seperis: (Default)
seperis ([personal profile] seperis) wrote2009-02-25 12:11 pm
Entry tags:

psa: megaupload and viruses

Heads up on a new and exciting computer virus for downloaders. Quoting from [livejournal.com profile] chopchica here:

[livejournal.com profile] chopchica: Yesterday, I went to megaupload to download a new Merlin vid. I've downloaded from megaupload a billion times and never had a problem but yesterday, I immediately ended up with the Virtumonde/Vundo trojan horse on my computer and I am *totally fucked*. From what I can see out there, a new extremely virulent version appeared yesterday. BE VERY CAREFUL WHEN DOWNLOADING *ANYTHING* right now, but *especially* from megaupload! If you think you have it, turn off your internet access (*all* of it)*immediately*, because goes to the web and downloads new malware to your computer for fun.

[livejournal.com profile] ileliberte: Hi, coming in through surfing my f-flist. I had a Vundo trojan infection recently and the best program to deal with is Malwarebytes. go to malwarebytes.org and you can download the basic program for free. Quick scan usually gets rid of it all but run a complete one just to check up afterwards. It can run on usual startup mode, but if you want to be extra careful, run it on safe mode and it'll get rid of the trojan. Symantec unfortunately doesn't really recognize this virus. Also, beware of windows popping up that look exactly like My computer windows, be sure you don't mistakenly click anything there before you see the url.

ETA: More here from [livejournal.com profile] ileliberte on the virus.

ETA 2: [livejournal.com profile] cat_77 has some more info on AVG antivirus program here.

I'm seconding malwarebytes as a possible solution, as it's the one the tech guy at work bullied me into getting for both my work and home computer and it's caught several things that both McAfee and AdAware missed.

If anyone has any other solutions, please feel free to suggest.
ender24: (Default)

[personal profile] ender24 2009-02-25 09:45 pm (UTC)(link)
I try to avoid catching those viruses by using for a year now
http://jdownloader.org/home/index

if I do not even go to the MU and otherwise sites in the browser, at least, that should save me from their infected ads.
whether or not the files, that i dl, are infected , is at my own risk.

[identity profile] anjak-j.livejournal.com 2009-02-25 11:04 pm (UTC)(link)
Thanks for that rec. That's a handy piece of software.
ender24: (Default)

[personal profile] ender24 2009-02-26 02:39 pm (UTC)(link)
mrshamill below pointed out, that the link i gave, might be "hijacked".
I am not 100% what she means, and asked for clarification, but you might meanwhile want to not use that software, until its clear.

[identity profile] anjak-j.livejournal.com 2009-03-01 10:38 am (UTC)(link)
I've not had any problems with the actual software, though I did have the redirects that [livejournal.com profile] mrshamill described. I just downloaded it from somewhere else instead by searching Google.
ender24: (Default)

thanks for letting me know!

[personal profile] ender24 2009-03-01 12:47 pm (UTC)(link)
i think, I will write them and let them know about the redirect problem!
ext_1810: (Default)

[identity profile] mrshamill.livejournal.com 2009-02-25 11:11 pm (UTC)(link)
That sounds like a handy app but the link you provided was hijacked. I've got adblock on Firefox which helped, but it looks like their site might have been infiltrated by a BHO. I was able to get more info by choosing their FAQ immediately, though.
ender24: (Default)

[personal profile] ender24 2009-02-26 02:37 pm (UTC)(link)
what exactly do you mean with "Hijacked" ?
coz when I clicked on the link i gave, it takes me exactly to the site, that it was intended to go, and I have adblock plus on FF , too.
ext_1810: (Default)

[identity profile] mrshamill.livejournal.com 2009-02-26 03:24 pm (UTC)(link)
It might have been my browser then... when I clicked on the link, it took me to what looked like a quasi-adult site. I clicked back and it redirected me again. I clicked back again and I got Google. This happened a couple of times.

Hmm. Maybe I need to run Spybot. I'm not getting hijacked on anything else, though, which is weird.
ender24: (Default)

that is really strange

[personal profile] ender24 2009-02-26 04:16 pm (UTC)(link)
i dont get redirected, and no adult site here..
but thank you for your warning, i will test tonight on my own computer at home, as well as in different browsers, to see if i get that redirecting somewhere else.
ender24: (Default)

ok, i ran a scan with malwarebytes

[personal profile] ender24 2009-02-27 12:48 pm (UTC)(link)
on my homecomputer last night, and no findings.

and I tried my link above in several browsers (FF, IE, Maxthon) and it opened fine, no adult sites ...

have you checked again?
ext_1810: (Default)

Re: ok, i ran a scan with malwarebytes

[identity profile] mrshamill.livejournal.com 2009-02-27 11:59 pm (UTC)(link)
Yeah, I just did, and this is bizarre! The first time, it redirected me to Reliance Global Call, then to Google. Then it kept trying to redirect me to various sites (park.winvista, travel.infogate.net, freehosting.blogsite, jump.epac.com, chat.pbmessaging.com) but none of them went all the way through. I had my husband try from his iMac and he got redirected too, but just once, after that he was clear.

Weird stuff! But it's not bad, not porno sites or infected sites, so I have no idea what's gong on. Chalk it up to a crazy intarweebs thing!
ender24: (Default)

thanks again!

[personal profile] ender24 2009-03-01 02:19 pm (UTC)(link)
this is really bizarre, also, the person above, who saw my link, also got redirected once, and then not again.
though, if you are sure, its no porno or infected sites, I am already somewhat relieved, though I wont link to it again, until I know for sure, whats been happening.