GVU Virus warning

[eddiepunch]

GVU Virus warning

Saturday 27 July 2012 : 18:30
I logged onto the Liverpool v Tottenham ESPN Flash link (the very top link in the list)
and at 19:27 (German Time) my computer got blocked by the GVU Virus

This is a nasty piece of work that pops up and blocks the screen with the message (freely translated from German) "You have been caught breaching copyright, therefore we have blocked your computer"
Further they want €100 to unblock it.

Anyone else come across this either using the above link or at any other time ?

I'll stick to Sopcast from now on.


Eddie

[Admin]

That sounds annoying. Did you manage to get rid of it?

Haven't noticed that and also didn't get that either as we do check all streams all the time. Also no other reports but it's of course annoying when you get it. So it shouldn't happen. You're sure you didn't click one of the ads? Or that it has been installed earlier already? Or misclicked the close buttons? As I dont think it installs automatically by itself? You might also think about using an ad blocker then in general to be safe so you can't misclick an x or close button on ads. When we notice such things we will remove the site/stream link so we will continue to closely monitor the sites and streams we link to prevent such issues.

[flysfooty]

Here is a great tutorial to get rid of this nasty virus..... http://liveadmin.com/blog/2012/04/re...an-ransomware/

[DEAD_MAN_WALKING]

Can you check in your web browser's history what stream you were viewing and report it using the report button or post it here please.

[TheHurtLocker873]

I'm sure I know which site eddiepunch is referring too. I've had issues in the past which I brought up somewhere on the forum a few months back. I was assured by admin that all was well.
Nevertheless, I avoid this particular site all the time, and have not visited it since. If someone PM's me and if it's possible to PM back I can tell you the site. It's just strange how I always used to get Red Security warnings when visiting this particular site. Warnings I 'Never' got from any other site listed on here.

Note to eddie... Ignore the 100 euro bill they are asking. It's obviously a scam.

[Admin]

Thanks for the report. But let's first wait for Eddie to confirm which site he thinks the threat came from. It's often due to advertising companies or strange ad scripts websites use, or that they run a new advertisement and don't check that proper enough. If it's indeed the same site like you reported then we will check it again to see what we can do about it.

But after you mentioned it last time, we checked it and also changed some things the way we list it. To make sure people don't face weird scripts. Since then no reports of any problems. Of course that doesn't mean anything but then we thought it was solved. It's annoying when sites and advertising networks run malware scripts or load things that can harm your pc. That shouldn't happen, it should be clean and safe

[flysfooty]

unless eddie can get on another pc then he will be stuck with the virus warning cos this particular virus cahnges the boot option on the bios so it boots straight from the virus.
hope he clears it and all is well... :/

[eddiepunch]

Thanks for the replies.

I have just spoken to my Anti-Virus people and they have told me that the FLASH Player was the probable "security gap" that let the virus in.
This means that the site its self was not to blame.

The way to deal with this blockage is:

• Turn the PC off and then on again while pressing the F8 key
• Choose the option "Protected Mode with Network Connection"
• Start the "Systemwiderherstellung" (Restore System ? my PC has a german WIN7 OS)
• Choose a date before the attack, a few days will do it.
• The PC will restart after the completion of the Restoration. You will see straight away if it worked or not.

The virus files are usually in a TEMP directory and will be deleted.
Update all anti-virus programmes, viewers & plugins - that's important.

You, the user did nor make a mistake and you are not to blame for catching this virus
This Incident reinforces my faith in Sopcast over the other sites with a FLASH viewing window surounded by advertising.

Orright ?

eddiepunch

[Admin]

Thanks for the feedback and glad to hear you got it solved. Have you been using an old version of adobe flash then maybe?

