Technical Problems With Aw.com Website

[MistressPookyChan]

When I was reading back in the chatroom of the stuff I missed when I was at work, I noticed that someone said that after doing a virus scan they got a reading that said that AW was giving them a virus. Can someone verify this for me? Maybe with a screen shot of what your prog says? If pmak is reading this, do you know what's up?

Thanks much!

[acamori]

i've heard several complaints on the chat about it, it's usually a trojan that i've heard people say. when i get on AW.com i'm getting a bunch of the "trust content from..." dialouges trying to install stuff. i'm not sure what happens when you click yes, because i'm not going to. other than that, nothing happens to me, not sure where the virus is coming from.

[LavaBug]

according to my resistent scanner (AntiVir Personal edition 6 freeware)
it´s a trojan called SecndThought C4...(I coudl not find out what it does...)

I could reproduce it a few more times but it´s rather seldom
seems to me it has to do with that "your computer could be infected" banner

here the screenshot
(i know i´supposed to upload pics to the forums but i just dont know how...)
click me

would be cool if someone else could verify that....

[MistressPookyChan]

Thanks for the screen shot. If anyone else wants to try it, please get a screen shot of yours as well. The more info we have the better.

[Candy-chan]

this iswhat i get

[jumomo]

i get the same thing as candy ... it wants that i trust them to download something ... if people click yes it could download an virus or trojan ... possible

[Tuxedo Jack]

That was me who e-mailed you about that.

Anyways, I wrote up a description of what it's trying to install.

Here it is, straight from spywareinfo.com:

Okay, after a through scanning by AVG, HJT, and a crowbar, the .xpi file does the following:

- Installs bridge.dll _without_ the DPF file, so you can't use Add/Remove to get rid of it
- Installs bi.dll
- Installs %SystemRoot%\a.exe, which is a variant of PSW.Briss.A (AVG)
- Installs PSW.Bispy.B (AVG)

This appears to be a simple hijacker with a nasty twist - password stealers. If you think you're infected by this, please use Trend Micro's Housecall (it's in my signature) or a comparable virus cleaner to remove them from your machine.

If you're in doubt, please post an HJT log in the forums.

These hijacks only affect Internet Explorer. However, the rats at Flingstone have come up with a .xpi file to infect people who use Mozilla/Firefox. A plugin called "Free Access Plugin" is kinda phoney, y'know?

I know advertising makes up a lot of your revenue. Just how much does AWP cost, bandwidth-wise? I may be able to find you a cheaper host, one that won't make you depend on scumsuckers like Flingstone, Cydoor, and ABetterInternet to survive.

By the way, this screenshot is what you get when the bit pops up in a Mozilla program.

And no, I'm running Windows 2000 Professional.

In reference to the SWI post, here's the thread on it:

http://www.spywareinfo.com/forums/in...howtopic=40247

[souichi tsujii]

Here's what I get.

[Sweet_Angel]

I get the same thing.

[escaflownemoon]

yes this is what I get too. And plus it doesn't go away easily.

[Tuxedo Jack]

No, it doesn't.

To remove it, you require the following:

- HijackThis 1.97.7 (from http://www.tomcoyote.org/hjt)
- Knowledge of what are legitimate files in Windows and what aren't
- Reboots into Safe Mode
- A good antivirus scanner (preferably Grisoft's AVG or NOD32)

If you've got it, put up a HijackThis log at the SpywareInfo forums and we'll clean your computer for you.

[Xian Pu]

Is this something?

[EternalBlue]

Yea that pops up all the time, however, sometimes my virus-scan picks up a trojan right when I enter AW...I'llt ry to get a screenshot next time it pops up with the virus message.

[Spartibus]

crzy

[MistressPookyChan]

Ok, so it looks like the pop-ups won't do anything to you unless you agree to download something. So when you get a pop-up from anywhere, never press the "yes" button and don't agree to download anything. In other words, be cautious!

[darkparrot]

Its a good idea just to disable it in your options. FireFox/Mozilla help with problems like this.

[jumomo]

i cant disable it since i use that function often ...

[darkparrot]

Then, that leads to what MistressPookyChan said.

[wizz-o-matic]

Hehe, agree Mozilla FireFox is realy great

[EternalBlue]

I finally got a screenshot of that pesky virus I was getting from AW.com. (and no I did not hit the "yes" button, cause that's pretty stupid)

[AnimeMatrix]

I'm continously getting redirected to another website every time when I go to an certian section of your website so say I wanted to go and have a look at Outlaw Star Wallpapers I get this Window box saying "You must click yes to view this site" I click ok and I get redirected to another site!
http://bar.mywebsearch.com/bartools.html?p...er=ZRxdm185&w=r
its starting to piss me off!!!!!! :angry: :angry: :angry: is there any way on how to get rid of it or atleast Stop it from making me get redirected?

[escaflownemoon]

hmm you're right..it must that bug... I think Pooky is working on it when ever she has the time to.

[AnimeMatrix]

well it better be a quick fix... cuz some people are gonna go nuts over it...

[MistressPookyChan]

I have tried contacting pmak (the owner of animewallpapers) to tell him about the problem but I don't know if he has read my messages to him or not. I cannot fix it myself, so I need to have pmak do it. I will keep ya'll updated as to what is going on.

[MistressPookyChan]

Getting major pop-ups? Got a virus after visiting the site?

Please post technical concerns and issues in this thread! This will make it easier for the AW.com admin to check out the problems.

This thread is not for talking about the wallpapers themselves, only technical issues with the site. Thanks!!


**all previous discussions about viruses will be moved to this thread**