[tjohnusa]

I have been getting random "security alert" messages and then goes to some bogus scan When opening some threads...my computer is clean. Anyone else getting this? This is the web address: http://sedqshopxpxp.com/index.php?06abQDYyQU6TAj7y+X1gipb8Lmw9ZHdpfllcJXegVQ8HZ5clR36LftY70V8ijcZTF3E=# 

 

[fatcat28037]

Yes, I got one this morning but I don't know the address.

 

[joe]

If you get them again, can you post here what thread you were in and which advertisements you see?  

 

[kmhaynes]

Joe -- no advertisement, just a very simple pop-up window saying "A security threat has been found on your computer ....  Click OK to start a scan of your Computer."  VERY typical fake virus/malware scan which is Malware itself, and no matter whether you click OK or the 'X' close window button, the scan starts.
 
If I close my browser (IE 8.0) or that tab in the browser immediately, then it goes away. I don't get it everytime I come to Head-fi, but I have gotten it 3-4 times in the past 3 days, usually the first time I actually click on a thread link.
 
Someone has dumped this malware on one of the Head-fi servers so that the first click to a thread gets hijacked by this malware.
 
Hope you can find it and get rid of it.

 

[joe]

What thread were you in when you saw it?  I'm attempting to re-create it for the tech guys.

 

[fatcat28037]

It hasn't happened again and I don't recall the thread I clicked on but I do remember it was the first thread I clicked on after starting Head-Fi.

 

[joe]

If it happens again, please note the thread.  I've tried unsuccessfully to get it to happen for me, and this information will help us re-create the issue so we can track down the offending variable.

 

[fatcat28037]

This happened to me again. It occurred while I was in this thread.
 
http://www.head-fi.org/forum/thread/567580/anyone-can-help-me-with-this-please 

 

[joe]

 

fatcat28037, are you using IE?  If so, what version, and OS?
​

 

[joe]

Also:  Are you running any antivirus software?  If so, which one?
 
If it happens again, getting a screenshot will also help the team find out where it's coming from.  (CTRL+ PrntScrn, then paste into a graphic program like Paint or Photoshop)

 

[fatcat28037]

IE v8, XP sp3, Mcafee. I'll get a screen shot if it happens again, it's been 13 days since the last occurrence.
Quote:

Also:  Are you running any antivirus software?  If so, which one?
 
If it happens again, getting a screenshot will also help the team find out where it's coming from.  (CTRL+ PrntScrn, then paste into a graphic program like Paint or Photoshop)

 

 

[fatcat28037]

I looked at IE history, this is the address
 
http://newbadasxp.com/index.php?06abQDYyQUaSBWryoi5giseieT5pYnBqfV9ZdXesUFhQYpF4TnjWftY70V4ni85QHXU= 

 

[joe]

Thanks fatcat.