Computer virus from T4R????

scottm

scottm

New member
Two days ago I picked up a bad computer virus while looking at ebay, T4R, and various parts places (looking for a tail light). An Adobe update popped up, and kept coming back when I hit "cancel". I checked the Adobe website, seemed like there was an update, so I accepted it. I ended up having to boot from my Windows DVD just to get Restore working, it was ugly. I loaded Malwarebytes, which seems to be keeping me safe.

This morning I checked T4R on my work computer to see if a member got my paypal last night, and the same Adobe update popped up. I had IT take a look, he thought it was legit until I hit "cancel" and it came back. Sneaky. Microsoft Security didn't catch this on either computer. We loaded Malwarebytes and it caught three virus, seems clean now. When I came back to T4R, Malwarebytes popped up that it had blocked something malicious.

I'm not sure who to contact here, maybe a moderator can move this post to the appropriate place.
 
Did you run a full scan with Malwarebytes?, try a full scan. Websites needs your browser to run add-ons, if add-ons are not updated, malwares will hitchride to it. Adobe is a legit add-on/helper, if outdated, and it sense that another program like spyware is running, it will try to update its version, and when user hit restart, the malware will now install deep into the system.

You can also try disabling Adobe helper from Tools, Manage Add-ons, go to Toolbars and Extensions and Disable Adobe. This is a temporary fix. Or uninstall adobe(don't update) and install the latest version back, this time disable the auto update feature of the program, and just do manual updates and like I said above disable the Adobe Browser add-on in IE.

(other important add-on that needs to be updated regularly is Java)
 
Chances are its Trojan.zeroaccess.B I am guessing you're running Win7? Its a sneaky little bas****, disguises itself as a Adobe Flash or Java update.

I've had to deal with this thing twice before, and my laptop seems to have caught it again (My fault was not paying attention when the promt for new Adobe came up.)

Its a rootkit virus that mutates and really digs into your system's coding, best way to get rid of it, is to do a full reinstall or revert back to an earlier restore point before the trojan was installed. Unfortunetly as far as I know, there is no antivirus program that can properly deal with this virus as it literally mutates and digs deeper into your OS files to save itself from being removed. Its basically one of those that if you leave even a little bit of it, it will come back.

I'm currently researching a few manual methods of trying to hunt and kill the virus as it is a pain to a reinstall for me.
 
Last edited:
I've had good luck with Norton. It has shown to have a good record in detecting something like that BEFORE it infects the computer.

We have Norton at work...And at home I get Norton for free from Comcast.

BTW....Come this Monday...if you have any malware on your computer you may have a problem reaching the internet on Monday. The FBI is taking down it's dummy server that was used to temporarily keep computers running until the malware could be removed from some 250k computers.

Our view: Heed FBI warning on malware | StAugustine.com
 
I've never encountered a virus I couldn't remove with the combination of Malwarebytes and HijackThis.

Granted... once it's gone, you may still have more damage than you can really recover from (which has happened to me once).
 
I use Firefox with a few add-ons (ABP, NoScript, CC Cleaner, Ghostery, etc). I also have my computer scan itself every night using AVG, Ad Aware and Defender.

So far I've gotten lucky, although the trojan BlackWorks mentioned sounds downright nasty. If you're running IE, bail it for Chrome or FF 1st things 1st.
 
So I've been doing complete scans with Microsoft Security Essentials and Malwarebytes, nothing detected on my computers. But I still get a message every time I come to T4R on either computer that Malwarebytes is blocking something dangerous. I'd rather not switch to new browsers at home and work just for this. I'll have to pay out of my own pocket to put Malwarebytes on my work computer (still in trial period).

Is T4R sending this virus out to everyone who clicks on this website? If so, is there any way to stop this?
 
I am running Avast which blocked several maleware attemps to get in. But these came from linked google searches to T4r.org. I was assuming its just google trying to be nosy but maybe there is more to it.
 
Derek said:
One other tool you might want to try is ComboFix. This has worked great for me on several systems where other software was unable to get rid of a virus.

ComboFix: A guide and tutorial on using ComboFix

ComboFix Download
Click to expand...

Free, but..."Please note that running this program without supervision can cause your computer to not operate correctly. Therefore only run this program at the request of an experienced helper."

Pepedog11 said:
I am running Avast which blocked several maleware attemps to get in. But these came from linked google searches to T4r.org. I was assuming its just google trying to be nosy but maybe there is more to it.
Click to expand...

Avast sounds good, free, perhaps I need yet another anti-virus program slowing my computer. I'm not sure it will be ok to install the free version at work, usually the free version is for personal use only. So that still leaves me with doubts about accessing T4R.
 
scottm said:
Free, but..."Please note that running this program without supervision can cause your computer to not operate correctly. Therefore only run this program at the request of an experienced helper."
Click to expand...

I've used ComboFix several times and never had an issue. It's one of the easiest programs to use because you literally start the program and let it run. Between MalwareBytes and ComboFix, I've never encountered a virus or malware that couldn't be eliminated.
 
My free period with Malwarebytes is about to end, and it is still catching a virus every time I come here on either PC. No problem on Mac. I don't really want to buy another anti-virus program, probably going to cut back here.
 
I'm not big on intalling multiple anti-virus on my slow laptop at home, or installing anything I don't have a commercial license for at work. Nobody else is having this problem I've had on multiple computers? Travelling tomorrow with an iPad (Waikiki), no worries with that I guess. Might try logging on from the hotel computer just to see what happens, hope it doesn't get trashed.
 
scottm said:
Is T4R sending this virus out to everyone who clicks on this website? If so, is there any way to stop this?
Click to expand...

They've definitely got something coming down one of their ad networks. I just pulled up the site and opened 3 threads, and our corporate McAfee installation popped up a notice saying that it had removed an attempt to install some backdoor. In ten years, I've never had that happen, and it was definitely from here, as I had just opened the site.

-E
 
scottm said:
Two days ago I picked up a bad computer virus while looking at ebay, T4R, and various parts places (looking for a tail light). An Adobe update popped up, and kept coming back when I hit "cancel". I checked the Adobe website, seemed like there was an update, so I accepted it. I ended up having to boot from my Windows DVD just to get Restore working, it was ugly. I loaded Malwarebytes, which seems to be keeping me safe.
Click to expand...

I had the same thing happen to me last week. Even after doing a complete restore to my laptop and running Norton antivirus the adobe update still appears.

The virus will lock up windows defender and make it impossible for to remove using a restore point. Doing a factory restore was my only option :mad

Edit: I have visited t4r.org from another computer on another network. I am positive that it is coming from this website.
 
Last edited:
Run combofix, we use it here at work to remove viruses as it works great.

For A/V I'd recommend switching to Avast or AVG. I like Avira too, but there's more overhead on the processor and memory when scanning.
 
As an IT Director i can say with confidence that no matter where you are you are are risk for viruses and Mal-ware.

97% of all anti-virus/malware software only protect you against 'Known' viruses stored in its data base. If they don't know it then your software scanner will not find it, its best to have a couple of antivirus solutions as well as a good backup!

also because of the nature of today's multimedia biased web sites, its very easy for a reputable website to have links to unsafe sites or even unknowingly host a virus or malicious code.

just my input
 
Had the same issue. I just used Microsoft Malicious Software Removal tool. Worked like a charm. Not even Malwarebytes could remove this trojan.
 
You must log in or register to reply here.

Members online

Total: 453 (members: 4, guests: 449)

Forum statistics

Threads
278,239
Messages
3,553,623
Members
247,908
Latest member
Trdoffroad916

Share this page

Trending content

Back
Top