Nevertheless we will continue to monitor websites and streams to make sure they're as clean as possible. Indeed sopcast and streamtorrent for example are safer then, but sometimes they're not available for a specific game/event. Then flash is the only option. You might think about using an ad blocker just to be more safe. Like Adblockplus; http://adblockplus.org/en/firefox

[eddiepunch]

Thanks for the feedback and glad to hear you got it solved. Have you been using an old version of adobe flash then maybe?
You might think about using an ad blocker just to be more safe. Like Adblockplus; http://adblockplus.org/en/firefox

These virus attackers search for weak spots in commonly used programmes and viewers. It is not a bad thing to keep the software up to date.

The disadvantage with popup & ad blockers is that maybe maybe not every pop up or ad is a bad thing. A pop up is a method of opening a new page. That in its self is not a bad thing. Many downloads, for example, are initiated with a pop up.

More important is an up to date Anti Virus Program. I have a paid up Anti Virus set up.


On the whole, problem solved - for now.
Roll on the new season and COYS

eddiepunch

[TheHurtLocker873]

Glad you got it sorted..

I only replied in response to where you said, 'the very top link in the list'. I remembered what the link was as I hovered the curser over the link button and the site name came up in the bottom left of the screen but watched that match on sopcast.

I notice the same site is listed in the Live Olympic thread. So if there was anything wrong I'm sure admin or someone would be onto it. Maybe just an odd coincidence, i don't know.

[FootyLive]

Glad you got it sorted.

Can we learn one thing from this round here thou?? Lets all stop jumping on the "lets bash flash" bandwagon everytime someone gets a virus.
It seems to me everytime one of these threads appear it suddently turns into a.... Yes the flash sites are to blame - Install adblocker, use sopcast keep away from those dodgy flash sites blah blah....

Not all us flash streamers are evil people you know, We try our best to provide you with reliable SAFE streams

Just summat to think about

[TheHurtLocker873]

Nobody is bashing flash sites here.

As I type this I'm watching the Liverpool game on something called...'Tykes Tv'.......Oh hang on a minute......It's yours.

Well I was watching yours but it went down, and now I can't re-load the page. There's another I can't load either... Is anyone else having problems?

[FootyLive]

Bashing maybe a little strong admitted - but how many helped the OP?? 1 person.

The rest jumped on the use sopcast, install adblock, what site was it etc - when in fact it turned out not to be the fault of the site at all

Back to the site not loading - Working now - When you got 5k refreshing at once it causes issues for a min or 2

[DEAD_MAN_WALKING]

Bashing maybe a little strong admitted - but how many helped the OP?? 1 person.

The rest jumped on the use sopcast, install adblock, what site was it etc - when in fact it turned out not to be the fault of the site at all

Back to the site not loading - Working now - When you got 5k refreshing at once it causes issues for a min or 2

Did you miss this bit...

I have just spoken to my Anti-Virus people and they have told me that the FLASH Player was the probable "security gap" that let the virus in.
This means that the site its self was not to blame.

Ok its the users fault for not keep there version of Flash Player and Browser update but where is the Viruses/Malware coming from in the 1st place...?

Dodgie ad providers, Streamers scripts(not all but some), Redirects etc... and im not Flash bashing its just what happens...

[FootyLive]

Ok its the users fault for not keep there version of Flash Player and Browser update but where is the Viruses/Malware coming from in the 1st place...?

Correct it is the users fault
Virus came from the security hole on the flash player as stated - could have quite easily have happened on a number of flash based sites

Dodgie ad providers, Streamers scripts(not all but some), Redirects etc... and im not Flash bashing its just what happens..

It does happen i agree and i'll be the first to admit it has happened on my site before when some dodgy advert causes all sorts of problems - I personally had this happen to me once (to my knowledge) - a quick email soon got that advert removed.
Believe me its just as stressful for us as it is for you, i dont want my site known as "the site that gets you a virus" - Myself and many other streamers try and keep our sites safe. Admitted not all obviously, some of them are right dodgy ***** but thats another story


All im saying is lets look at the evidence before we jump the gun - few quotes below from BEFORE we knew what caused it - Now tell me you didnt all immediately think it was the fault of the streamer or his ads ???

