Go Back   Home > Forums > >
Home Forums Rules Articles diyAudio Store Blogs Gallery Wiki Register Donations FAQ Calendar Search Today's Posts Mark Forums Read

The Lounge A place to talk about almost anything but politics and religion.

Audio site Danger Trojan
Audio site Danger Trojan
Please consider donating to help us continue to serve you.

Ads on/off / Custom Title / More PMs / More album space / Advanced printing & mass image saving
Reply
 
Thread Tools Search this Thread
Old 6th February 2012, 03:33 PM   #1
wazz is offline wazz
diyAudio Member
 
Join Date: Dec 2010
Default Audio site Danger Trojan

I went to Audiogon twice this weekend and was attacked by a trojan both times. No not a mean greek. They have been running a beta version of the new website apparently. Two times scanning thru listings I was attacked by a trojan that disables antivirus and pretends to be the same. Both times I was able to spend a few hours and defeat it, but it is a PITA to remove. If you go there and get a popup about allowing site to download something to you, click out of there fast! immediately!, it will get in without you approving anything. So far they have not responded to my complaints. I was goning thru IE, not firefox or something. I don't think I will test it to see!

Last edited by wazz; 6th February 2012 at 05:02 PM.
  Reply With Quote
Old 6th February 2012, 03:59 PM   #2
Wavebourn is offline Wavebourn  United States
Designer & Technologist
diyAudio Member
 
Wavebourn's Avatar
 
Join Date: Sep 2006
Location: Pleasant Hill, CA
Audio site Danger Trojan
Is it Windows-specific horse, or something based on flexibility of browsers and Java?
__________________
Nothing in the universe is perfect. The ideal things are the ones that are most optimal. Optimization criteria, what matters. When I hear "No Compromise Design", I want to take a sledgehammer and test how impact-proof it is.
  Reply With Quote
Old 6th February 2012, 05:00 PM   #3
wazz is offline wazz
diyAudio Member
 
Join Date: Dec 2010
I believe it must have gotten in on Java, based on the line of data in the antivirus scan showing what had been fixed. I thought I got it the first time from cllcking a picture from a seller in Singapore, but the second time I was just scanning the listings like I was the first. Popup asked if I wanted to run some program from the site, I clicked cancel or deny or some such but it still took over. Another audio forum replies mentioned that others had had problems from that site very recently. I am not flaming them or something, I have been a member there for a long time but recently have not been going there much. This weekend was the first time I saw the new beta version of it. I had to run safe mode and displayed the list of programs installed, and selected "repair" for the antivirus program before it would function again. Then it did some sort of special safe mode startup and scanned everything to get rid of the trojan.
  Reply With Quote
Old 6th February 2012, 07:20 PM   #4
adason is offline adason  United States
diyAudio Member
 
adason's Avatar
 
Join Date: Nov 2004
Location: Maryland
my antivirus program warned me about the attack too, when I went to AudiogoN page
and I was not able to make posting, weird things were happening, I uploded pictures, filled out the title, zip, price, all the details, went to preview and half was it was blank...red mark all over that those fields are required, and I just filled them
it was all messed up in internet explorer
mozzila worked fine
  Reply With Quote
Old 6th February 2012, 07:58 PM   #5
tvrgeek is offline tvrgeek  United States
diyAudio Member
 
Join Date: Dec 2009
Location: Md
Has anyone notified them?
  Reply With Quote
Old 6th February 2012, 08:30 PM   #6
a.wayne is offline a.wayne  United States
Sin Bin
 
Join Date: May 2008
Location: Front Row Center
Regardless, people should stay away from Audiogon ... PERIOD !!!!
  Reply With Quote
Old 6th February 2012, 08:44 PM   #7
CBS240 is offline CBS240  United States
diyAudio Member
 
CBS240's Avatar
 
Join Date: Aug 2005
Location: K-town
Is it the Win7 2012 virus? There is a Vista version as well. It pretends to be some sort of anti-virus program that says your infected and tries to do a scan. I thought I had gotten it, but it must have already infected in other places and it slipped by. Screwed thing up pretty well. Fourtunately I backup. It is some sort of pain in the as$ to try and get rid of tho, slightly more than Freeze Frog. That one is a bit of a niusence if you ever get it.
__________________
All the trouble I've ever been in started out as fun......
  Reply With Quote
Old 6th February 2012, 08:47 PM   #8
Zen Mod is offline Zen Mod  Serbia
Official Court Jester
diyAudio Member
 
Zen Mod's Avatar
 
Join Date: Jan 2003
Location: ancient Batsch , behind Iron Curtain
Audio site Danger Trojan
Tim Rawson influence ?
Attached Images
File Type: gif buehehe.gif (33.3 KB, 223 views)
File Type: gif hyper.gif (5.3 KB, 221 views)
__________________
my Papa is smarter than your Nelson !
clean thread; Cook Book;PSM LS Cook Book;Baby DiyA ;Mighty ZM's Bloggg;Papatreasure;Papa... by Mighty ZM
  Reply With Quote
Old 6th February 2012, 08:56 PM   #9
mr2racer is offline mr2racer  United States
diyAudio Member
 
mr2racer's Avatar
 
Join Date: Jul 2009
I had a problem with a similar program about a year ago. It started as one of those free scan programs. Best thing is to pull the plug on the computer. It seems extreme but it copies and hides really fast. McAfee was helpless. The only program I found that worked was Malwarebytes. IF it isn't in the computer. Malwarebytes is free to download. I keep a copy on a flash drive because the worm will shutdown most anti-virus software already installed on the hard drive.
  Reply With Quote
Old 7th February 2012, 01:52 AM   #10
Johnny2Bad is offline Johnny2Bad  Canada
diyAudio Member
 
Join Date: May 2010
Quote:
Originally Posted by wazz View Post
I believe it must have gotten in on Java, based on the line of data in the antivirus scan showing what had been fixed. I thought I got it the first time from cllcking a picture from a seller in Singapore, but the second time I was just scanning the listings like I was the first. Popup asked if I wanted to run some program from the site, I clicked cancel or deny or some such but it still took over...
[snip]
From your description that sounds like a JavaScript vector.

There is no need to run Java (a multiplatform application technology from Sun Microsystems) in a web browser unless you want to run online Java applications, like some calculators. I generally disable it in all my browsers; if I come upon some need for it, I re-enable and restart the browser.

Turn it off and restart again after I'm done. You normally do not encounter Java in an average day (or week, or month) of web browsing. There are many people who have never used it in their lifetime on the 'net.

JavaScript, however, is a scripting language that runs in virtually all web pages that offer topical content, or allow you to post comments, etc. It's difficult to disable JavaScript and surf without issues; you probably could not post in a forum without it enabled.

Some plugins (eg "NoScript" for Firefox) allow you to disable JavaScript on a site-specific basis. There are broadly similar browser add-ons for most web browsers commonly used, regardless of the Operating System (OS).

But, back to the point ... Java is not JavaScript, and vice versa. They are so different they have nothing whatsoever in common with each other; the similar name is an unfortunate circumstance.

So, if you do mean JavaScript, please describe it as such. At least that way, we're not compounding the confusion that exists out there.
__________________
" ... Go back to the beginning of a technology before the priesthood was established; that was the time when people were communicating information, not proving why there needs to be Priests. This is why the old texts tend to be so good. ..."

Last edited by Johnny2Bad; 7th February 2012 at 02:03 AM.
  Reply With Quote

Reply


Audio site Danger TrojanHide this!Advertise here!
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Trojan warnings? Russellc Pass Labs 37 25th April 2010 03:50 AM
Scammer Alert!! Danger!! Danger!! Steve M Swap Meet 6 16th September 2009 12:33 PM
Supro S6616 Trojan Tremolo Help 1965 KP11520 Instruments and Amps 17 21st February 2009 03:05 AM
Car Audio Danger Timn8ter Subwoofers 1 1st August 2007 01:10 PM
Used audio Site timcatn Everything Else 1 25th August 2006 07:22 PM


New To Site? Need Help?

All times are GMT. The time now is 12:18 PM.


Search Engine Optimisation provided by DragonByte SEO (Pro) - vBulletin Mods & Addons Copyright © 2018 DragonByte Technologies Ltd.
Resources saved on this page: MySQL 15.00%
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2018 DragonByte Technologies Ltd.
Copyright ©1999-2018 diyAudio
Wiki