Somethings up

[nurabutt]

Im on sythe, and then suddenly i get sent to a java drive by

http://rsmerch.*****.com/

W teh f?


It just randomly redirected me..

I didn't even click on a link


I looked in task manager and don't find anything suspicious there..so whats going on?

 

[1234567ASDF]

Task manager can't always find all programs running.


Get a virus scan going asap. Check out free.avg.com if you can't afford / don't own one.

Also google spybot - s & d

tha

 

[nurabutt]

Task manager can't always find all programs running.


Get a virus scan going asap. Check out free.avg.com if you can't afford / don't own one.

Also google spybot - s & d

tha

Yea running a few now, im just suprised as i never download anything im not supposed to

 

[1234567ASDF]

You might have gone to gold4rs.com?

See the feedback / community general section

 

[nurabutt]

You might have gone to gold4rs.com?

See the feedback / community general section

Yep that was it then, I didn't run app though so im fine.

 

[Syed]

Find and delete these registry keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run\utorrent
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunServices\utorrent ​
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServices\utorren ​t
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\utorrent

Then copy and paste this into a notepad file and save it as a .bat file:

del C:\Windows\System32\Mswindows\explorer.exe
shutdown -r -t 01

Also check msconfig/startup for anything that has "TBOT" in it and delete it.
Download HiJackThis and scan. Put a check on anything related to HKCU and HKLM then click the "Fix" button.
Download MBAM and do a full system scan.

 

[nurabutt]

Find and delete these registry keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run\utorrent
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunServices\utorrent ​
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServices\utorren ​t
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\utorrent

Then copy and paste this into a notepad file and save it as a .bat file:

Also check msconfig/startup for anything that has "TBOT" in it and delete it.
Download HiJackThis and scan. Put a check on anything related to HKCU and HKLM then click the "Fix" button.
Download MBAM and do a full system scan.

Yea im fine i didnt run the app.
Im wondering why they used such a shitty drive by lol.

Like they could of Made one spot to put it in on the site like when you click gold prices, instead of redirecting the whole site.