You're sure you didn't click one of the ads? Or that it has been installed earlier already? Or misclicked the close buttons? As I dont think it installs automatically by itself? You might also think about using an ad blocker then in general to be safe so you can't misclick an x or close button on ads. When we notice such things we will remove the site/stream link

Can you check in your web browser's history what stream you were viewing and report it using the report button or post it here please.

Dont get me wrong i think its great that we keep an eye on streams round here to make sure everything is ok etc - I just think we jump the gun a little sometimes without knowing the facts

<Rant over till next month>

[TheHurtLocker873]

I've been having problems with my shockwave plug-in keep crashing, during certain videos like yahoo or youtube and sometimes on flash streams.

So I downloaded this... http://www.mcafee.com/us/downloads/f...e-stinger.aspx

Read the whole page before proceeding. Especially this bit.. When the download is complete, navigate to the folder that contains the downloaded Stinger file, and run it. WindowsME/XP/Vista/7 users read this first.

I ran a scan with it yesterday and it found this...

C\Programme\Data\CodecUpdate\ix_updater.exe
Found the Generic. ss!aac trojan
C\Programme\Data\CodecUpdate\ix_updater.exe is infected with Generic. ss!aac trojan
C\Programme\Data\CodecUpdate\ix_updater.exe has been deleted.

No idea where it came from or how long it's been there. But hopefully it's gone now. Also, I can't understand why my new anti virus didn't pick it up. I think I'll have a look at some of the posts on here regarding anti virus programmes and try some of those.

Got rid of Microsoft Security Essentials, complete waste of time.

I found an old post of DMW's somewhere with a link for Comodo Anti Virus. It found 12 threats and various other stuff. So I'll see how I go with this for now.

Thanks for the recommendation DMW. Btw, the link in your post didn't work so I googled the site and got it from there.

[hoolie]

I might have gotten the same kinda GVU virus last night watching a "flash" stream of Milan-Real madrid. before such streams start one gets first those nasty ads on and even over the "TV" screen and it's quite hard sometimes which ones to choose to get rid of the advertisement. one often clicks the wrong one. that might have happened last night as well.

So when I started the computer this morning I got a message filling the entire screen from Dutch Police and BUMA Stemra telling me that I had illegal files on my computer and that I only get control back of my computer if I pay a "fine" of 100 Euros.

[Big Mac]

So, at the risk of upsetting FootyLive (which is not my intention).........

The best protection from all of this is to install AdblockPlus, or some other adblocker. What this will do is preevent the scripts from running that cause these dodgy ads to display. You will just see a clear frame and the close button. This prervents any accessing of sites that download this sort of malware.

It seems to me that having an adblocker enabled to protect your PC is just as important as having a firewall enabled

[FootyLive]

sorry forgot about this post lol

As i've said many a time i use ABP myself (do disable it on some sites if i think the admin deserves $0.00000001 ) but im yet to see the proof that it was an advert that caused it in this instance. All he says is he was advised the "flash player" was the probable cause.
How does that mean the advert caused it ?

The solution is to have good security on your PC in the first place - if you got good security on your PC then these things wont get in regardless of whether you got adblock installed or not. Adblock dont solve the problem of having an insecure system does it. It just means the bad guys need to find another way in.

I said it once and i'll say it again - everyone starts using adblock and flash sites gonna disappear (they cost money to run unlike p2p) or they gonna start blocking people from their site that have it installed. Yes thats against the rules here but we aint the only linking site are we lets be honest.
You lose the flash sites wiziwig also lose about 50% of their trafic.

So basically bigmac no i disagree that abp is the best protection. The best protection is to secure your system and not leave it like it was when you bought it from the shop like most people do.

On a side note just paid my $75 server bill

So, at the risk of upsetting FootyLive (which is not my intention).........

I dont get upset by online antics, I save my tears for things that really matter...But i do love a good rant i do...Same time tomorrow???