SABL

I just got a strange pop-up a few minutes ago while at my local newspaper site. The pop-up was persistant but I got it terminated. The url was "antispywarelivescanv5.com".

Googled it and found nothing.....anybody hear of this site??

I hit the cancel button, but within a few secs a the browser changed the page stating that I had spyware..... I do a routine check for mal/spyware. I think something is afoot.

Going to scan my system....I be back.

SABL

Malwarebytes and Spybot show nothing... ( I DID update both programs before running them).

I run Windows FW and Avast, my system is up to date with all SP's.

I am NOT used to seeing P-U's and feel that most are up to no good.

koala

Web Of Trust lists antispywarelivescanv5.com as being dangerous. The 'Personal Antivirus' software might be fake or just visiting the website might infect your computer.

http://www.mywot.com/en/scorecard/an...livescanv5.com

If you're getting popups for antispywarelivescanv5.com, it could indicate that you're already infected with spyware. Please follow these instructions and start a new thread in the Virus/Trojans/Spyware forum where an analyst will help you as soon as possible.

SABL

Hi koala!!

Thanks for the reply... I did not visit the site. I merely wrote down the URL and killed the browser. How this P-U occured is new to me.... I go to very few sites. If you think it would be worthwhile to scan my system and submit the logs, I can do that. I just don't want to waste another person's time.

I made the post to warn others in the event that the author/s have found a way to breach current security levels..... found a way around the FW and/or AV protection. My system is on autopilot for all updates from Windows and Avast. As for other programs, I run secunia on a regular basis.

This is a one time occurance......if I get more instances I will do a scan and post the logs, unless you strongly suggest I do it immediately.

Thanks again,
SABL

koala

If Malwarebytes, SpyBot and Avast are not detecting any problems, you're very likely safe, but you can start a new thread and post the logs just to be sure if you want.

I wouldn't trust the XP firewall though, as it only monitors incoming traffic. This means that if your computer is already infected with spyware, it will go straight through the XP firewall undetected. You might want to consider installing a proper one like Comodo or Zone Alarm, which both have free editions.

If this is the only popup you've seen in a while, have you recently changed browser? If you're using Firefox, you should never see any popups at all. In all the years I've been using Firefox, I've never seen a single popup, and I go to some very dodgy sites where you would expect to get popups and infections.

Basementgeek

Hi SABL:

I too would not worry about it, if the scans are clean and not having other problems, guessing that the good old Columbus Dispatch, as most newspapers, are hurting for money is all.

If you are using the free version of access, to the Dispatch, that is how they are trying to pay for them

Were you on the Legacy sites on the obits?

BG

(Note SABL lives just down the road/same town, from me, we talked several time)

SABL

I have used ZA in the past and should prolly try it again. I do have other browsers but rarely use them and they have been updated after scanning my system with secunia. I mainly use IE8.

TSF is one of the few sites I visit.... I stay limited in where I go. I was at YouTube the other day and figure that is the only place I could have caught a "bug". Avast did not flag anything but I don't run teatimer for active threats.... the Avast is the free version so I am not sure of their protection but have never had any issues in the 10+ yrs I have been using their AV protection.

I'm going to make sure I have had my daily update from Avast and do a full scan. I may go ahead and do the prelim's for malware removal to get the current logs of my system status and active programs. I have run HJT before and it sure never looked like some of the logs I have seen from others. My logs look like the "Readers Digest" version...very brief.

I have only experienced this P-U once but I am unsure of what impact it may have in the future. If I see it again I will know I have stepped in some "doodoo" and logs will be posted in the proper forum.

tetonbob

Personal AntiVirus is a rogue/scareware application; that URL does not seem to be serving an installer at the moment, thanks for reporting it though. You might consider contacting the webmaster of the site you were on at the time.

SABL

Hey BG!!

I was in the obits....just not on Legacy. I was on the free version so that could explain why I got the PU. I almost call the Dispatch to ask if their security had been breached.

I will do as I said and make sure Avast is current.... sometimes I get updates more than once a day..... and do a scan. In my early days on the net I seen many PU's due to the "new" info that was being presented and the sites I was visiting. The PU and the nature in which it acted was very alarming to me.... I felt it was very intrusive!! I do get PU's from the Dispatch which I terminate, but to have a new browser open up gives me a hint that something malicious is about to happen. I will be on the lookout for symptoms of infection.

Thanks for the reply!!

Yep, we be neighbors. If I get off my buns we may actually shake hands very soon.

SABL

Thanks tetonbob!!

I figured it was scareware but was unsure. To scan my system and report a problem in a few seconds is absurd!! Safety on the net is of the utmost importance... that is why I made posts to two different forums when I felt I was attacked. These guys look for new doors when all others have been slammed shut...I wish they would give up!! It is a shame when current security protocols exceed the capacity of my first PC... I need a bigger puter to stay safe. I don't even think my first PC had the HDD space or RAM to cover it's own butt on today's net. I won't mention the Commodor VIC20 I once owned...