Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

IS THIS SITE HIJACKED - INFECTED ?


  • Please log in to reply

#1
Alan_B

Alan_B

    Member

  • Member
  • PipPip
  • 20 posts
I Googled for 1C04C61346A1FA3139A37D860ED92632AA13DECF
The first dozen results were related to Torrents, which I have never used.

Result 11 of 18 was

SysProt AntiRootkit v1.0.1.0 by swatkat ...
... Object: C:\Documents and Settings\Kelland\Application Data\Adobe\Flash Player\AssetCache\5SQ9YV37\1C04C61346A1FA3139A37D860ED92632AA13DECF.heu Status: ...
www.geekstogo.com/forum/post-a32410-.html - Cached - Similar

Google did not warn me that this site would damage my computer,
and I recognised geekstogo.com as a site I use and trust,
so I clicked on the first line "SysProt AntiRootkit v1.0.1.0 by swatkat",
and was horrified to find a zip file presented with choices of run or download.
Because I trust my defences I allowed the download (but definitely not RUN).

I then selected "www.geekstogo.com/forum/post-a32410-.html" and pasted into the Firefox address bar.
Yet another Untitled TAB and immediate ZIP download without any options offered.

The Firefox download manager reports the download link as
http:\\www.geekstogo.com/forum/post-a32410-.html
FOR YOUR SAFETY the above is corrupted, for http:\\www please understand http://www
The download file is SysProtLog.zip size 202,082 bytes

Is it normal practice for this site to download a ZIP file when a Google html link is clicked ?

Has some-one managed to post a spam type topic ?

I Googled for 1C04C61346A1FA3139A37D860ED92632AA13DECF because I suddenly received in a new folder
C:\Documents and Settings\Dad\Application Data\Adobe\Flash Player\AssetCache\75EJ9GA4
554 KB in these 3 files
1C04C61346A1FA3139A37D860ED92632AA13DECF.heu
1C04C61346A1FA3139A37D860ED92632AA13DECF.swz
cacheSize.txt

And NO, NO, a thousand time NO, I have never got involved with torrents,
even though most of the Google results seem to be involved in that activity ! ! !

Regards
Alan
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP