Highly agressive virus on the loos eon Skyrim Nexus.

[Vindekarr]

Just a warning, there's a virus on the loose on Skyrim nexus-I went to download a mod and several script boxes popped up. I don't know if I"m the only one so far or not, but it's an agressive little bastard, pretending to be a virus scan, and clearly translated(very very very poorly)

[Dark0ne]

What browser are you using? I'm getting nothing no matter what I try. Pretty sure more people would have posted by now if this was wide-spread.

[Vindekarr]

Just the default browser for '7. Odd, well, I did get a virus popup, but it may be something on my end. Thanks for looking though. The intiial message was "please wait we scan your devices" before presenting a fake scan screen and demanding I buy their virus. I've scanned my machine, and it's clear so I'd say if you don't let it down you're golden, but I think the issue may be some browser settings I'm running to make BF more comfortable, which reduce my popup blocking. Edited December 29, 2011 by Vindekarr

[bben46]

You have a virus - It's that pop up that says 'please wait while we scan'. That is a fake antivirus and is a pain to remove. It will keep popping up and blocking whatever you are trying to do - if you allow it to finish it's scan, it will show a bunch of viruses on you computer (the only real one is the fake antivirus) then suggest that you pay them for a full version that can remove the 'viruses' it found. If you do pay, it will stop the pop ups. But will not remove any viruses, including that one which will be sending data back to the thief. DO NOT SEND THEM ANY MONEY!!

 

Here is a link to (in my opinion) the best site to help with removing this trash.

http://forums.majorgeeks.com/showthread.php?t=35407

[RFree]

I had that fake antivirus windows scan in my nix somehow - looked awesome

[Deleted133263User]

Sounds like a variation of the koobface (facebook) worm, it does have limited potential on Linux but only really effective on windows. Sets you up in a botnet aswell as whatever payload it has. Quite stubborn to get rid of, last time I had to get rid of one for a friend we used Microsoft Security Essentials and MalwareBytes Antimalware, both allowed to do a full scan after a safe mode boot.

 

I ran MBAM after MSSE, which cleaned out parts of it that MSSE missed - Though your mileage may vary, these things advance their techniques every time a new version pops up in the wild.

Edited December 29, 2011 by Guest

[Dabest1ever]

Yes i got the damn thing today and I'M f***ing PISSED! Do they not screen their files before they release them to the public? I'll never recommend this place anymore that's for sure..I been at it for 9 hours now and i cant get rid of it..I thought i did but i still can't access my CD drive all my files are hidden and it keeps giving me errors on my catalyst control center..I haven't played Skyrim for a month and i regret getting the f***ing urge to play it today now and d/l the texture pack..if anyone's wondering that is the file it was in..so be careful

[Dabest1ever]

Im trying PCTOOLS as that was what one of the editors suggested would work on a website i referred too. While i did remove some of it theirs some parts or other remaining. In the first sweep i got a high risk alert for a rootkit.XXX i dont remember the entire name. I thought it removed it,but after reboot still having the same issues..Is their a removal tool like Mcafee's STINGER tool or anything that will remove this thing without having to take it to a professional?

[Dabest1ever]

I'm running the scan again now and the file is still there its labelled Rootkit.TDSS.v3 if anyone knows what that is.

[Jeoshua]

It's evil, that's what it is.

 

I worked in a computer repair shop. The time and effort to get it totally gone from a user's computer wasn't nearly as cost effective as selling them a brand new antivirus and reformatting their computer.

 

Seriously messed up code there. Or genius. Whichever is more evil :wallbash: