2nd Gen Ram Tech 1994-2001 Rams: This section is for TECHNICAL discussions only, that involve the 1994 through 2001 Rams. For any non-tech discussions, please direct your attention to the "General discussion/NON-tech" sub sections.

BEWARE Cardomain is virused up!

Thread Tools
 
Search this Thread
 
  #11  
Old 09-07-2009, 10:48 PM
FredTJ's Avatar
FredTJ
FredTJ is offline
Registered User
Join Date: Sep 2009
Location: Tucson, AZ USA Age:60
Posts: 1
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by Laramie1997
Alright, I have screen shots showing what I get when I go there. Running FF on Kaspersky

FF suddenly closed out and this was brought up.


Then it brought this up.


FF freaks out anytime I open cardomain.

At this point, I just ended the FF process.

Why did you click the "OK" button or do anything other then end the dialog box ?

Never, never accept anything like that from a website.




Fred
 
  #12  
Old 09-07-2009, 10:52 PM
Laramie1997's Avatar
Laramie1997
Laramie1997 is offline
Grand Champion
Join Date: Sep 2008
Location: Springfield MO
Posts: 6,980
Likes: 0
Received 4 Likes on 4 Posts
Default

Originally Posted by FredTJ
Why did you click the "OK" button or do anything other then end the dialog box ?

Never, never accept anything like that from a website.




Fred
You join the site just to hound me on that, huh? That's a wise move.

Look, I never said I clicked on it. Never even implied that. That little screen pops up for about 10 seconds and then launches your web browser trying to trick you into thinking that it has completed a virus scan.

Not the first time I've had that pop up, so I nailed some screen shots real quick.
 
  #13  
Old 09-07-2009, 11:52 PM
jasonw's Avatar
jasonw
jasonw is offline
Site Moderator
Dodge Forum Moderator
Join Date: Jan 2008
Location: Sioux Falls, SD
Posts: 8,374
Likes: 0
Received 23 Likes on 12 Posts
Default

Another good anti-spyware program is malwarebytes anti-malware. I recommend to use that as well.
 
  #14  
Old 09-07-2009, 11:57 PM
BlueBeast2's Avatar
BlueBeast2
BlueBeast2 is offline
Champion
Thread Starter
Join Date: Jul 2005
Location: Greeneville, TN
Posts: 2,965
Likes: 0
Received 3 Likes on 2 Posts
Default

where does one get these good programs
 
  #15  
Old 09-07-2009, 11:59 PM
Laramie1997's Avatar
Laramie1997
Laramie1997 is offline
Grand Champion
Join Date: Sep 2008
Location: Springfield MO
Posts: 6,980
Likes: 0
Received 4 Likes on 4 Posts
Default

Jinx, this is Malware bytes that Jason was talking about.

http://download.bleepingcomputer.com...mbam-setup.exe

I know that looks suspicious, but it's safe.

EDIT: Installed the program, ran it, and it did find a nice little Hijack.DisplayProperties Registry file. Removed it, and so far so good.....
 

Last edited by Laramie1997; 09-08-2009 at 01:49 AM.
  #16  
Old 09-08-2009, 04:07 PM
lb79theone's Avatar
lb79theone
lb79theone is offline
Record Breaker
Join Date: Apr 2009
Location: Maine! ( GET A HOLD OF ME IF YOU WANT TO GET ME ON FACEBOOK.COM, AND CARDOMAIN.COM)
Posts: 1,424
Likes: 0
Received 0 Likes on 0 Posts
Default

It depends on what protection you got on your computer.
 
  #17  
Old 09-08-2009, 05:15 PM
jasonw's Avatar
jasonw
jasonw is offline
Site Moderator
Dodge Forum Moderator
Join Date: Jan 2008
Location: Sioux Falls, SD
Posts: 8,374
Likes: 0
Received 23 Likes on 12 Posts
Default

Kaspersky is the best, tied with Bitdefender. But even that does not catch everything.

The best combination of AV and AS programs is Kaspersky or Bitdefender and several of the free anti-spyware programs to compliment it. Webroot Antivirus isn't bad either.

Avira is the best of the freebies, but free isn't the best. Look at any independent lab results, detection rates are highest with the paid AV programs.

In this case, it isn't a virus if your screen looks exactly like what Laramie posted up. It is a registry modification, made by spyware/virus/malicious website in the past. Given the fact that Laramie has had Kaspersky since he got his laptop back from service, I highly doubt they were caused by a virus/spyware. Kaspersky would have caught them the moment it tried to change something, not after.

Most likely a program you loaded (gave permission to install, which it can then change any registry thing it wants) or a website made the modification at some point, maybe something attached to Cardomain, maybe not.
 

Last edited by jasonw; 09-08-2009 at 05:17 PM.
  #18  
Old 09-08-2009, 11:35 PM
Mowhawk's Avatar
Mowhawk
Mowhawk is offline
Record Breaker
Join Date: Oct 2007
Location: Allentown, PA
Posts: 1,680
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by jasonw
Kaspersky is the best, tied with Bitdefender. But even that does not catch everything.

The best combination of AV and AS programs is Kaspersky or Bitdefender and several of the free anti-spyware programs to compliment it. Webroot Antivirus isn't bad either.

Avira is the best of the freebies, but free isn't the best. Look at any independent lab results, detection rates are highest with the paid AV programs.

In this case, it isn't a virus if your screen looks exactly like what Laramie posted up. It is a registry modification, made by spyware/virus/malicious website in the past. Given the fact that Laramie has had Kaspersky since he got his laptop back from service, I highly doubt they were caused by a virus/spyware. Kaspersky would have caught them the moment it tried to change something, not after.

Most likely a program you loaded (gave permission to install, which it can then change any registry thing it wants) or a website made the modification at some point, maybe something attached to Cardomain, maybe not.
Exactly, what hes got is a reg change, but that change allows malware and viruses to enter with that gay pop up.
 
  #19  
Old 09-08-2009, 11:48 PM
crazzywolfie's Avatar
crazzywolfie
crazzywolfie is offline
Legend
Join Date: Jun 2009
Location: orangeville ontario
Posts: 8,024
Received 71 Likes on 67 Posts
Default

my mom's computer had this problem and the fix was very simple. system restore in safemode.
 
  #20  
Old 09-09-2009, 12:07 AM
BlueBeast2's Avatar
BlueBeast2
BlueBeast2 is offline
Champion
Thread Starter
Join Date: Jul 2005
Location: Greeneville, TN
Posts: 2,965
Likes: 0
Received 3 Likes on 2 Posts
Default

Some of you guys crack me up. Your all like its ok don't worry about it. I have so many damn computer issues its not even funny. I just got my desktop working again it was down for probably a year or more. My first laptop started crashing so much i said screw it and bought another one. I'm not taking the chance. Now I will DL music and **** on this one (desktop) cause its old but If i know a site is a little weird I'm gonna try and stay off. Well except for the **** you gotta have that LOL
 


Quick Reply: BEWARE Cardomain is virused up!



All times are GMT -4. The time now is 01:45 AM.