VCDQuality Forums
Show all 8 posts from this thread on one page

VCDQuality Forums (http://www.vcdhq.com/forum/index.php)
- Site News and Discussion (http://www.vcdhq.com/forum/forumdisplay.php?forumid=3)
-- cwgaming software pop-up (http://www.vcdhq.com/forum/showthread.php?threadid=53400)


Posted by OKeddy on 01-06-2005 01:19 PM:

cwgaming software pop-up

Seems to me this pop-up which appears after being on the site a while may be a trojan installer-I have had to remove msshed and atiupdate from my pc shortly after being on the site and closing this pop-up by clicking the X, I now close IE using Ctrl-Alt-Dlt if it appears.
Can you tell me if this pop-up is associated with this site??

Thx


Posted by Neversoft on 01-06-2005 03:26 PM:

It'll be coming from the company that advertises via VCDQuality. There's little we can do to stop the popup without changing advertisers... Either switch browser to Firefox, Opera or Maxthon or if you prefer to stick with Internet Explorer, turn off ActiveX as that's what the ad is using to infiltrate your PC - you only really need ActiveX on rare occaisions such as using Microsoft Update or installing Flash or similar, so turn it off for normal day-to-day use.

__________________
Statistically... 9 out of 10 people actually enjoy gang rape.


Posted by xplatinum on 01-10-2005 08:16 AM:

Scan type: Auto-Protect Scan
Event: Threat Found!
Threat: Download.Trojan
File: C:\Documents and Settings\...\Application Data\Mozilla\Firefox\Profiles\DefaultProfile\Cache
\484DDDCAd01
Location: C:\Documents and Settings\...\Application Data\Mozilla\Firefox\Profiles\DefaultProfile\Cache

Computer: ...
User: xplatinum
Action taken: Clean failed : Quarantine failed : Delete succeeded : Access denied
Date found: Monday, January 10, 2005 2:13:39 AM


Posted by Neversoft on 01-10-2005 08:35 PM:

ok... I'll repeat this for the "hard of understanding"

You can copy/paste from Norton AV as much as you want, it doesn't alter the fact that we can't do shit about it.

IT IS SPYWARE FROM ONE OF THE SITES ADVERTISERS AND ***NOTHING*** CAN BE DONE TO PREVENT IT WITHOUT LOSING THAT ADVERTISER. FOR BETTER PROTECTION, TURN OFF ACTIVEX IN INTERNET EXPLORER OR USE AN ALTERNATE BROWSER SUCH AS FIREFOX, MAXTHON OR OPERA

(although, Firefox MAY also offer to download the package if posts in the General Discussion forum are anything to go by)

__________________
Statistically... 9 out of 10 people actually enjoy gang rape.


Posted by Dwaggy on 01-11-2005 05:56 AM:

this has to be an american only ad ( the ad system delivers specific ads to specific regions ), as i've never seen this shit.

__________________



i have sigs off


Posted by Evelram on 01-12-2005 03:56 AM:

The Fix for active x content

Copy and paste the part in bold below into Notepad.

Save this text as RemoveDomains.reg. Make sure the "Save as type:" is "All Files (*.*)" and save it to your desktop.

Double-click on RemoveDomains.reg. When it prompts you if you want to merge the information to the registry click Yes.


REGEDIT4

; Filename: RemoveDomains.reg
;
; Provider: LineOFire

[- HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre
ntVersion\Internet Settings\ZoneMap\Domains]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr
entVersion\Internet Settings\ZoneMap\Domains]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr
entVersion\Internet Settings\ZoneMap\Domains\*.frame.crazywinnings.com]
"http"=dword:00000004

Also doing a Nslookup on the domain "crazywinnings.com" you will be given it's ip, maybe a idea to totally block that ip (81.23.227.66) on your firewalls.


Posted by OKeddy on 01-22-2005 12:20 PM:

Thanks for the info Everlam.


Posted by fatfecker on 05-20-2005 03:35 PM:

quote:
Originally posted by Neversoft
(although, Firefox MAY also offer to download the package if posts in the General Discussion forum are anything to go by)
add the fact that the location he specifed is the Firefox cache directory I would say this is another chance for you to gloat about Maxthon


All times are GMT. The time now is 07:22 AM.
Show all 8 posts from this thread on one page

Powered by: vBulletin Version 2.3.0
Copyright © Jelsoft Enterprises Limited 2000 - 2002.