malware on site

How do I.... ?

Moderator: Team Cub

malware on site

Postby Anonymous_h » Thu Dec 15, 2011 10:25 am

Not sure where to post this, but I have been having problems with malware (spyware) that give you a fake virus notification and then blocks your access to the internet - for three days I have been trying to narrow down where it was coming from - and now I am almost sure it is coming from farmallcub.com everytime I am on the site I get attacked.
Not sure if it is Dennis that takes care of it or not.
Just FYI
Anonymous_h
5+ Years
5+ Years
 
Posts: 543
Joined: Fri Feb 29, 2008 10:48 am
Zip Code: 00000
Circle of Safety Award
Circle of Safety: Y

Re: malware on site

Postby Bigdog » Thu Dec 15, 2011 10:33 am

Brad - I have not noticed anything unusual. However, I have passed this on to Dennis.
Bigdog
If you can't fix it with a hammer, you've got an electrical problem.

My wife says I don't listen to her. - - - - - - - - Or something like that!

http://www.cubtug.com
User avatar
Bigdog
Team Cub
Team Cub
 
Posts: 23820
Joined: Sun Feb 02, 2003 12:50 pm
Location: OH, Stoutsville
Zip Code: 43154
Circle of Safety Award
Circle of Safety: Y

Re: malware on site

Postby Don McCombs » Thu Dec 15, 2011 10:36 am

Is it, by chance, XP Internet Security 2012?
Don McCombs
MD, Deep Creek Lake

"1950 Something" Farmall Cub
1977 International Cub w/FH
1978 International Cub
1948 Farmall Super A
1951 Farmall Super C w/FH
User avatar
Don McCombs
Team Cub Mentor
Team Cub Mentor
 
Posts: 10537
Joined: Mon Feb 03, 2003 6:45 am
Location: MD, Deep Creek Lake
Zip Code: 21550
Tractors Owned: "1950 Something" Farmall Cub
1977 International Cub w/FH
1978 International Cub
1948 Farmall Super A
1951 Farmall Super C w/FH
Circle of Safety Award
Circle of Safety: Y

Re: malware on site

Postby Rudi » Thu Dec 15, 2011 11:13 am

Interesting .. googled it - XP Internet Security 2012. Another of them rogues...

I doubt if it came from farmallcub.com. More likely from an ad that was downloaded.
Confusion breeds Discussion which breeds Knowledge which breeds Confidence which breeds Friendship

User avatar
Rudi
Team Cub
Team Cub
 
Posts: 28467
Joined: Sun Feb 02, 2003 8:37 pm
Location: NB Dieppe, Canada
Zip Code: E1A7J3
eBay ID: ve9rhs
Skype Name: R.H. "Rudi" Saueracker, SSM
Tractors Owned: 1947 Cub "Granny"
1948 Cub "Ellie-Mae"
1951 Cub "Jethro"
Dad's Putt-Putt
IH 129 CC
Circle of Safety Award
Circle of Safety: Y
Twitter ID: Rudi Saueracker, SSM

Re: malware on site

Postby randallc » Thu Dec 15, 2011 11:33 am

Google is a great tool. Brings information up, just be careful how far you follow it. For example, it will give you a title to click on; I will pursue that one without reserve; but sometimes you get adds or encouragement to follow other links that look very legit even to the point of having something that looks like a microsoft or windows logo. One got me one time on this computer: Everytime I opened it up it controled the only web site I could go to: I used my desktop to contact mircosoft through email and their techs started walking me through stuff totally out of my world, but with their detailed instruction and several tries we got it.
Next time I got one of those messages "you've been invaded with a bug, follow this link to clean your computer" Never, never follow that link that pops up!!
Never, never follow that link that pops up!!!
What I do, may not be right, but it has worked a couple of times: I run Microsoft Essencetials to secure my computer- if I get a message from it I run it to clean it, BUT WHEN THAT NEW BLURB OPENS UP--- I do an immediate quick kill !!! Has worked the last couple of times.

I have not noticed any problem from farmallcub.cub or any of their sponsors. However, I am not quick to click on advertisemets that appear.
Guiena, 1951 Farmall Cub; Jumping Willy, 1949 Farmall Cub.
User avatar
randallc
501 Club
501 Club
 
Posts: 1080
Joined: Tue Jan 18, 2011 9:16 am
Location: Witcherville, AR
Zip Code: 72940
Tractors Owned: 1951 Farmall Cub, 152 disk plow, 2 gang disk, belly mower, sickle mower
1949 Farmall Cub, cultivator, moldboard plow, disk,front blade. Cub Cadet, LTX1045 Mower. Cub Cadet's 109, 1000, and 1250
1961 cub c2 belly mower and full blade.
Circle of Safety Award
Circle of Safety: Y

Re: malware on site

Postby Dennis » Thu Dec 15, 2011 11:55 am

Brad, there is nothing that I'm aware of; If anyone else is getting positives/false-positives, please let me know.

I do know that from the server logs and my personal email, the hackers are out in FULL-ON BRUTE FORCE this month. More malware than I've ever seen in the last several years... be careful out there.

Dennis
"Time makes more converts than reason."- Thomas Paine
User avatar
Dennis
Site Admin
 
Posts: 2566
Joined: Sat Feb 01, 2003 9:53 pm
Location: MO, Oak Grove
Zip Code: 64075
Tractors Owned: 1947 Farmall Cub
104 Cub Cadet
Cub Cadet Original
Circle of Safety Award
Circle of Safety: Y
Twitter ID: @farmallcubcom

Re: malware on site

Postby Anonymous_h » Thu Dec 15, 2011 1:42 pm

Thanks guys - I have a software program that tracks what time and what site I am on when the Trojan comes through - but I am not smart enough to know when it comes from the actual site address or something running in the background that I don't know about - thanks for checking I hope I am the only one being bothered with it.
Anonymous_h
5+ Years
5+ Years
 
Posts: 543
Joined: Fri Feb 29, 2008 10:48 am
Zip Code: 00000
Circle of Safety Award
Circle of Safety: Y

Re: malware on site

Postby coppersmythe » Thu Dec 15, 2011 3:11 pm

i got hit last night, could not get it to stop to run my spyware program. it listed several virus's and trojan horses it "discovered"and said i needed to run there program to clean it up. not computer literate enough to be sure where it came from, but my "surfing is very limited. coppersmythe...........................................edit added 12/16/11 . today, thats it, windows 7 internet security 2012 blah blah blah warning run this program. cannot get it to stop
Last edited by coppersmythe on Fri Dec 16, 2011 7:59 am, edited 2 times in total.
coppersmythe
501 Club
501 Club
 
Posts: 852
Joined: Thu Dec 24, 2009 9:19 am
Location: walker, louisiana
Zip Code: 70785
Tractors Owned: '50 high altitude cub , '48 trimmed dash high crop cub, '78 3/4 cub , lo-boy , cub-6 toolbar, mowers, 54 blade, disc.
Circle of Safety Award
Circle of Safety: Y

Re: malware on site

Postby CapeCodCubs » Thu Dec 15, 2011 3:14 pm

I got hit wish this yesterday...two computers hit and wiped out after visiting. Expensive to fix but back and running...am wary about being here now...
Image
CapeCodCubs
5+ Years
5+ Years
 
Posts: 2575
Joined: Fri Jan 11, 2008 5:30 pm
Zip Code: 02747
Tractors Owned: .
1948 F Cub Fast hitch
1949 F Cub
!950 F Cub Fast hitch

10 FastHitch implements
tons' of cultivating and planting stuff
Cub Middlebuster, Cub bean harvester
NOS Planet Jr. planter
172 planter, large combo hopper, 101A fertilzer hopper
Mott flail mower

Re: malware on site

Postby Anonymous_h » Thu Dec 15, 2011 3:19 pm

That's the one Val - the only way to get it off is to download a anti-malware program on to a thumb drive (memory stick) from a different computer and run it from that usb drive.
Anonymous_h
5+ Years
5+ Years
 
Posts: 543
Joined: Fri Feb 29, 2008 10:48 am
Zip Code: 00000
Circle of Safety Award
Circle of Safety: Y

Re: malware on site

Postby Anonymous_h » Thu Dec 15, 2011 3:29 pm

Don McCombs wrote:Is it, by chance, XP Internet Security 2012?


