Trojans?

[CruiseLiner]

me too its slowing the shit out of my computer, whens it gonna be sorted ????

[FATGTS-R]

Yeah, still happening.

The work pcs AV is finding some trojan soon as I click on the site and then the whole pc freezes up.

It made the home PC have a heart attack and would not let IE stay online for more than 30 seconds so formatted the thing.

Came back on just now and when I open a page it then says its opening something else in the background called 196.regvista.com or similar and it then said its opening or starting applets or something. Im not PC literate so I have NFI if its bad or not.

[PranK]

I am doing the best I can, we are narrowing down their entry into the code. I am working with the team at IPB to get it fixed.

Guys, please use Firefox if possible until this is fixed as the exploit is only in IE.

Christian

[Guest PranK]

Ok, all, we had a suspicion that the hack was coming through the admin id no. 3 which was me. I have now stripped admin privaleges off my old account and have created this one... Lets hope thats it.

[R31Nismoid]

I bring bad news

[Guest PranK]

Serious? I cant find it anywhere

[R31Nismoid]

Ah now hang on a min... you've changed it since i posted

It was definately there @ 5:30pm

I was seeing the little extra "page load" in IE... but now im watching it its not doing it (last 15mins)

Ill press on, see if it happens again

[R31Nismoid]

still there, just saw it loading again.

I've flushed cookies/temp files etc already just incase... but it didnt work

[R34]

Yeah I WAS OK

Cleaned out everything and worked OK till just now

This sucks...spoils my favourite site but it's the only site I visit that is affected.

[blk180]

Dam it lol i thought you had it fix. Its some sort of Idle trojan that turns sh&t off like firewalls and what not right. Or do i have another one from somewhere else.

May just format to fix it

[yug_r34]

Hi all. Brought up the home page, not logged in. Using IE 6.0. The trojan turned off my Mcaffee virus scan, but not the firewall. Thank god for firewalls.

[Guest PranK]

We are working hard with IPB to find the cause, we are narrowing it down. I am working on fixing this from London, which should prove how important it is to me!

[PurpleR32]

This is one pesky little bugger. Please note, I am an accountant. I dont do IT and I in know way know what is techically happening. All i am posting is what happened to me.

As of yesterday 10 / 7 /06 about 4pm I opened Sau. As soon as i went into sau it opened up another Mozilla browser mirrioring the sau website and down the bottom said downloading information from regvista.com

I was in a Mozilla browser at the time. I did a virus & spam scan of the computer and it hadnt detected any virus / spam.

Was a bit scared as my cpu went into chug chug mode and slowed right down. I went to close both browsers but it wouldnt let me, then i went to end program on both browsers and it wasnt closing them even then. I quickly reset the computer.

I *think* this virus/mirror site etc CAN open another mozilla browser (as it definetly happened to me) but doesnt seem to be able to attach the virus to the computer.

Can anyone confirm that this has happened to them using mozilla?

[Guest PranK]

Hi PurpleR32, Mozilla browsers may try to open it as the code is forcing any browsers to open it, but once opened it will only take advantage of a vulnerability in IE.

Does that make sense?

Either way, its been a while since we were infected as we made a few changes to the security and it looks like its working.

C

[PurpleR32]

Hi PurpleR32, Mozilla browsers may try to open it as the code is forcing any browsers to open it, but once opened it will only take advantage of a vulnerability in IE.

Does that make sense?

Either way, its been a while since we were infected as we made a few changes to the security and it looks like its working.

C

Perfect Sense. It explained the reason why it opened up another browser and i didnt get the virus and why my anti-virus didnt go spastic saying it had detected something. However I still couldnt close ANY of the browsers at all. Only a reset / reboot fixed the problem

Thankyou for your hard work and efforts

[Skitza]

There were 2 domains it was trying to contact and load, the first has been given in another post, the second hasn't and I didn't cap it. But I haven't been hit again yet.