Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How am I being infected??


  • Please log in to reply
8 replies to this topic

#1 qwerty27

qwerty27

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:06:11 PM

Posted 12 March 2010 - 02:11 PM

Hi all,
I am a practitioner of what we can call "safe internet practices." My university's webmail host automatically filters spam and suspicious attachments from emails, and I have never opened a questionable email (let alone an attachment). I stay away from the darker side of the internet. Specifically, this past week all of my internet activity has either been on blackboard, a website which organizes course documents for specific classes by my professors, my email account, the website "science blogs," facebook, and ebay. I am never confronted with suspicious downloads or processes or pop ups which might indicate a trojan or virus.

Yet, I just removed XP Antivirus Pro, the 3rd or so fake antivirus program which has installed itself on my PC since September. It's not a big deal I guess, I know how to remove it (and I keep removing it), but I'm concerned that I'm missing something. I am never aware of this program or others like it installing themselves until the malware starts running itself. I'm not doing any scandalous internet activities- I haven't used a torrent program/website since the summer, and even then I never had these problems. Does anyone have any insights as to what is generating these programs?

BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:07:11 PM

Posted 12 March 2010 - 06:24 PM

facebook, and ebay are two good candidates, in that order

There is also the chance that you never totally removed the infection in the first place
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 RedDawn

RedDawn

  • Members
  • 454 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:12:11 AM

Posted 12 March 2010 - 07:28 PM

How Malware Spreads - How did I get infected

#4 qwerty27

qwerty27
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:06:11 PM

Posted 12 March 2010 - 07:51 PM

The most likely reason seems to be that my acrobat reader was unpatched- that's the only point in that topic which was relevant anyway. I still find it hard to believe that backdoor programs are lurking on ebay or facebook. None of my friends have had any of these self-installing pseudo-programs. Additionally, they've been different brand names each time- so I don't think it was a failure of uninstallation.

#5 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:07:11 PM

Posted 13 March 2010 - 12:13 PM

I still find it hard to believe that backdoor programs are lurking on ebay or facebook


:thumbsup: http://www.google.com/search?q=infections+...lient=firefox-a
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,938 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:11 PM

Posted 14 March 2010 - 10:00 AM

Using Facebook can be hazardous to your computer.
Koobface Worm Attacks Facebook and MySpace Users
New Variant of Koobface Worm Spreading on Facebook

As with gaming sites, users visiting MySpace, YouTube, Facebook...are exposed to innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 frankp316

frankp316

  • Members
  • 2,677 posts
  • OFFLINE
  •  
  • Local time:06:11 PM

Posted 14 March 2010 - 12:02 PM

It's getting worse. Yesterday there was an article on C-Net that both Tech Crunch and The Drudge Report were victimized by malicious ads depositing viruses to site visitors. Tech Crunch has gotten rid of all Flash ads. Hollywood Wiretap is a site I visit regularly and they seem to be having issues right now so I'm staying away from there. So it can happen anywhere. Never had a problem on eBay but it's well known that Facebook has serious problems with malicious third party apps so I don't go there.

Edited by frankp316, 14 March 2010 - 12:04 PM.


#8 Stang777

Stang777

    Just Hoping To Help


  • Members
  • 1,821 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:11 PM

Posted 15 March 2010 - 12:23 AM

I won't go to either Facebook or MySpace due to the prevelance of viruses on them. I went to MySpace once to look at the page my sons friend had, went straight to her page, did not click on anything on the page, but as soon as it loaded, there was ZoneAlarm popping up saying that a virus was attempting to be downloaded to my computer. The person whose page it was was sitting right here with me when I went to it and she was shocked when my ZoneAlarm popped up. I decided right there and then that neither site had anything that was worth putting my computer at risk.

Edited by Stang777, 15 March 2010 - 12:24 AM.


#9 xblindx

xblindx

  • Banned
  • 1,923 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:11 PM

Posted 15 March 2010 - 03:58 PM

I've never had any problems with Myspace or Facebook, use an alternate browser such as Firefox, and a good ad blocker such as Ad Block Plus and you should be fine, also be sure to have an updated HOSTS file.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users