JETPHOTOS - NASTY POPUP WARNING

[forthbridge]

I'm a regular visitor to jetphotos.net - and have just visited and received a nasty pop-up (antivirus 2009) - fortunately my system is OK, but a search revealed this is a particularly nasty bit of trash - so be warned! Not sure if it's part of jetphotos actual ads, or they are victim to something more sinister, but I won't be back on that site!

[DaveB]

Tks for the HU Jim

ATB

DaveB :tab:

[speedbird591]

Antivirus XP 2008 (and various similar titles) is a very prolific Trojan. A lot of people have downloaded it inadvertantly. I've just spent a couple of hours removing it from my Brother-in-Law's laptop. It's often downloaded from video sites when you are told that you do not have the correct codec and asks you to click a link. It pretends to be a bona fide AV program that has done a scan and has found various malware on your PC and you have to pay $100 for the unlock key in order to remove them. It also has the ability to download other Trojans and malware.

If you are running a decent AV you shouldn't have it. But if you do have it, don't buy the licence because it doesn't work. This free anti-malware program will remove it: http://www.malwarebytes.org/. Run it in safe mode to make sure.

If you then run the Microsoft malicious software removal tool it will clear out anything else it might have downloaded http://www.microsoft.com/security/malwa ... fault.mspx

Ian

[DaveB]

Cheers Ian

For someone who always offers themselves as almost computer illiterate, you've done a fine job there sir

ATB

DaveB :tab:

[forthbridge]

Nice info Ian....

Purely conincidentally, I nipped to a mates' house on Saturday evening as his loung PC had became infected with several nasties due to his son's internet use...
Prior to me going down he kept telling me about an 'antivirus warning' which turned out to be this nasty.... amongst some others.

Just to re-iterate regarding this jetphotos one - I am used to clicking the usual popups there (screensavers etc) to close them down. Yesterday, I opened jetphotos up, and a screensaver popup came up which I closed. Immediately after this a window appeared saying something along the lines of 'Is your computer running slowly' - as I usually do with jetphotos, I clicked to close it and immediately, a bogus 'scanning' window subtly copying windows security centre appeared and 'scanned' my machine telling me (supposedly) that there was mulitple infestations including 'adult' infections. At that time, windows itself flagged up a warning and AV caught it - unless Avsim, CB files or DM supply dodgy material, there's nowhere I could have downloaded this trojan

The main point being, Jetphotos is a site I (did) trust as while having popups, not promoting anything dodgy - but this is something entirely different - so tread carefully!

To be on the safe side, I ran three scans, and nothing downloaded to my machine - but had it done so it wouldn't have been from some seedy site, codec or ay other download - it would have been from a popular and well-regarded site with no reason to suspect anything dodgy about.....

[speedbird591]

For someone who always offers themselves as almost computer illiterate, you've done a fine job there sir

Yes, I often claim modesty as well, Dave, but that's not entirely true either!