Sirenia
2012-04-14 10:57:31
Heya its me trembling around on the forums again and I think I might got a Drive by. On a thread a guy posted a Imagehacks link with a pic on a problem he got with a bot and 1min later a guy posted that the link was a driveby and no1 should click it… Ive uninstalled java, not logged into anything after I clicked it, deleted every single Temp file on my computer with CCleaner and doing a scan with malwarebytes PRO, anything else I should do? A reformat isnt possible until monday for me since I got important work on my computer that has to be finished until I can reformat. Am I safe after the scan if it cant find anything? Please I need help :/ I got a bank on 800m so I dont even dare to log on Runescape atm :(
weequ
2012-04-14 11:05:23
Did you get a warning like Allow/deny this applet to run? (Like you get on runescape when you play for the first time)
Also I doubt uninstalling java will help as the drive by downloads and executes .exe file.
Oxygen
2012-04-14 11:05:37
Change your graphics card (if you are willing) some of those can stay in your graphics card memory and avoid the ccleaner scans. then you log in and they get you
Sirenia
2012-04-14 11:07:36
From: weequ
Did you get a warning like Allow/deny this applet to run? (Like you get on runescape when you play for the first time)
Also I doubt uninstalling java will help as the drive by downloads and executes .exe file.
I got a warning but the box was just white so i just X'ed it down :/
EDIT: I neither clicked deny or accept
I clicked the exact same link
In fact he posted it on my thread :p
Solution: No virus got downloaded on mine. There was no popup asking to me download anything. I also have Malwarebytes Anti-malware Pro and it came up with no virus's - I trust this anti-virus more than anything so I wouldn't worry.
Sirenia
2012-04-14 11:12:10
From: abu_jwka
I clicked the exact same link
In fact he posted it on my thread :p
Solution: No virus got downloaded on mine. There was no popup asking to me download anything. I also have Malwarebytes Anti-malware Pro and it came up with no virus's - I trust this anti-virus more than anything so I wouldn't worry.
It was not on ur thread, it was on Sockz pray script thread :/
Justin
2012-04-14 11:12:40
If you still don't feel safe, give your computer a fresh install of Windows
Sirenia
2012-04-14 11:13:44
From: Sirenia
It was not on ur thread, it was on Sockz pray script thread :/
Oh well there was an imageshack java driveby on my thread as well - probably posted by the same user :cartman:
Rushera
2012-04-14 11:14:41
If you didnt click RUN ur probarly 100% safe..
Imanoobbot
2012-04-14 11:16:19
From: Sirenia
Heya its me trembling around on the forums again and I think I might got a Drive by. On a thread a guy posted a Imagehacks link with a pic on a problem he got with a bot and 1min later a guy posted that the link was a driveby and no1 should click it… Ive uninstalled java, not logged into anything after I clicked it, deleted every single Temp file on my computer with CCleaner and doing a scan with malwarebytes PRO, anything else I should do? A reformat isnt possible until monday for me since I got important work on my computer that has to be finished until I can reformat. Am I safe after the scan if it cant find anything? Please I need help :/ I got a bank on 800m so I dont even dare to log on Runescape atm :(
Are you talking about the link on the ZMI-Extreme thread?
From: Sirenia
It was not on ur thread, it was on Sockz pray script thread :/
It was posted on Zmi thread by someone called XScripter or something like that I think.
Sirenia
2012-04-14 11:16:34
From: Rushera
If you didnt click RUN ur probarly 100% safe..
I got the security warning it was empty, nothing to click or read in it so i just X'ed down the warning, do you think im infected?
From: Imanoobbot
Are you talking about the link on the ZMI-Extreme thread? I clicked that too??!
AHAHAHAH he probably spammed posted it.
DON'T PANIC, REMAIN CALM. IF YOU DIDN'T CLICK RUN OR DOWNLOAD THEN YOU DIDN'T GET ANY VIRUS :D
Justin
2012-04-14 11:18:42
From: Sirenia
I got the security warning it was empty, nothing to click or read in it so i just X'ed down the warning, do you think im infected?
It depends, they could of coded it so the red X was the accept button. Scan with the link I posted.
Imanoobbot
2012-04-14 11:19:23
From: abu_jwka
AHAHAHAH he probably spammed posted it.
DON'T PANIC, REMAIN CALM. IF YOU DIDN'T CLICK RUN OR DOWNLOAD THEN YOU DIDN'T GET ANY VIRUS
:D
I am on Mac so normally I got no problem with these stuff ;)
* So I am checking all the sites via mac and using Runescape or better Simba due to a VM Ware.
Sirenia
2012-04-14 11:19:49
From: abu_jwka
AHAHAHAH he probably spammed posted it.
DON'T PANIC, REMAIN CALM. IF YOU DIDN'T CLICK RUN OR DOWNLOAD THEN YOU DIDN'T GET ANY VIRUS
:D
The panic was over a couple mins ago, I think I lost alot of diffrent work on scripts I havent saved yet in my panic :/. Now i just dont want to get cleaned by a keylogger so i want to make sure i am safe
Imanoobbot
2012-04-14 11:24:42
From: Sirenia
The panic was over a couple mins ago, I think I lost alot of diffrent work on scripts I havent saved yet in my panic :/. Now i just dont want to get cleaned by a keylogger so i want to make sure i am safe
No risk no fun ;)
Just kidding. You really should make a mule account. Made the same mistake and lost my whole bank (7b…) . Just keep 100m-500m on your main and the rest always on mule account. It is much safer.
Sirenia
2012-04-14 11:25:20
From: [J]ustin
It depends, they could of coded it so the red X was the accept button. Scan with the link I posted.
Scan is done now and it couldnt find anything, a nice guy gave me a serial for Pro version, dont know if that affects the scan but I think ive done what i can now ?
Justin
2012-04-14 11:31:48
From: Sirenia
Scan is done now and it couldnt find anything, a nice guy gave me a serial for Pro version, dont know if that affects the scan but I think ive done what i can now ?
The serial can only help.
You seem clean.
If you want you can try a system restore just to make sure 100%
nokkasiili
2012-04-14 11:34:07
I clicked this link first i thought that i have to change imagehost because complaining about java, but then figured out whats going on. Didnt get infected because i dont have even java installed on my linux machine.
AideniRS
2012-04-14 11:38:42
Awkward.. I clicked it/Run
From: AideniRS
Awkward.. I clicked it/Run
You're f**ked :)
Download Malwarebytes, that'll do the job like a BOSS
Kyle Undefined
2012-04-14 17:09:11
He spam posted it across the forums, under two accounts. Every post by him has been removed.
When I clicked on the link, and saw the redirected url with the fake Imageshack design, I knew it wasn't legit. Then, Chrome asked me if I wanted to run the Java applet and I clicked No and closed the tab.
Wasn't infected, only way to get infected is if you clicked allow.