Suspicious activity stopped, code Yellow/Blackwatch Plaid

cyco vision · Post by **cyco vision** » Fri Aug 12, 2005 11:39 pm

Didn't notice until it was posted, checked ad-block, and I still didn't notice anything. So I switched to my mac and reformated my PC.

I'm going to find my anti-virus CDs and all of them.

Just scan and if anything reformat. Back up your stuff on DVDs and stuff.

Post by **Sparkfist** » Fri Aug 12, 2005 11:43 pm

cyco vision wrote:But most of us run windows and use IE and would like to go to a trusted site.

If I remember right majority of the members use Windows and IE users are in the minority. Not to menton that the whole Windows majority isnt that big.

Get firefox and use that if your not interested in trying out a new OS (like a linux distro, Mac OS or BSD).

Also if your antivirus is up to date why worry? And even if your still conserned do ragular backups. I've got my stuff backed up (but I'm reinstalling Windows).

A.J. Franzman · Post by **A.J. Franzman** » Sat Aug 13, 2005 1:27 am

pezman wrote:how did you guys know when you got it

My McAfee VShield caught it. BTW, it's a trojan, not a virus. The McAfee name for it is "Exploit-MhtRedir.gen", and yes, it is still active at the time I'm writing this on the main benheck.com page. The forums seem to be clean (thank goodness! It took me about 11 clicks per page to get past it.)

*o* · Post by ***o*** » Sat Aug 13, 2005 1:28 am

i didnt have any problem except ugly bar at top saying that stuff

vb_master · Post by **vb_master** » Sat Aug 13, 2005 7:52 am

I did not see anything at the front page. Should I still scan?

Post by **bicostp** » Sat Aug 13, 2005 8:21 am

Until this blows over, I sugest we all change the cache setting for the homepage to "Never look for new versions". I did this and it just uses the clean cached version from before it was infected.

Everyone should update their definitions. I scanned my computer last night (NAV Corporate edition deep-scan) and it found nothing suspicious.

However, I believe it would be best to bookmark http://benheck.com/phpBB/index.php so we can skip the homepage, just in case.

BloodNess · Post by **BloodNess** » Sat Aug 13, 2005 9:04 am

Thats what i always do, but for time saving. On another note, Mcafee caught about 5 that were thrown at me.

mycoplasma · Post by **mycoplasma** » Sat Aug 13, 2005 10:21 am

i just went to benheck.com a minute ago (I haven't been here for a while, so i didn't realize there was a virus), and symantec antivirus immediately informed me that my computer has a trojan horse, so it would appear this virus is still here. better go back from yellow to red alert.

Post by **SpongeBuell** » Sat Aug 13, 2005 10:36 am

mycoplasma wrote:i just went to benheck.com a minute ago (I haven't been here for a while, so i didn't realize there was a virus), and symantec antivirus immediately informed me that my computer has a trojan horse, so it would appear this virus is still here. better go back from yellow to red alert.

Ok, first post edited.

sam fisher · Post by **sam fisher** » Sat Aug 13, 2005 10:37 am

we know its still there. Norton will delete all 11 you get

Post by **bicostp** » Sat Aug 13, 2005 10:49 am

How about using this standard?

At this point we're either at Blackwatch Plaid or the one right below it.

lol Harvey Birdman Attourney at Law

Lucretius · Post by **Lucretius** » Sat Aug 13, 2005 11:10 am

VIRUS ALERT LEVEL: PEE-PEE PANTS

sam fisher · Post by **sam fisher** » Sat Aug 13, 2005 11:45 am

will do!

BloodNess · Post by **BloodNess** » Sat Aug 13, 2005 1:30 pm

entered benheck.com for testing, risky aint it. Mcafee caught 4 in a row and quickly cleaned them and i closed the window fast. so ... pee-pee pants

madc0w · Post by **madc0w** » Sat Aug 13, 2005 1:31 pm

im on at the librairy and nothing happened, in think they use some bizzare browser not ie. i use firefox at home so im ok