OMG is this a virus

[ironcrotch]

Originally posted by: inveterate
first off, I"M ALSO A VICTIM, I nEED HELP if someone knowz how to decompile this thing or sometin

u R comPutair3 r belong 2 m3

 

[xSkyDrAx]

hm does clicking on the link automatically infect you or do you have to dl something first?

 

[tami]

i don't think the OP knows what he's doing. i'm assuming that he probably has a seriously old and unpatched version of whatever internet browser he's using and that it prompted for some download.

in any event, if the OP would listen to me, it would be particularly helpful if the link above would be edited out just for the safety of other members if it indeed is a virus or spyware of some kind.

 

[aplefka]

Originally posted by: xSkyDrAx
hm does clicking on the link automatically infect you or do you have to dl something first?

Good question. I clicked the link the first time thinking it was a gif then a second time when I read about being able to click the links. FF blocked a popup though.

 

[tami]

just fyi: i didn't get any virus from this.

 

[Rock Hydra]

Originally posted by: aplefka

Originally posted by: xSkyDrAx
hm does clicking on the link automatically infect you or do you have to dl something first?

Good question. I clicked the link the first time thinking it was a gif then a second time when I read about being able to click the links. FF blocked a popup though.

Same here.

 

[Miramonti]

I guess maxthon isn't all that bad afterall, suckers. :laugh:

 

[falias]

I just got a big f'ing load of spyware by just clicking on that link. Thanks alot asshole.

 

[Freejack2]

So glad I'm using Firefox.

 

[Vich]

Originally posted by: Freejack2
So glad I'm using Firefox.

 

[JujuFish]

Originally posted by: ironcrotch
BAN

 

[David Brent]

http://xs.to/xs.php?h=xs32&d=05230&f=Thread-Crap-Graph.jpg

 

[Zanix]

Originally posted by: David Brent
http://xs.to/xs.php?h=xs32&d=05230&f=Thread-Crap-Graph.jpg

LMAO!!

 

[Engineer]

Originally posted by: David Brent
http://xs.to/xs.php?h=xs32&d=05230&f=Thread-Crap-Graph.jpg

:laugh: :laugh: :laugh:


LMFAO!!!! Buwhahahahah!

 

[Miramonti]

Originally posted by: David Brent
http://xs.to/xs.php?h=xs32&d=05230&f=Thread-Crap-Graph.jpg

:laugh:

 

[ActuaryTm]

Originally posted by: inveterate
dude, it makes me download an exe.. And its name is "untitled.exe" when i run it, [!!!!!] the exe just disappears. I really hope this isn't a virus

Deep down, I know I should not be dying hysterically with laughter.

But I am.

 

[jds2006]

I'm afraid to click the link.

 

[Engineer]

Here are the 3 reasons for no update...

A. Ran scan and found nothing. Went to celebrate.
B. PC is fuxored and won't even crack a BIOS prompt on the screen
C. Jumped off bridge after seeing the "Smarts" chart above.

 

[wobbuffet]

Originally posted by: pinkeywear
I'm afraid to click the link.

ha!! who wouldnt be:frown:

 

[ghostman]

It doesn't matter what filename the URL ends in, it always returns a similar HTML page. That page has the following:

<frameset rows="100%,*" frameborder="no" border="0" framespacing="0">
<frame src="h--p://landing.domainsponsor.com/?a_id=23&domainname=budypic.com&pr
efill_kwd=">
</frameset>

So you'll end up loading that page instead. Which leads to an assortment of cookies and such:

Cookie from ads1.revenue.net
Name: Train0
Value: .CACNsOjE6MToxMjE2OToyMDgxMjE6NzExOjE3NTM2NTk3OjI6NDAwMjkzOjExMTg3Nzg2NDA6MZABDzYwNTg0MDotOi06LTotOi06LREAAA==
Expires: 06/10/22 01:05 am
Path: /
Domain: .revenue.net

New window:
h--p://ads1.revenue.net/load/208121/040105.html?O_R_NUM=17536597&O_RANK=2&O_CREATIVE_ID=208121&O_SITE_ID=12169&

Cookie from searchportal.information.com
Name: ident
Value: click:0%7csearch:1118606015%7cexitpop:1118605985%7ctoken:uszurpuuysquxvs%7clload:0%7clvisit:0
Expires: 06/13/05 03:53 pm
Name: budypic.com
Value: click:0%7csearch:1118606015%7cexitpop:1118605985%7clload:0%7clvisit:0
Expires: 06/13/05 03:53 pm

As well as some shockwave stuff, but I don't have the plugin installed so I don't know what junk that pushes through.

 

[inveterate]

me using firefox too, but it still made me dl an exe. Nothing has happend thus far, Checked with Norton, nothing!,.

 

[Sheepathon]

I was gonna say something about my disbelief that you actually ran a suspiciously named exe just to see what it would do, but I think ActuaryTm's post speaks for all of us.
Btw, nothing "made" you download an exe...

 

[akubi]

Originally posted by: inveterate
first off, I"M ALSO A VICTIM, I nEED HELP if someone knowz how to decompile this thing or sometin

dumbass if you are telling the truth you wouldn't put up a link to it in the op.

call for a ban

 

[SVT Cobra]

lavasoft ad-aware

microsoft beta

if its spyware or a highjack, either one will find it

 

[eakers]

this thread cracks me up.