Google saved me 2 times

[toothmaniac]

one S*N oF B****C

wan't me to keep his radio website in my websites

i said ok will help

he gave me a link

http://XYX.COM (site name edited--PM for that Site URL)



but i was just loading ..not opening at all

i aksed him the reason he said me to enable java ..which has been installed already

still he gave me a java link ..which was from sun network

after few hours he hacked my whole system

but i know google employee personally so i got my all sites back

then again next day he hacked me

again they helped me ..got my sites back

they advised me to buy

keyscrabmelr =50$ professional

NOD

malware and antimalware

now things are fine

i just want to know how he hacked my system continues for 2 days

toothmaniac Reviewed by toothmaniac on 3rd Feb 2011. Google saved me 2 times one S*N oF B****C wan't me to keep his radio website in my websites i said ok will help he gave me a link http://XYX.COM (site name edited--PM for that Site URL) Rating: 5

[CJ]

Install Spybot - Search & Destroy

OR add this to ur host file

http://paste.org/pastebin/view/28326

[SuicidalMedia]

Argh, kiddos these days. Last year, there was an option that you could combine iStealer with Java drive by. So that means, if you visit some site, and if it asks you to run its content. You actually download the .exe in background and run it. It's just iStealer, and it writes to the database only saved passwords. So you have nothing to worry about, it can steal the passwords only ONCE.

[toothmaniac]

jason

ya m not experienced webmaster

will learn from my mistakes

but you are wrong he just cleaned my computer

no files left

[SuicidalMedia]

Just to tell you that I didn't meant on you by the "kiddo" word, that is meant for the guy who infected you. However, you learned a valuable lesson.

[toothmaniac]

Jason

yes just google support in india was awsum

m really thankful to them

[CJ]

can u remove that site name from ur first post. Many guys would just click it without reading & atlast they would get affected. So better remove the site name or else code it or remove tld name

[0ccul7]

no need to show the link, just say xyz.net as an example.

[toothmaniac]

DONE .............

i just want to know people about that link

Sorry KWWH

[WaReZ]

Warning Do not Visit any website below

Some info if someone have visited that website

The Site downloads a shitty stealer's server which is located here

http://radiogpv.net/menu.exe

(do not download if you don't know what to do)

The creator of this virus is a kid for sure look at the detection rate

http://vscan.novirusthanks.org/analysis/c59fcf72d446c937a5e658eebf5d7cc1/bWVudS1leGU=/

(you can visit this URL Its 100% safe)

In short if you want to remove this shit from your PC then just download Avira AntiVir (Free will also fine). Do a full scan. Remove all detections and you are safe.

Best of luck