Silk Road forums

Discussion => Off topic => Topic started by: Jimmy Spliff on November 13, 2012, 12:01 pm

Title: I have clicked on this fucking adress :(
Post by: Jimmy Spliff on November 13, 2012, 12:01 pm
hy
i read this shit link from a guy witch is posting that everywhere...also in any black tar free samples...and i still clicked on them?
can you rate me some?? now i give this link into google at THAT comes http://pastebin.com/K8tW8sbj ????what is this meaning??maybe someone can help me out me virus detecter dont detect anything?
peace
Title: Re: I have clicked on this fucking adress :(
Post by: hass on November 13, 2012, 12:10 pm
Burn your house down immediately
Title: Re: I have clicked on this fucking adress :(
Post by: dns21 on November 13, 2012, 12:12 pm
you need to secure all data you have ever entered in your browser as it likely dumps all of it (passwords, credit cards etc..), after you have secured your computer. and consider future communications compromised.
likely it copies itself in many ways and you will never be safe, unfortunately the only solution is to re-install Windows.
anti-virus & firewalls are not good enough, any 'decent' virus will bypass it so dont rely on it.

take this as a valuable lesson for next time

Title: Re: I have clicked on this fucking adress :(
Post by: nomad bloodbath on November 13, 2012, 12:14 pm
Never clicks url address' found in the forum.
This has been a warning.
Title: Re: I have clicked on this fucking adress :(
Post by: Jimmy Spliff on November 13, 2012, 12:16 pm
did i have a troyana or some now???but when i clicked on this side...an comletely white side with nothing shown up???what is this??
did you think my computer is infected now?because my antivirus dont say anything??
peace
Title: Re: I have clicked on this fucking adress :(
Post by: dns21 on November 13, 2012, 12:21 pm
did i have a troyana or some now???but when i clicked on this side...an comletely white side with nothing shown up???what is this??
did you think my computer is infected now?because my antivirus dont say anything??
peace
Yes, likely the perpetrator already has all your passwords (email accounts, other online services, cd-keys, creditcards etc. etc..). Therefore you need to urgently take steps on external device to secure these data, your computer is compromised.  A virus-removal now is not safe.
It's a horrible job re-installing windows and all programs etc...  but trust me- it's for the best, and the only way to be sure.
All passwords entered in your browser - start fixing it now, but not with your current computer/windows as it's prolly compromised.
prolly SR accounts were the target, so don't log in there any time soon or ur wallets gna be ripped, surely.
Only the 'bad'/old virus are picked up by anti-virus, more important is caution.

It's a horrible job but it needs to be done- format & re-install your computer right away, and secure your data.  will give ya some time to think this thru aswell, hopefully smarter for the future:)

best of luck
Title: Re: I have clicked on this fucking adress :(
Post by: mania on November 13, 2012, 12:30 pm
...the fuck?

If you used the the tor browser bundle (as you should) and didn't mess with it to save your passwords and whatnot probably nothing has happened. Just delete the bundle and redownload it.
Title: Re: I have clicked on this fucking adress :(
Post by: kitkat82 on November 13, 2012, 12:34 pm
hy
i read this shit link from a guy witch is posting that everywhere...also in any black tar free samples...and i still clicked on them?
can you rate me some?? now i give this link into google at THAT comes http://pastebin.com/K8tW8sbj ????what is this meaning??maybe someone can help me out me virus detecter dont detect anything?
peace

download Malwarebytes and Avast and run the full scan with both ASAP.  Do it twice. 

If that doesn't help then it is best left to PC repair experts or under supervision.  Go to a tech forum and post your issue.  Usually they have a protocol of programs they want you to run and reports they want you to post so they can help you.
Title: Re: I have clicked on this fucking adress :(
Post by: Jimmy Spliff on November 13, 2012, 12:34 pm
thants why i gonna think to set up my pc new is unnecessary....because i was on that adress on tor. ..and dont have my real ip or some..also nothing on this side has shown up??only white side..i dont download anything or some....
and i dont see any changes about my pc...
peace
Title: Re: I have clicked on this fucking adress :(
Post by: dns21 on November 13, 2012, 12:37 pm
...the fuck?

If you used the the tor browser bundle (as you should) and didn't mess with it to save your passwords and whatnot probably nothing has happened. Just delete the bundle and redownload it.
yeah, I think this tor-browser bundle's default setup should be secure,  and if browsed thru this should not be at risc..

would suggest everyone start using this tor-browser bundle setup for their normal web-browsing instead of IE/Chrome/others.. 
a little hassle allowing each script you want run while browsing clearweb, as its soo much and all.. but 99% of it is crap anyway, and itll be for the best.
drive-by virus-downloaders like this are all over the normal net aswell, even on major 'trusted' websites..

get mozilla + torbutton + noscript (++ ??), very nice secure setup I think?

anti-virus & firewall is nice and may be helpful, but is not enough.  a good virus will bypass it and copy & frequently update itself to void detection.  If suspect infected, virus-removal is BAD to trust, need format + re-install Windows, really.
Title: Re: I have clicked on this fucking adress :(
Post by: Jimmy Spliff on November 13, 2012, 12:43 pm
OMG.....i download the malewarebytes and make a quick scan and it found 8 objects that where infected??what should i do now??
Title: Re: I have clicked on this fucking adress :(
Post by: Jimmy Spliff on November 13, 2012, 12:51 pm
please please help me out of that.....i post the review from my quick scan:

Infizierte Dateien: 2
C:\ProgramData\ADDICT-THING\bhoclass.dll (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
C:\ProgramData\OptimizerPro\updater.exe (Trojan.Dropper.H) -> Keine Aktion durchgeführt.

Infizierte Registrierungsschlüssel: 6
HKCR\CLSID\{B393077E-46C6-7C4B-91FE-80CCB34F55FE} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B393077E-46C6-7C4B-91FE-80CCB34F55FE} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{B393077E-46C6-7C4B-91FE-80CCB34F55FE} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B393077E-46C6-7C4B-91FE-80CCB34F55FE} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
HKCR\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.




what can i do should i remove it with this tool??
Title: Re: I have clicked on this fucking adress :(
Post by: dns21 on November 13, 2012, 12:55 pm
what can i do should i remove it with this tool??

If you are already infected (by anything), the only way to be safe is to re-install your windows and be cautions about remaining files as they may now be infected. 

Re-install Windows and secure your data, do it now.
Title: Re: I have clicked on this fucking adress :(
Post by: gazwel on November 13, 2012, 12:59 pm
What passwords are you going to have used in this current session of tor?

Probably this forum and nothing else, I would clean your comp anyway but unless you use the same password for everything you should be ok. I suspect this guy is trying to get SR passwords from people stupid enough to have the same password on here as they do there.
Title: Re: I have clicked on this fucking adress :(
Post by: 12345 on November 13, 2012, 01:17 pm
what can i do should i remove it with this tool??

If you are already infected (by anything), the only way to be safe is to re-install your windows and be cautions about remaining files as they may now be infected. 

Re-install Windows and secure your data, do it now.

This!!!

Verdammt, echt ist zwar ganz schön nervig aber setz deinen Rechner wirklich neu auf! Kannst ja in diesem Zug gleich Partitionieren und eine SavePartition anlegen, vollverschlüsselt.

Title: Re: I have clicked on this fucking adress :(
Post by: FreedomOutlaw on November 13, 2012, 01:23 pm
OMG.....i download the malewarebytes and make a quick scan and it found 8 objects that where infected??what should i do now??

Go to Geekstogo.com and post the results in the malware removal page. They are very good. They helped me out a couple times.


http://www.geekstogo.com/forum/forum/37-virus-spyware-malware-removal/
Title: Re: I have clicked on this fucking adress :(
Post by: Malignancy on November 13, 2012, 01:28 pm
please please help me out of that.....i post the review from my quick scan:

Infizierte Dateien: 2
C:\ProgramData\ADDICT-THING\bhoclass.dll (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
C:\ProgramData\OptimizerPro\updater.exe (Trojan.Dropper.H) -> Keine Aktion durchgeführt.

