Info on viruses and Fake anti-virus software

[Nevermore669]

Yeah, sounds like you did the right thing, and it also sounds like an ad-server issue.

[smalltowncanada]

Hi, I don't know much in way of virus's or how they work. I am currently using Avast and when I click on the link

Code: Select all

http://www5.uploadorb.com:443/q/abu4v4h22lm7rwfocacx7dmd3gv24wojeq3ajyarkohjyfaytuwmy/Being.Human.US.S02E10.HDTV.x264-ASAP.mp4

my antivirus stops me from going there and says that there is malware detected and says that the download is infected with url:Mal

I have never gotten this from this site before, although I have from others. I have always trusted this site and still do... but I'm not sure how to check to see if this is true or not. Today I have also downloaded another show from uploadorb without any problems as well as from other links, but this particular link keeps giving me the warning.

I just wanted to let you know just in case there is something wrong with it. Hope not to upset anyone, just want to keep all safe if I can help it. Thanks for listening. Good luck! and Thanks so much for all your hard work!

[kindnessofothers]

Have not real all the post, so if I am repeating I apologize.
Since the use of the new hosts, AVG has detected a couple of threats. I think both on 180UPLOAD. Has not done damage as far as I can tell.

[bilko321]

Hi all,

Just a warning really, I don't know if its the item the link is associated with or a page you are taken to but my Anti-Virus flashes up as it stopping a Trojan Horse after I click the link. Its the Contraband movie source 2, it's an 180upload link.

[HibbityJibbity]

its not the movie that is warning you, its because you dont have adblock plus installed, its a 3rd party ad that is warning you. Install AdBlock Plus and enjoy.....

[feerles1]

On 2 different occasions yesterday while trying to watch something on a 180 link my virus scanner popped up about a backdoor Trojan. Just thought i would give a heads up to everyone to be careful using their links.

[iszazial]

On 2 different occasions yesterday while trying to watch something on a 180 link my virus scanner popped up about a backdoor Trojan. Just thought i would give a heads up to everyone to be careful using their links.

false positive or your infected already with something similar to TDSS as earlier versions would crawl the web using internet explorer in a kind of ghost mode, this rootkit was a variant of TDL3. Just for due measure I would run Kaspersky TDSS killer which is a free download and double check because I've never seen false positives from 180upload using a wide variety of AV suites. Or maybe your just using an offbeat AV suite that's just a little to over protective.

Edit: Thinking it over, as you mentioned you were getting Trojan warnings which is inline with my rootkit theory. I would really run that TDSS Killer by kaspersky if I were you. Most Antivirus Suites can not detect them so you usually have to rely on third party programs like that or get a fortress like Kaspersky Internet Security, something that has advanced rootkit detection. Unfortunately antivirus programs with these capabilities are hogs on system resources.

[dirk36]

Did you all get the attacks from 180upload?

[volta]

I realise this isn't technically an icefilms problem but let me share this with you regardlessly!

Yesterday I was going to watch a series through a 180upload link and as soon as I clicked play I got a screen which you could not get out of (no alt + f4, no close, minimize etc buttons, nothing).
The screen claimed to be the cyber department of the dutch police (I am in The Netherlands), and said that I had illegal content on my computer, either illegal downloads or child pornography. It listed parts of the law and how much jailtime I would be looking at etc. My webcam turned on and I could see myself 'being recorded'. Then it went on to say that if I didn't transfer 100 euro's via uKash or Paysafe within a day my computer would remain blocked.
I didn't make a screenshot myself and haven't been able to find one exactly like the one I encountered. But this is sort of what it looked like (except that this one is also Belgian-French);
http://4.bp.blogspot.com/-ktK-xbwPo0s/T ... ransom.png

EDIT: Found my version
http://i1171.photobucket.com/albums/r55 ... erland.png

Props to whoever designed that virus, because my version actually looked really legit. Until I came to the section that asked me to transfer 100 euro's ofcourse :P

How to fix
If this happens to you as well, here's what you do.
1. Shut down the computer. You have to do this by holding down the power button, since you won't be able to access the start menu.
2. Restart and choose to enter safe mode with network capabilities/veilige modus met netwerk (not sure if that's the correct english term as well).
3. Go to the start menu >> System Restore (Systeem Herstel). Go through the steps and choose a point in time before the virus infected your computer.
4. Finish all the steps and restart your computer if it doesn't do so automatically.

Also, after this my mozilla would crash after about 15 seconds without fail. So I had to reinstall firefox and it's currently running without any problems. I would also advise running some malware detection or antivirus programme to get rid of the temp files the virus creates.


Didn't know whether to make a separate topic or post it in here, but thought it might help some people out! As far as I've seen this virus only has a dutch, french and belgian version, so I'm not sure how relevant this is for US/UK people.

[Russtronic™]

What was the exact link you clicked on here on Ice?????

[rockingny]

avast, ad block plus, do not track plus, ccleaner, spybot search and destroy and you are golden.