Audio site Danger Trojan - diyAudio
Go Back   Home > Forums > Member Areas > The Lounge

The Lounge A place to talk about almost anything but politics and religion.

Please consider donating to help us continue to serve you.

Ads on/off / Custom Title / More PMs / More album space / Advanced printing & mass image saving
Reply
 
Thread Tools Search this Thread
Old 6th February 2012, 04:33 PM   #1
diyAudio Member
 
Join Date: Dec 2010
Default Audio site Danger Trojan

I went to Audiogon twice this weekend and was attacked by a trojan both times. No not a mean greek. They have been running a beta version of the new website apparently. Two times scanning thru listings I was attacked by a trojan that disables antivirus and pretends to be the same. Both times I was able to spend a few hours and defeat it, but it is a PITA to remove. If you go there and get a popup about allowing site to download something to you, click out of there fast! immediately!, it will get in without you approving anything. So far they have not responded to my complaints. I was goning thru IE, not firefox or something. I don't think I will test it to see!

Last edited by wazz; 6th February 2012 at 06:02 PM.
  Reply With Quote
Old 6th February 2012, 04:59 PM   #2
diyAudio Member
 
Wavebourn's Avatar
 
Join Date: Sep 2006
Location: Pleasant Hill, CA
Send a message via Skype™ to Wavebourn
Is it Windows-specific horse, or something based on flexibility of browsers and Java?
__________________
The Devil is not so terrible as his math model is!
  Reply With Quote
Old 6th February 2012, 06:00 PM   #3
diyAudio Member
 
Join Date: Dec 2010
I believe it must have gotten in on Java, based on the line of data in the antivirus scan showing what had been fixed. I thought I got it the first time from cllcking a picture from a seller in Singapore, but the second time I was just scanning the listings like I was the first. Popup asked if I wanted to run some program from the site, I clicked cancel or deny or some such but it still took over. Another audio forum replies mentioned that others had had problems from that site very recently. I am not flaming them or something, I have been a member there for a long time but recently have not been going there much. This weekend was the first time I saw the new beta version of it. I had to run safe mode and displayed the list of programs installed, and selected "repair" for the antivirus program before it would function again. Then it did some sort of special safe mode startup and scanned everything to get rid of the trojan.
  Reply With Quote
Old 6th February 2012, 08:20 PM   #4
adason is offline adason  United States
diyAudio Member
 
adason's Avatar
 
Join Date: Nov 2004
Location: Maryland
my antivirus program warned me about the attack too, when I went to AudiogoN page
and I was not able to make posting, weird things were happening, I uploded pictures, filled out the title, zip, price, all the details, went to preview and half was it was blank...red mark all over that those fields are required, and I just filled them
it was all messed up in internet explorer
mozzila worked fine
  Reply With Quote
Old 6th February 2012, 08:58 PM   #5
tvrgeek is offline tvrgeek  United States
diyAudio Member
 
Join Date: Dec 2009
Location: Md
Has anyone notified them?
  Reply With Quote
Old 6th February 2012, 09:30 PM   #6
a.wayne is offline a.wayne  United States
Sin Bin
 
Join Date: May 2008
Location: Front Row Center
Regardless, people should stay away from Audiogon ... PERIOD !!!!
  Reply With Quote
Old 6th February 2012, 09:44 PM   #7
CBS240 is offline CBS240  United States
diyAudio Member
 
CBS240's Avatar
 
Join Date: Aug 2005
Location: K-town
Is it the Win7 2012 virus? There is a Vista version as well. It pretends to be some sort of anti-virus program that says your infected and tries to do a scan. I thought I had gotten it, but it must have already infected in other places and it slipped by. Screwed thing up pretty well. Fourtunately I backup. It is some sort of pain in the as$ to try and get rid of tho, slightly more than Freeze Frog. That one is a bit of a niusence if you ever get it.
__________________
All the trouble I've ever been in started out as fun......
  Reply With Quote
Old 6th February 2012, 09:47 PM   #8
Zen Mod is offline Zen Mod  Serbia
diyAudio Member
 
Zen Mod's Avatar
 
Join Date: Jan 2003
Location: ancient Batsch , behind Iron Curtain
Tim Rawson influence ?
Attached Images
File Type: gif buehehe.gif (33.3 KB, 221 views)
File Type: gif hyper.gif (5.3 KB, 219 views)
__________________
my Papa is smarter than your Nelson !
clean thread; Cook Book;PSM LS Cook Book;Baby DiyA ;Mighty ZM's Bloggg;Papatreasure;Papa... by Mighty ZM
  Reply With Quote
Old 6th February 2012, 09:56 PM   #9
diyAudio Member
 
mr2racer's Avatar
 
Join Date: Jul 2009
I had a problem with a similar program about a year ago. It started as one of those free scan programs. Best thing is to pull the plug on the computer. It seems extreme but it copies and hides really fast. McAfee was helpless. The only program I found that worked was Malwarebytes. IF it isn't in the computer. Malwarebytes is free to download. I keep a copy on a flash drive because the worm will shutdown most anti-virus software already installed on the hard drive.
  Reply With Quote
Old 7th February 2012, 02:52 AM   #10
diyAudio Member
 
Join Date: May 2010
Quote:
Originally Posted by wazz View Post
I believe it must have gotten in on Java, based on the line of data in the antivirus scan showing what had been fixed. I thought I got it the first time from cllcking a picture from a seller in Singapore, but the second time I was just scanning the listings like I was the first. Popup asked if I wanted to run some program from the site, I clicked cancel or deny or some such but it still took over...
[snip]
From your description that sounds like a JavaScript vector.

There is no need to run Java (a multiplatform application technology from Sun Microsystems) in a web browser unless you want to run online Java applications, like some calculators. I generally disable it in all my browsers; if I come upon some need for it, I re-enable and restart the browser.

Turn it off and restart again after I'm done. You normally do not encounter Java in an average day (or week, or month) of web browsing. There are many people who have never used it in their lifetime on the 'net.

JavaScript, however, is a scripting language that runs in virtually all web pages that offer topical content, or allow you to post comments, etc. It's difficult to disable JavaScript and surf without issues; you probably could not post in a forum without it enabled.

Some plugins (eg "NoScript" for Firefox) allow you to disable JavaScript on a site-specific basis. There are broadly similar browser add-ons for most web browsers commonly used, regardless of the Operating System (OS).

But, back to the point ... Java is not JavaScript, and vice versa. They are so different they have nothing whatsoever in common with each other; the similar name is an unfortunate circumstance.

So, if you do mean JavaScript, please describe it as such. At least that way, we're not compounding the confusion that exists out there.
__________________
" ... Go back to the beginning of a technology before the priesthood was established; that was the time when people were communicating information, not proving why there needs to be Priests. This is why the old texts tend to be so good. ..."

Last edited by Johnny2Bad; 7th February 2012 at 03:03 AM.
  Reply With Quote

Reply


Hide this!Advertise here!
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Trojan warnings? Russellc Pass Labs 37 25th April 2010 04:50 AM
Scammer Alert!! Danger!! Danger!! Steve M Swap Meet 6 16th September 2009 01:33 PM
Supro S6616 Trojan Tremolo Help 1965 KP11520 Instruments and Amps 17 21st February 2009 04:05 AM
Car Audio Danger Timn8ter Subwoofers 1 1st August 2007 02:10 PM
Used audio Site timcatn Everything Else 1 25th August 2006 08:22 PM


New To Site? Need Help?

All times are GMT. The time now is 01:43 AM.


vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2014 DragonByte Technologies Ltd.
Copyright 1999-2014 diyAudio

Content Relevant URLs by vBSEO 3.3.2