Infizierte Registrierungsschlüssel: 6
HKCR\CLSID\{B393077E-46C6-7C4B-91FE-80CCB34F55FE} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B393077E-46C6-7C4B-91FE-80CCB34F55FE} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{B393077E-46C6-7C4B-91FE-80CCB34F55FE} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B393077E-46C6-7C4B-91FE-80CCB34F55FE} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.
HKCR\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB} (PUP.DownloadnSave) -> Keine Aktion durchgeführt.




what can i do should i remove it with this tool??

One looks like some spam cookie.  The trojan dropper is another story.  Just follow through with Malwarebytes and quarantine them.
Title: Re: I have clicked on this fucking adress :(
Post by: Jimmy Spliff on November 13, 2012, 01:49 pm
now i have presse remove them....and i restard my pc ater removing...now i make a secound scan and nothing is there :)
is it removed?`?
Title: Re: I have clicked on this fucking adress :(
Post by: mrrad on November 13, 2012, 02:23 pm
You should delete all your system restore points , restart pc and do scan again ,, and keep on posting cause your a funny dude..
Title: Re: I have clicked on this fucking adress :(
Post by: Jimmy Spliff on November 13, 2012, 02:52 pm
 8) ok i have make a full scan and it run at this time .....it has about 105200 files and 0 bad files found untill now ;) i scan since 45 mins and nothing has shown up...i think its ok right now...but malewarbytes inform me about an outgoing connection to a dangerous side has bee blocked...what can this mean??....
peace
Title: Re: I have clicked on this fucking adress :(
Post by: Katnip999 on November 13, 2012, 02:54 pm
I almost went to this address, I saved it to use later but dont think I actually used it at all. The thing is yesterday or something I went away and when I came back my screen was all white just like someone said in this thread. It went back to normal when I pressed escape.

Does anyone who knows about this think Ive been infected with something, coz I cant be sure I clicked something in the last few days coz Ive been messing about. You say they use it to gather passwords you've typed into the browser does this include the TOR browser with things like my SR passwords?

Thanks for the heads up every one.
Title: Re: I have clicked on this fucking adress :(
Post by: Katnip999 on November 13, 2012, 03:00 pm
Jimmy.

Im not sure coz not computer geek guy but I got that malware thing and for some reason when I open up tor it sends me a message saying they blocked access to a potentially dangerous site or something. It always comes up and I just assumed it was because of the nature of TOR they cant protect you on TOR like they can with something like google sites but you know on TOR you cant expect or use normal things as they either dont work or compromise tor anonymity.

Not sure if anything I say means anything but Im a good guesser.
Title: Re: I have clicked on this fucking adress :(
Post by: Jimmy Spliff on November 13, 2012, 03:19 pm
yes you are right i think...it shows something with tor in this message from malewarebytes.....i also think its in the nature of tor.....
thanks for that ;) but can i bee sure that my pc is free from hackers or some???
peace

UPdate
171899 files 0 infected
scan since 1 hour 25 mins
i think i a free ;)
Title: Re: I have clicked on this fucking adress :(
Post by: Katnip999 on November 13, 2012, 04:00 pm
Ye you should get it confirmed by someone who knows what they are talking about and not just guessing.
Title: Re: I have clicked on this fucking adress :(
Post by: MarleysMainMan on November 13, 2012, 06:03 pm
Well if it helps, i clicked on the "link we do not speak of" and received the white screen as well but after just completing 2 runs each by superantispyware and malwarebytes i'm completelty clean! Plus like everyone else said, if you used torin it's default settings you should be good! Hope this helps and I certainly hope the mods take care of that thread and the one about accessing SR by disabling javascript in tor!

MMM
Title: Re: I have clicked on this fucking adress :(
Post by: Jimmy Spliff on November 13, 2012, 08:10 pm
yes it helps very much.....now i know that i am not the only one who clicked this shit  ;D
feels good  ;)
peace