Click to open network menu
Join or Log In
Mobafire logo

Join the leading League of Legends community. Create and share Champion Guides and Builds.

Create an MFN Account






Or

's Forum Avatar

Moba and spyware

Creator: Lav69 March 8, 2011 2:25am
28 posts - page 2 of 3
Lav69
<Member>
Lav69's Forum Avatar
Show more awards
Posts:
7
Joined:
Feb 18th, 2011
Permalink | Quote | PM | +Rep March 20, 2011 5:26am | Report
no comment?
Matt
<Administrator>
Matt's Forum Avatar
Show more awards
Posts:
4286
Joined:
Dec 8th, 2009
Permalink | Quote | PM | +Rep March 20, 2011 6:37am | Report
Not us and not AVG, you may have a virus :( Google the exact text from that popup and you'll see a number of references. The broken English and weird title are giveaways too, if it was from AVG it would say so and would be written better.

If you want to try a different virus scanner, you could try Microsoft Security Essentials. It's free and is rated highly. Honestly though, if I suspect a virus on my computer I will always just do a full reinstall, you just never know what it did/will do.
SatansFate
<Member>
SatansFate's Forum Avatar
Show more awards
Posts:
213
Joined:
Sep 30th, 2010
Permalink | Quote | PM | +Rep March 20, 2011 7:35am | Report
That's not AVG or Mobafire.
At worst, it could be an infected advert or signature, but most likely you have a virus.
Run a thorough scan with AVG, and another protection program, i'd recommend Malwarebyte's Antimalware.
Matt
<Administrator>
Matt's Forum Avatar
Show more awards
Posts:
4286
Joined:
Dec 8th, 2009
Permalink | Quote | PM | +Rep March 20, 2011 8:17am | Report
The ads are from reputable sources. The signatures have all HTML stripped except for the specific bits we allow through bbcode. Even so, you should always keep your browser up to date, as well as the vital plugins (flash, java) in case you visit any sites that are not safe.

Be cautious about installing a lot of virus/spy/adware stuff. A lot of the less wellknown apps are installing the very same virus/spy/ad/spam stuff that they are supposed to be removing. For example the popup you are getting, I read that if you click ok it takes you to a fake virus scan page that tries to convince you to install their program, which further infects your computer but lies telling you it's all free and clear.

Stick to only the most well known vendors. I have no experience with Malwarebytes and I used to use AVG but they kinda jumped the shark a while ago. I know it's crazy but I really recommend trying Microsoft Security Essentials :)
SatansFate
<Member>
SatansFate's Forum Avatar
Show more awards
Posts:
213
Joined:
Sep 30th, 2010
Permalink | Quote | PM | +Rep April 3, 2011 9:21am | Report
@Matt, that's not what I meant.
It's still possible to run dynamic PHP running behind a "static" image link, such as www.example.com/img.jpg using htaccess.
Matt
<Administrator>
Matt's Forum Avatar
Show more awards
Posts:
4286
Joined:
Dec 8th, 2009
Permalink | Quote | PM | +Rep April 3, 2011 9:37am | Report
That would be server side, so the best it could do is send HTML/Javascript/Flash back instead of an image, and then the browser is just going to see a broken image and throw it away. You can modify the headers to tell the browser it's not an image but, if it's referenced in an img tag it won't make a difference the browser will still throw it away, and there is no way to get a script/iframe/embed tag into your signature.
SatansFate
<Member>
SatansFate's Forum Avatar
Show more awards
Posts:
213
Joined:
Sep 30th, 2010
Permalink | Quote | PM | +Rep April 3, 2011 11:26pm | Report
But it's possible to use fopen to open a file in the background while still outputting an image.
Matt
<Administrator>
Matt's Forum Avatar
Show more awards
Posts:
4286
Joined:
Dec 8th, 2009
Permalink | Quote | PM | +Rep April 4, 2011 5:41am | Report
I don't think I'm following you here, how is that a security risk? You can do whatever you want on the server, but it still doesn't affect the client.
Lazukin
<Member>
Lazukin's Forum Avatar
Posts:
1001
Joined:
Jan 20th, 2011
Permalink | Quote | PM | +Rep April 5, 2011 9:43pm | Report
That seems to be a rogue virus (in the picture). It has about 200 different names it can go by, but I know which one it is. It pretends to be a virus scanner, and eventually will pop up with a message saying, "You may have a virus, would you like to check for viruses?" Then a dialog box will come up saying, "Check for Viruses" and "Cancel". Pressing check activates the virus (and keylogger, CAREFUL). It then tells you that your computer is at "serious risk" and in order to save it you have to buy the full version, don't, it's a scam to make money. At this point your internet is shut down and your desktop background has been changed to say that you have a virus. If you end up this far, the only way to fix it is to download Malwarebytes Anti-Malware on another computer and transfer it to the infected one via flash drive.

Of course, it would be best to get that before your internet shuts down. :p

What are your computer specs?



This virus is actually really old, and called Antivirus XP. It may (almost certainly will) appear with a different name though randomly. If nothing from before works, backing up your computer as a last resort can remove the virus.


I make sigs, PM me if you want one :D (Thanks for the Nidalee sig, The_Nameless_Bard!)
Jet
<Member>
Jet's Forum Avatar
Posts:
1671
Joined:
Feb 10th, 2011
Permalink | Quote | PM | +Rep April 5, 2011 10:12pm | Report
force delete appdata/local folder

then it's gone

will require you an .exe fix before you do that otherwise you wont be able to load any programmes after
Jet has been banned for trolling and blatant racism.

You need to log in before commenting.

League of Legends Champions:

Teamfight Tactics Guide