Don on my computer it said Win 7 internet Security 2012
Anonymous_h
5+ Years
5+ Years
 
Posts: 543
Joined: Fri Feb 29, 2008 10:48 am
Zip Code: 00000
Circle of Safety Award
Circle of Safety: Y

Re: malware on site

Postby CapeCodCubs » Thu Dec 15, 2011 4:10 pm

homstead wrote:
Don McCombs wrote:Is it, by chance, XP Internet Security 2012?


Don on my computer it said Win 7 internet Security 2012


Yup that's the one...
Image
CapeCodCubs
5+ Years
5+ Years
 
Posts: 2575
Joined: Fri Jan 11, 2008 5:30 pm
Zip Code: 02747
Tractors Owned: .
1948 F Cub Fast hitch
1949 F Cub
!950 F Cub Fast hitch

10 FastHitch implements
tons' of cultivating and planting stuff
Cub Middlebuster, Cub bean harvester
NOS Planet Jr. planter
172 planter, large combo hopper, 101A fertilzer hopper
Mott flail mower

Re: malware on site

Postby Rick Spivey » Thu Dec 15, 2011 5:26 pm

I got it on my work computer from this site. and it still isn't fixed. Hopefully tomorrow. Sorry Dennis, but this was the only site I hit that night, and it attacked quick. It is a bear to remove!!!
Rick Spivey
'52 Cub ("Great Personality") 148xxx
'48 Cub with FH ("Gunny Cub") 38xxx
'57 Lambretta (a slow work in progress)
'74 Triumph TR6 (Mama's toy)
User avatar
Rick Spivey
Cub Pro
Cub Pro
 
Posts: 1738
Joined: Sun Jul 01, 2007 10:07 pm
Location: SC, Simpsonville 29681
Zip Code: 29681
Circle of Safety Award
Circle of Safety: Y

Re: malware on site

Postby Mr E » Thu Dec 15, 2011 6:07 pm

Dennis wrote:Brad, there is nothing that I'm aware of; If anyone else is getting positives/false-positives, please let me know.

I do know that from the server logs and my personal email, the hackers are out in FULL-ON BRUTE FORCE this month. More malware than I've ever seen in the last several years... be careful out there.

Dennis



Dennis,
I don't know if this will be helpful to you or not. I have noticed this for a couple of days, but did not think anything about it at first. When I was reading Rick's post just now, a message popped up on the bottom of the page. See picture. I am currently on my work computer; looks like our Antivirus or Firewall one has recognized a problem in the Ad section.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Image


Thanks.


Roy
In the middle of every difficulty lies opportunity. - Albert Einstein


Roy Edenfield
Deep South CubFest
February 13 & 14, 2015
User avatar
Mr E
5+ Years
5+ Years
 
Posts: 5380
Joined: Mon Jul 30, 2007 11:48 am
Location: FL, Sneads
Zip Code: 32460
eBay ID: noles1432460
Circle of Safety Award
Circle of Safety: Y

Re: malware on site

Postby Harold R » Thu Dec 15, 2011 6:11 pm

Is there any commonality among the service providers? I have Comcast as an ISP and have had no issues. Using Google Chrome browser, running Windows 7.
Harold R
Team Cub Guide
Team Cub Guide
 
Posts: 3130
Joined: Thu Feb 20, 2003 4:54 pm
Location: Louisiana
Zip Code: 71058
Tractors Owned: 1948,50,53, and 56 Farmall Cubs
1969 International Cub
Circle of Safety Award
Circle of Safety: Y

Next

Return to Message Board & Computer Questions

Who is online

Users browsing this forum: No registered users and 1 guest