory it is in, so i went there and deleted it manually, not sure however if this has solved the problem, but so far everything works normal. (and it was working normal while i had the worm on my comp, excepting antivirus was going nuts with alerts).
Trax Tibidax Tibidox...
3 traders viewing now