Page 1 of 1

Wildhearts site safe to access

PostPosted: 21st Aug 08, 21:17
by kriscoverdale
Hi,

Just to let everyone know that the Wildhearts site briefly had a malicious popup installed on it today. I've now removed this and browsing the site is safe again.

Google snagged it in that time as being infected, so if you search for the site in google it alerts that "This site may harm your computer".

I've requested Google review this now that the popup has been removed.

Cheers
Kris

PostPosted: 22nd Aug 08, 17:59
by Kyukyuichi
My PC was infected by spyware called "Antivirus XP 2008" twice when I visited to the site on 19th & 21th.I couldn't sleep to remove the infected file on PC on 19th.

I don't want to visit to that site anymore.

PostPosted: 25th Aug 08, 00:28
by longgoneloser
Kyukyuichi wrote:My PC was infected by spyware called "Antivirus XP 2008" twice when I visited to the site on 19th & 21th.


So that's where i got it from. My comp is now dead and i can't get rid of that XP Antivirus crap. If anyone knows, please PLEASE tell me.

:-(

I need a Windows disc to reinstall everything and am now resorting to using the comp at work. Not fair.

PostPosted: 25th Aug 08, 09:15
by Kyukyuichi
Try this :

http://www.bleepingcomputer.com/malware ... re-xp-2008

Scroll down this page and install anti-malware program then full-scan your disc drive :C.
And then you can remove all the infected files on result page.

I could fix this matter by this way.I hope your PC will start breathing again.

Have a nice Aussie gig with the guys anyway.I'd love to get the posters / flyers if it's poss. :wink:

PostPosted: 25th Aug 08, 12:17
by kriscoverdale
Hi Damo, Kyukyuichi,

I'm sorry to hear that you got infected by this - I pulled it from the site as soon as I was aware - good luck with getting fixed up. There seems to be a rise in these kind of attacks at the moment - we're seeing a lot more at work and I'll be chatting to our security experts about what extra defences I can bring to the WH site.

There's some info here on removal too: http://www.pcthreat.com/parasitebyid-6952en.html

One thing people can do to avoid getting infected with this kind of thing is to browse with firefox with the http://noscript.net/ addon installed - this blocks all untrusted scripts, so even if you're on an infected site it can't run any scripts to infect you.

Good luck
Kris

PostPosted: 25th Aug 08, 21:28
by Ean
kriscoverdale wrote:One thing people can do to avoid getting infected with this kind of thing is to browse with firefox with the http://noscript.net/ addon installed - this blocks all untrusted scripts, so even if you're on an infected site it can't run any scripts to infect you.

Cheers for that. They made a pretty good job of hiding the download button for it mind... :?

You've got to have grudging respect for the bastard that thought this one up. It's a clever sonofabitch - especially if some eejit follows the prompts and installs it. Took me fucking ages to shift it from a friend's confuser, although I was hindered somewhat by the fact that they'd connected to broadband and then pretty much nailed up a sign saying: 'Come on in!' :roll: