Project 1999

Project 1999 (/forums/index.php)
-   Off Topic (/forums/forumdisplay.php?f=19)
-   -   If you're going to program a virus... (/forums/showthread.php?t=50617)

Handull 10-04-2011 12:43 AM

If you're going to program a virus...
 
...at least do a good job of it.

Just restarted my computer 15 minutes ago and started firefox like I always do and got hit with a sweet fake anti-virus software 'virus'. Not sure how I got infected with it, but I think updating my Steam client was the only recent thing I downloaded that might have done it.

It put a bunch of randomly named folders in my users/(username)/appdata/roaming folder along with an icon image and a "firefox.exe" file created at the same time as the others (last night at 11;59pm). I just popped into safe mode, trashed the files, and it seems to be gone. It seemed that it activated when I opened firefox, and the "firefox.exe" file supports my claim that this is the case. The fake program was called "Open Cloud AV".

I'm just posting this to say whoever made that 'virus' sucks at programing. I am not a programer or computer tech at all, but this program was a cake walk to get rid of, and I don't have any antivirus software. Just used safemode and trashed the files. Would have been hard to find the files except they put a shortcut on my DESKTOP that linked to the oddly named folder in an even odder location with an .exe file called something like "exgiheofi23LFKfs.exe". The date created was also a big giveaway.

If anyone is still reading this and you ever get a similar virus, you should know that safemode is your best friend. Had a nasty "fake antivirus virus" once that even booted up in safemode, but it lost its functionality to have multiple processes running which each reopened the others, so after ending the process i could just trash the files. That was one a pain to shut down, but this one was a joke.

Was bummed I couldn't log into EQ cause of it, but looks like I'm back on track now :)

Secrets 10-04-2011 01:07 AM

Quote:

Originally Posted by Handull (Post 423517)
...at least do a good job of it.

Just restarted my computer 15 minutes ago and started firefox like I always do and got hit with a sweet fake anti-virus software 'virus'. Not sure how I got infected with it, but I think updating my Steam client was the only recent thing I downloaded that might have done it.

It put a bunch of randomly named folders in my users/(username)/appdata/roaming folder along with an icon image and a "firefox.exe" file created at the same time as the others (last night at 11;59pm). I just popped into safe mode, trashed the files, and it seems to be gone. It seemed that it activated when I opened firefox, and the "firefox.exe" file supports my claim that this is the case. The fake program was called "Open Cloud AV".

I'm just posting this to say whoever made that 'virus' sucks at programing. I am not a programer or computer tech at all, but this program was a cake walk to get rid of, and I don't have any antivirus software. Just used safemode and trashed the files. Would have been hard to find the files except they put a shortcut on my DESKTOP that linked to the oddly named folder in an even odder location with an .exe file called something like "exgiheofi23LFKfs.exe". The date created was also a big giveaway.

If anyone is still reading this and you ever get a similar virus, you should know that safemode is your best friend. Had a nasty "fake antivirus virus" once that even booted up in safemode, but it lost its functionality to have multiple processes running which each reopened the others, so after ending the process i could just trash the files. That was one a pain to shut down, but this one was a joke.

Was bummed I couldn't log into EQ cause of it, but looks like I'm back on track now :)

I said this once and i'll say it again: If I ever make a virus, i'm gonna make one that attaches a debugger to every process on the list.

Punkbuster, GameGuard, and HShield will cower at my 1337 h4x.

Pico 10-04-2011 01:29 AM

first world problems

Scribbles 10-04-2011 03:09 AM

#whitemanproblems

visage 10-05-2011 07:36 AM

Quote:

Originally Posted by Handull (Post 423517)
...at least do a good job of it.

Just restarted my computer 15 minutes ago and started firefox like I always do and got hit with a sweet fake anti-virus software 'virus'. Not sure how I got infected with it, but I think updating my Steam client was the only recent thing I downloaded that might have done it.

It put a bunch of randomly named folders in my users/(username)/appdata/roaming folder along with an icon image and a "firefox.exe" file created at the same time as the others (last night at 11;59pm). I just popped into safe mode, trashed the files, and it seems to be gone. It seemed that it activated when I opened firefox, and the "firefox.exe" file supports my claim that this is the case. The fake program was called "Open Cloud AV".

I'm just posting this to say whoever made that 'virus' sucks at programing. I am not a programer or computer tech at all, but this program was a cake walk to get rid of, and I don't have any antivirus software. Just used safemode and trashed the files. Would have been hard to find the files except they put a shortcut on my DESKTOP that linked to the oddly named folder in an even odder location with an .exe file called something like "exgiheofi23LFKfs.exe". The date created was also a big giveaway.

If anyone is still reading this and you ever get a similar virus, you should know that safemode is your best friend. Had a nasty "fake antivirus virus" once that even booted up in safemode, but it lost its functionality to have multiple processes running which each reopened the others, so after ending the process i could just trash the files. That was one a pain to shut down, but this one was a joke.

Was bummed I couldn't log into EQ cause of it, but looks like I'm back on track now :)

I hope you catch a dirty virus since your complaining

Smedy 10-05-2011 08:06 AM

Quote:

Originally Posted by Handull (Post 423517)
...at least do a good job of it.

Just restarted my computer 15 minutes ago and started firefox like I always do and got hit with a sweet fake anti-virus software 'virus'. Not sure how I got infected with it

You were infected by javascript injection through your browser, learn to not use IE or un-updated browsers.

These viruses comes from everywhere, usually shady add companies, like the adds used on piratebay and other poker / porn sites will try to inject this shit.

Always update Java / or disable it completely and keep your browser up2date (never ever use internet explorer).

Scribbles 10-05-2011 02:25 PM

lol @ people who use windows and have to think about stuff like this

skulldudes 10-05-2011 02:33 PM

the very idea of some little shit making a virus just to fuck up peoples' computers just makes me rage and thirst for blood. if i ever meet a virus programmer irl, i will rip his arms off.

Falisaty 10-05-2011 08:57 PM

Quote:

Originally Posted by RealSmedy (Post 424723)
You were infected by javascript injection through your browser, learn to not use IE or un-updated browsers.

These viruses comes from everywhere, usually shady add companies, like the adds used on piratebay and other poker / porn sites will try to inject this shit.

Always update Java / or disable it completely and keep your browser up2date (never ever use internet explorer).

What he said

Heebee 10-05-2011 09:24 PM

Quote:

Originally Posted by Handull (Post 423517)
Just restarted my computer 15 minutes ago and started firefox like I always do and got hit with a sweet fake anti-virus software 'virus'.

Install 'Noscript' add on for Firefox.


All times are GMT -4. The time now is 02:11 AM.

Powered by vBulletin®
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.