Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8
961 posts

Ultimate Geek

Trusted

  Reply # 507887 17-Aug-2011 13:16
Send private message

Ragnor: So it sounds like the ad server got compromised which led to a java (not javascript) applet being served to the browser in the metservice pages, the applet used an exploit the java vm to install personal shield pro on the machine.

Nasty.?

Might pay to update java http://www.java.com/en/download/?


well, javascript injected at metservice, lead browsers to java applet.

anyone know which OSes could be infected with the final virus? How cross platform was the payload?

BDFL - Memuneh
59590 posts

Uber Geek
+1 received by user: 10762

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 507888 17-Aug-2011 13:17
Send private message

The payload is Windows only.

I didn't see anything because I don't have Java installed on my system ;)






 
 
 
 


wjw

162 posts

Master Geek
+1 received by user: 3


  Reply # 507890 17-Aug-2011 13:19
Send private message

From another website I'm on:

http://deletemalware.blogspot.com/2011/07/how-to-remove-personal-shield-pro.html

Two people so far have said this removal process works

1420 posts

Uber Geek
+1 received by user: 315

Trusted

  Reply # 507906 17-Aug-2011 13:39
Send private message

freitasm: The payload is Windows only.

I didn't see anything because I don't have Java installed on my system ;)




Interesting. We got a new laptop last month and haven't yet installed java on it either - there seems to be less and less reason for a consumer pc to have java installed anymore?  My reason was mainly to not have those annoying java updates every few weeks, but if there's security issues aswell then that's another reason.

I need it on my work computer, but for home use, it seems like we don't. (btw, we don't play minecraft..)

780 posts

Ultimate Geek
Inactive user


  Reply # 507912 17-Aug-2011 13:45
Send private message

I use an adblocker, would this have stopped the metservice virus?

My machine is fully patched and Microsoft security essentials up to date. Does this protect too?

If not, how do I know if my machine has this metservice virus? I've not noticed any strange behaviour yet.


[edit] And metservice should warn people on their main webpage, including a link to removal instructions. 

3886 posts

Uber Geek
+1 received by user: 161


  Reply # 507928 17-Aug-2011 13:53
Send private message

wreck90: [edit] And metservice should warn people on their main webpage, including a link to removal instructions. 


+1 Did you email them and suggest that?





Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


780 posts

Ultimate Geek
Inactive user


  Reply # 507937 17-Aug-2011 14:09
Send private message

DonGould:
wreck90: [edit] And metservice should warn people on their main webpage, including a link to removal instructions. 


+1 Did you email them and suggest that?



Nope. However,  I'd feel negligent if my website spread a virus and I didn't warn people .  Thats just me though.  

 

BDFL - Memuneh
59590 posts

Uber Geek
+1 received by user: 10762

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 507941 17-Aug-2011 14:14
Send private message

I wonder if we could have here a quick poll with people's replies: "Which OS were you using when your PC got infected?"

Somehow I'm inclined to think this was all on Windows XP/2003...





147 posts

Master Geek
+1 received by user: 22


  Reply # 508019 17-Aug-2011 15:57
Send private message

johnr: Give me one good reason why TM / NZherald / Met service would spread a virus?

You emailed them they must be rolling around on the floor laughing


Not laughing now, ay?



30 posts

Geek

Trusted

  Reply # 508020 17-Aug-2011 15:57
Send private message

freitasm: I wonder if we could have here a quick poll with people's replies: "Which OS were you using when your PC got infected?"

Somehow I'm inclined to think this was all on Windows XP/2003...



Windows XP

3886 posts

Uber Geek
+1 received by user: 161


  Reply # 508031 17-Aug-2011 16:04
Send private message

freitasm: I wonder if we could have here a quick poll with people's replies: "Which OS were you using when your PC got infected?"

Somehow I'm inclined to think this was all on Windows XP/2003...



Can we start with - how do you detect it and how to you fix it?

What do I need to do to confirm that my users don't have it?  So far I've read that AVG and MSE aren't stopping it.

D




Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


1439 posts

Uber Geek
+1 received by user: 440

Trusted

  Reply # 508036 17-Aug-2011 16:07
Send private message

my sisters laptop was running WinVista Firefox an AVG managed to stop the infection.




11 posts

Geek


  Reply # 508037 17-Aug-2011 16:07
Send private message

Debian Linux 6.0 :)

BDFL - Memuneh
59590 posts

Uber Geek
+1 received by user: 10762

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 508038 17-Aug-2011 16:07
Send private message

If we know what exploit was used, perhaps you can focus your efforts? If you know it's not affecting IE9 on Windows 7 then you know you don't have to spend time on that...





3886 posts

Uber Geek
+1 received by user: 161


  Reply # 508046 17-Aug-2011 16:12
Send private message




Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


1 | 2 | 3 | 4 | 5 | 6 | 7 | 8
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Intel reimagines data centre storage with new 3D NAND SSDs
Posted 16-Feb-2018 15:21


Ground-breaking business programme begins in Hamilton
Posted 16-Feb-2018 10:18


Government to continue search for first Chief Technology Officer
Posted 12-Feb-2018 20:30


Time to take Appleā€™s iPad Pro seriously
Posted 12-Feb-2018 16:54


New Fujifilm X-A5 brings selfie features to mirrorless camera
Posted 9-Feb-2018 09:12


D-Link ANZ expands connected smart home with new HD Wi-Fi cameras
Posted 9-Feb-2018 09:01


Dragon Professional for Mac V6: Near perfect dictation
Posted 9-Feb-2018 08:26


OPPO announces R11s with claims to be the picture perfect smartphone
Posted 2-Feb-2018 13:28


Vocus Communications wins a place on the TaaS panel
Posted 26-Jan-2018 15:16


SwipedOn raises $1 million capital
Posted 26-Jan-2018 15:15


Slingshot offers unlimited gigabit fibre for under a ton
Posted 25-Jan-2018 13:51


Spark doubles down on wireless broadband
Posted 24-Jan-2018 15:44


New Zealand's IT industry in 2018 and beyond
Posted 22-Jan-2018 12:50


Introducing your new workplace headache: Gen Z
Posted 22-Jan-2018 12:45


Jucy set to introduce electric campervan fleet
Posted 22-Jan-2018 12:41



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.