I was hit on two of my three PCs - both times I went to Contesting.com and
then QRZ.com and the PCs blew up. My third is XP/IE7.
They are (were) both XP/IE8. They are now XP/Firefox, and Contesting.com is
no longer my home page until (hopefully) an "ALL CLEAR" comes across the
email.
73,
Bruce - N1LN
-----Original Message-----
From: writelog-bounces@contesting.com
[mailto:writelog-bounces@contesting.com] On Behalf Of Clay Melhorn
Sent: Sunday, October 02, 2011 16:16
To: aa5au@bellsouth.net; Writelog Forum
Subject: Re: [WriteLog] Possible virus on contesting.com and eHam websites
Thanks for the heads up Don,
I saw that come up on my laptop at home over the weekend a couple times so I
stopped trying to see the link.
Fortunately I remember clicking Cancel each time as I recognized it as a
potential nuisance software window.
Sure seems I was only at eHam web site through a search link, fairly sure
but had followed a few links.
Yep, sounds like one of the sites may have gotten hacked.
Clay Melhorn N9IO Bonfield, IL
Webmaster: KARS - Kankakee Area Radio Society - W9AZ http://www.w9az.com/
> From: aa5au@bellsouth.net
> To: aa5au@bellsouth.net
> Date: Sat, 1 Oct 2011 22:50:09 -0500
> Subject: [WriteLog] Possible virus on contesting.com and eHam websites
>
> Last Friday I got a nasty trojan on my work laptop viewing ham-related
websites. I didn't know which one because I had left the
> room for something and when I returned my PC was going haywire with all
these false alerts saying my hard drive had died. Today I
> got a mysterious dialog box when I went to contesting.com. Others have
told me they got the same thing when going to eHam.
>
> It's called the Data Restore virus. A description of the virus plus a good
set of instructions for getting rid of it are located
> here:
>
> http://www.myantispyware.com/2011/09/29/how-to-remove-data-restore-virus/
>
> >From what I understand, it could be related to running Internet Explorer
8 under Windows XP although other platforms may be
> susceptible too. When visiting these sites, a dialog box comes up asking
if you want to run a program. Do NOT click the Allow
> button or the X box to close it or the "What's the risk" link. Instead,
CLOSE IT ONLY USING THE CANCEL BUTTON.
>
> A did a screenshot of the dialog box and put it on my website. To see what
it looks like, go here:
>
> http://rttycontesting.com/contestingcom.jpg
>
> I'm running MS Security Essentials and it did not immediately catch it. I
have heard that other virus programs did not catch it
> either.
>
> Sorry for the bandwidth, but I just hope to save others from the pain of
having to deal with getting rid of this crap on their
> computer after visiting legitimate ham-related websites.
>
> 73, Don AA5AU
> http://www.aa5au.com
> http://www.rttycontesting.com
>
> _______________________________________________
> WriteLog mailing list
> WriteLog@contesting.com
> http://lists.contesting.com/mailman/listinfo/writelog
> WriteLog on the web: http://www.writelog.com/
_______________________________________________
WriteLog mailing list
WriteLog@contesting.com
http://lists.contesting.com/mailman/listinfo/writelog
WriteLog on the web: http://www.writelog.com/
_______________________________________________
WriteLog mailing list
WriteLog@contesting.com
http://lists.contesting.com/mailman/listinfo/writelog
WriteLog on the web: http://www.writelog.com/
|
