View Full Version : Virus attack? Help me
kmryu
11-20-2004, 02:18 AM
Anybody help me i've get this virus detection everytime i come here in hongfire ? any suggestion for me what happen to my com? when i visit other web these er. not appear?
DrWise
11-20-2004, 02:23 AM
I think there can be 2 main reasons :
- your antivirus is out-of-date (or not a good one...)
- your antivirus itself is infected.
nick64
11-20-2004, 02:26 AM
from today, i kept getting errors from Hongfire, Zonealarm keeps wanting me to open the gates for a 'bla.exe.
Errors on Hongfire = bad :(
desmand
11-20-2004, 02:48 AM
Update ur windows to Sp2...this problem would be solve..
moumura
11-20-2004, 03:18 AM
Ive got this problem too.SP2...it will make my BT so slow...
vador
11-20-2004, 03:48 AM
from today, i kept getting errors from Hongfire, Zonealarm keeps wanting me to open the gates for a 'bla.exe.
Errors on Hongfire = bad :(
I saw the same but I am using kerio as firewall and AVG antivirus. This one has detected yesterday a worm called "Bofra" and it's now in quarantine.
I strongly recommand everyone here to make every update possible on your protection systems...
Zhenn Rodus
11-20-2004, 04:24 AM
I'm using firefox. doesn't seem to be affecting me X_X
AnimeJanai
11-20-2004, 04:38 AM
Perhaps one of the advertising banners had something trying to come in through it???
Shragei
11-20-2004, 05:00 AM
Bofra is a MyDoom variant. It tries to exploit a problem with IFRAME tag in IE. The only thing that uses iframes on hongfire is the ads.
http://securityresponse.symantec.com/avcenter/venc/data/w32.bofra.e@mm.html
http://www.securityfocus.com/bid/11515/discussion/
S&T Kawaii Love
11-20-2004, 05:04 AM
Shragei is right, it looks like the virus doe snot do much harm. Maybe this link helps too:
http://uk.trendmicro-europe.com/enterprise/security_info/ve_detail.php?id=66612&VName=HTML_IFRAMEBOF.A&VSect=O
kmryu
11-20-2004, 08:17 AM
Thanks every body i'll try to re-install my sp 2 and my antivirus again ... and if my problem still not slove i'll be here again sonotokiha onegaisimasu m(_ _)m
Update ur windows to Sp2...this problem would be solve..
SP2 is evil. It's full of bugs, and also disabled some of my hacks... I uninstalled it immediately.
Also, nobody with a sane mind should be browsing the net with IE. Firefox is the only web browser you need.
HongFire
11-20-2004, 09:38 AM
Thanks for reporting I will fix this. It's weired that i never had this problem i am using Ie and latest norton. But i will find out the problem.
KarumA
11-20-2004, 10:48 AM
i'fe never had it..
could be the adverrts then, my windows bloks all adverts and pop up's..
i got a virus from the fruits basket official site o.O;
witch was verry strange though, could be like what happend on the official fruits basket site, it was the same message i got..
and after puzzeling it out it placed a troyan in my windows part..
jsnut
11-20-2004, 04:53 PM
Get the ads removal software like Norton Ad Blocking and you're all set. BTW, I'm still using IE and I don't think I'm insane. :D
Hisoka09
11-20-2004, 06:01 PM
from today, i kept getting errors from Hongfire, Zonealarm keeps wanting me to open the gates for a 'bla.exe.
Errors on Hongfire = bad :(
Same thing happened. When I got onto the forums IE would freeze after 5 seconds and than internet explorer would close itself automatically. Than I would see a exe called bla.exe in my C drive main directory. This is indeed a trojan and gave me such a headache. :mad:
celestialsoliloquy
11-20-2004, 06:13 PM
primarily, i would suggest to either install a form of ad-blocking software, or if you are already in an advanced stage of security breach, an ad-removing program capable of removing trojans. however, i usually find it sufficient to use the program ad-aware one time and discover most malware ads blocked from functioning and restraining the computer as well as the internet explorer program.
Shragei
11-20-2004, 07:19 PM
found out what the bla.exe is. Its a downloader program. It tries to download another program from the internet. What it downloads I don't know but its more than likly spyware/adware
Desmonthes
11-21-2004, 06:10 AM
another name is winampa.exe, i have it on comp on Sat from HF :(
HongFire
11-21-2004, 08:09 AM
I am very sorry about that virus. I have virus program installed but it never warn them about that virus. Then i figured it might be 1 of the ads that is infected instead of all. I contacted the banner company and they detected and removed the virus now. It should have no problem now but please report or email us If you notice the virus again. Thanks for reporting this to me.
Also hongfire.com never run popups if you notice popups from hongfire.com please report it also thanks. :)
desmand
11-21-2004, 08:13 AM
Wat Version of Zone Alarm u using? I got no problem at all...
jarjar
11-21-2004, 08:14 AM
Hmz, this was also standing today in a dutch newspaper, it is indeed a virus in the ads
Hisoka09
11-21-2004, 09:57 AM
Normally Pc-cillin would quarantine any trojans and malacious code but it could not detect it. I had to use an online tool to scan the "bla.exe". Make sure you go to symantec website to get instructions on how to remove it since it enters some stuff into the registery.
kakunou
11-21-2004, 04:40 PM
This hit Slashdot and The Register. Thank you, Google News.
Worm Exploit Distributed by Advertising Network (http://it.slashdot.org/it/04/11/21/2247232.shtml?tid=220&tid=113&tid=172)
*natsumi huggles Firefox 1.0, Adblock, and HOSTS file*