 Phoenix22Death From AbovePremium
join:2001-12-11
SOG C&C Nrth | MSE-intercept Has anyone had any experience w/this bd trojan
running w7/ffox9/MSE all behind a cisco routerAlert level
Exploit:JS/Blacole.BA
(?)
Encyclopedia entry
Published: Jan 19, 2012
Aliases
Not available
Alert Level (?)
Severe
Antimalware protection details
Microsoft recommends that you download the latest definitions to get protected.
Detection initially created:
Definition: 1.119.129.0
Released: Jan 19, 2012
Summary
This threat is detected by the Microsoft antivirus engine. Technical details are not currently available for this threat.
--
101ST ABN Div. (AirAssault) "Rendezvous With Destiny!" "Night Stalkers/Phoenix Flight" For Buddy...who lived it! Whiskey for my men and beer for my horses! H.A.L.O!, 5th Grp., MACV SOG, 160TH AVN SOG, Death From Above, VFW, AmLegion |
|
| it sounds like some "javascript" that is used to download a "blackhole exploit kit"..
a "blackhole exploit kit" tries to take advantage of several different possible vulnerabilities which might exist on a computer if everything on the computer is not up-to-date..
the "blackhole exploit kit" shouldn't be able to do anything if everything on a computer is up-to-date, though, from what i have seen, it is possible that it could leave a malicious file in your "java" cache, which is no big thing.. it can simply be removed/deleted, one way or another..
where are you seeing this "malware" being flagged? at what webpage? |
|
|
|
 Name GamePremium
join:2002-07-07
North Myrtle Beach, SC
kudos:6
1 edit | reply to Phoenix22
Hey JD..this might help.....
MSE had a change log on that one on Jan 19, 2012 05:36 AM UTC Def Version 1.119.129.0
»www.microsoft.com/security/porta···ckage=AM
see also...
You can search in Firefox's cache index. In the address bar, type or paste about:cache and then check the disk cache. It usually loads slowly if you have a lot of files in the cache. You should be able to search using Ctrl+f as you would in a web page.
»windowssecrets.com/forums/showth···lacole.S
and...
»removal-tool.blogspot.com/2011/1···-by.html
--
Gladiator Security Forum
»www.gladiator-antivirus.com/
|
|
Name GamePremium
join:2002-07-07
North Myrtle Beach, SC
kudos:6 | reply to Phoenix22
BTW this sailing site was hacked with that nasty and now seems ok »www.rcsailing.net/forum1/showthr···-warning
What site came up with the warning for you ? |
|
Phoenix22Death From AbovePremium
join:2001-12-11
SOG C&C Nrth | utoob |
|
Name GamePremium
join:2002-07-07
North Myrtle Beach, SC
kudos:6 | I am not surprised..have been on utoob for last few days looking at old black and white from the 40's myself but have not run into it there yet.... LOL but they do have a removal video on it there
»www.youtube.com/watch?v=iWcIGLsU···gQDBVvr1 |
|
 Doctor FourMy other vehicle is a TARDISPremium
join:2000-09-05
Dallas, TX | reply to Phoenix22
I would highly recommend adding NoScript to Firefox as an additional layer of protection against threats like this.
A few years ago when javascript redirects to rogue security software sites began to appear, I got hit with a variant of one of the older rogues out there, Winfixer, after viewing a flash ad. I installed NoScript shortly after that incident, and haven't seen a single browser hijacking attempt succeed since then.
--
I, for one, welcome our new Computer Overlords. |
|
Phoenix22Death From AbovePremium
join:2001-12-11
SOG C&C Nrth | said by Doctor Four:I would highly recommend adding NoScript to Firefox as an additional layer of protection against threats like this.
A few years ago when javascript redirects to rogue security software sites began to appear, I got hit with a variant of one of the older rogues out there, Winfixer, after viewing a flash ad. I installed NoScript shortly after that incident, and haven't seen a single browser hijacking attempt succeed since then.
whoa hold on.......i have no script installed .....and full security....it was removed instantly from my system....i just asked if anyone had encountered this BDTr......thanks....case closed....
--
101ST ABN Div. (AirAssault) "Rendezvous With Destiny!" "Night Stalkers/Phoenix Flight" For Buddy...who lived it! Whiskey for my men and beer for my horses! H.A.L.O!, 5th Grp., MACV SOG, 160TH AVN SOG, Death From Above, VFW, AmLegion |
|
