2nd Gen Ram Tech 1994-2001 Rams: This section is for TECHNICAL discussions only, that involve the 1994 through 2001 Rams. For any non-tech discussions, please direct your attention to the "General discussion/NON-tech" sub sections.

BEWARE Cardomain is virused up!

Thread Tools
 
Search this Thread
 
Old Sep 7, 2009 | 10:48 PM
  #11  
FredTJ's Avatar
FredTJ
Registered User
Joined: Sep 2009
Posts: 1
Likes: 0
From: Tucson, AZ USA Age:60
Default

Originally Posted by Laramie1997
Alright, I have screen shots showing what I get when I go there. Running FF on Kaspersky

FF suddenly closed out and this was brought up.


Then it brought this up.


FF freaks out anytime I open cardomain.

At this point, I just ended the FF process.

Why did you click the "OK" button or do anything other then end the dialog box ?

Never, never accept anything like that from a website.




Fred
 
Reply
Old Sep 7, 2009 | 10:52 PM
  #12  
Laramie1997's Avatar
Laramie1997
Grand Champion
Joined: Sep 2008
Posts: 6,980
Likes: 5
From: Springfield MO
Default

Originally Posted by FredTJ
Why did you click the "OK" button or do anything other then end the dialog box ?

Never, never accept anything like that from a website.




Fred
You join the site just to hound me on that, huh? That's a wise move.

Look, I never said I clicked on it. Never even implied that. That little screen pops up for about 10 seconds and then launches your web browser trying to trick you into thinking that it has completed a virus scan.

Not the first time I've had that pop up, so I nailed some screen shots real quick.
 
Reply
Old Sep 7, 2009 | 11:52 PM
  #13  
jasonw's Avatar
jasonw
Site Moderator
Joined: Jan 2008
Posts: 8,374
Likes: 28
From: Sioux Falls, SD
Default

Another good anti-spyware program is malwarebytes anti-malware. I recommend to use that as well.
 
Reply
Old Sep 7, 2009 | 11:57 PM
  #14  
BlueBeast2's Avatar
BlueBeast2
Thread Starter
|
Champion
20 Year Member
Photogenic
Photoriffic
Shutterbug
Joined: Jul 2005
Posts: 2,966
Likes: 3
From: Greeneville, TN
Default

where does one get these good programs
 
Reply
Old Sep 7, 2009 | 11:59 PM
  #15  
Laramie1997's Avatar
Laramie1997
Grand Champion
Joined: Sep 2008
Posts: 6,980
Likes: 5
From: Springfield MO
Default

Jinx, this is Malware bytes that Jason was talking about.

http://download.bleepingcomputer.com...mbam-setup.exe

I know that looks suspicious, but it's safe.

EDIT: Installed the program, ran it, and it did find a nice little Hijack.DisplayProperties Registry file. Removed it, and so far so good.....
 

Last edited by Laramie1997; Sep 8, 2009 at 01:49 AM.
Reply
Old Sep 8, 2009 | 04:07 PM
  #16  
lb79theone's Avatar
lb79theone
Record Breaker
Joined: Apr 2009
Posts: 1,424
Likes: 0
From: Maine! ( GET A HOLD OF ME IF YOU WANT TO GET ME ON FACEBOOK.COM, AND CARDOMAIN.COM)
Default

It depends on what protection you got on your computer.
 
Reply
Old Sep 8, 2009 | 05:15 PM
  #17  
jasonw's Avatar
jasonw
Site Moderator
Joined: Jan 2008
Posts: 8,374
Likes: 28
From: Sioux Falls, SD
Default

Kaspersky is the best, tied with Bitdefender. But even that does not catch everything.

The best combination of AV and AS programs is Kaspersky or Bitdefender and several of the free anti-spyware programs to compliment it. Webroot Antivirus isn't bad either.

Avira is the best of the freebies, but free isn't the best. Look at any independent lab results, detection rates are highest with the paid AV programs.

In this case, it isn't a virus if your screen looks exactly like what Laramie posted up. It is a registry modification, made by spyware/virus/malicious website in the past. Given the fact that Laramie has had Kaspersky since he got his laptop back from service, I highly doubt they were caused by a virus/spyware. Kaspersky would have caught them the moment it tried to change something, not after.

Most likely a program you loaded (gave permission to install, which it can then change any registry thing it wants) or a website made the modification at some point, maybe something attached to Cardomain, maybe not.
 

Last edited by jasonw; Sep 8, 2009 at 05:17 PM.
Reply
Old Sep 8, 2009 | 11:35 PM
  #18  
Mowhawk's Avatar
Mowhawk
Record Breaker
Joined: Oct 2007
Posts: 1,680
Likes: 0
From: Allentown, PA
Default

Originally Posted by jasonw
Kaspersky is the best, tied with Bitdefender. But even that does not catch everything.

The best combination of AV and AS programs is Kaspersky or Bitdefender and several of the free anti-spyware programs to compliment it. Webroot Antivirus isn't bad either.

Avira is the best of the freebies, but free isn't the best. Look at any independent lab results, detection rates are highest with the paid AV programs.

In this case, it isn't a virus if your screen looks exactly like what Laramie posted up. It is a registry modification, made by spyware/virus/malicious website in the past. Given the fact that Laramie has had Kaspersky since he got his laptop back from service, I highly doubt they were caused by a virus/spyware. Kaspersky would have caught them the moment it tried to change something, not after.

Most likely a program you loaded (gave permission to install, which it can then change any registry thing it wants) or a website made the modification at some point, maybe something attached to Cardomain, maybe not.
Exactly, what hes got is a reg change, but that change allows malware and viruses to enter with that gay pop up.
 
Reply
Old Sep 8, 2009 | 11:48 PM
  #19  
crazzywolfie's Avatar
crazzywolfie
Legend
15 Year Member
Liked
Joined: Jun 2009
Posts: 8,025
Likes: 72
From: orangeville ontario
Default

my mom's computer had this problem and the fix was very simple. system restore in safemode.
 
Reply
Old Sep 9, 2009 | 12:07 AM
  #20  
BlueBeast2's Avatar
BlueBeast2
Thread Starter
|
Champion
20 Year Member
Photogenic
Photoriffic
Shutterbug
Joined: Jul 2005
Posts: 2,966
Likes: 3
From: Greeneville, TN
Default

Some of you guys crack me up. Your all like its ok don't worry about it. I have so many damn computer issues its not even funny. I just got my desktop working again it was down for probably a year or more. My first laptop started crashing so much i said screw it and bought another one. I'm not taking the chance. Now I will DL music and **** on this one (desktop) cause its old but If i know a site is a little weird I'm gonna try and stay off. Well except for the **** you gotta have that LOL
 
Reply



All times are GMT -4. The time now is 03:01 AM.