Topic: Please read, NOW
no photo
Tue 05/05/09 09:44 AM
There is a program being loaded onto comps. I having a helluva time right now cleaning my Moms two comps

She visited a site, it's called "BBW". I asked what the full name is. She doesn't remember much else about it. Until I find out more, please be careful. It has a password stealer and browser hijacker. I couldn't even find it in the history file as todays history is wiped clean.

All I can tell you right now is that it puts a fake program on your comp that says you're infected with numerous trojans...


DO NOT CLICK ON THE ICON ON YOUR DESKTOP, DO NOT CLICK ON THE POP UPS, DO NOT TRY TO OPEN THE PROGRAM. GET YOUR LATEST UPDATES FOR ANIT VIRUS AND SPYWARE DETECTORS AND DISCONNECT FROM THE INTERNET, THEN RUN THEM.
My suggestion is to set the heuristics to aggresive...

One sure way to tell if this is bogus AV ware is that it says it detected a trojan on July24, 2009...

I'll repost more when I find out anything,,,

no photo
Tue 05/05/09 09:46 AM
Edited by southgaangel on Tue 05/05/09 09:47 AM
Big Beautiful Women ????what

tHATS one of my FAv SITES!tears

no photo
Tue 05/05/09 09:56 AM
Icon: Orange shield, two diagonal grey lines running from top left to bottom right.
Not sure why but Norton didn't catch until I updated and rescanned full, she might have only done a quick scan...

FreeToB's photo
Tue 05/05/09 10:26 AM

There is a program being loaded onto comps. I having a helluva time right now cleaning my Moms two comps

She visited a site, it's called "BBW". I asked what the full name is. She doesn't remember much else about it. Until I find out more, please be careful. It has a password stealer and browser hijacker. I couldn't even find it in the history file as todays history is wiped clean.

All I can tell you right now is that it puts a fake program on your comp that says you're infected with numerous trojans...


DO NOT CLICK ON THE ICON ON YOUR DESKTOP, DO NOT CLICK ON THE POP UPS, DO NOT TRY TO OPEN THE PROGRAM. GET YOUR LATEST UPDATES FOR ANIT VIRUS AND SPYWARE DETECTORS AND DISCONNECT FROM THE INTERNET, THEN RUN THEM.
My suggestion is to set the heuristics to aggresive...

One sure way to tell if this is bogus AV ware is that it says it detected a trojan on July24, 2009...

I'll repost more when I find out anything,,,



She did not just land on a website and get any virus unless her security settings are set to automatically install unsigned controls. Nobody is at that setting. She had to have clicked on a dialog that either said "you need to download //xxxxxxx/ to view this web page" or she clicked some other dialog to accept something.

There is NEVER any website that can detect if you have a virus, trojan, etc without you FIRST allowing it to load an ActiveX, or other script control. Websites have no access to scan your system unless you load a control or application to do so.

If any website says "your system is infected.....", its a scam and will probably infect you once you click any button. Smitfraud works like this.

If you get this message press ALT-F4 to close the windows. Do NOT click the YES or NO buttons on the dialog box. The programmer decides the methods executed for these buttons OnClick events and the forms (dialog box) BeforeClose, OnClose, BeforeExit and OnExit events.

YOu should never install toolbars or other BHOs unless you KNOW exactly what it is and who makes it. No cursors, screensavers, either. If you download FREE anything, it's likely not good.

YOu also should NEVER open any email attachment without knowing it's sender, and then never any attachments with executable extensions. These include:

ADE - Microsoft Access Project Extension
ADP - Microsoft Access Project
BAS - Visual Basic Class Module
BAT - Batch File
CHM - Compiled HTML Help File
CMD - Windows NT Command Script
COM - MS-DOS Application
CPL - Control Panel Extension
CRT - Security Certificate
DLL - Dynamic Link Library
DO* - Word Documents and Templates
EXE - Application
HLP - Windows Help File
HTA - HTML Applications
INF - Setup Information File
INS - Internet Communication Settings
ISP - Internet Communication Settings
JS - JScript File
JSE - JScript Encoded Script File
LNK - Shortcut
MDB - Microsoft Access Application
MDE - Microsoft Access MDE Database
MSC - Microsoft Common Console Document
MSI - Windows Installer Package
MSP - Windows Installer Patch
MST - Visual Test Source File
OCX - ActiveX Objects
PCD - Photo CD Image
PIF - Shortcut to MS-DOS Program
POT - PowerPoint Templates
PPT - PowerPoint Files
REG - Registration Entries
SCR - Screen Saver
SCT - Windows Script Component
SHB - Document Shortcut File
SHS - Shell Scrap Object
SYS - System Config/Driver
URL - Internet Shortcut (Uniform Resource Locator)
VB - VBScript File
VBE - VBScript Encoded Script File
VBS - VBScript Script File
WSC - Windows Script Component
WSF - Windows Script File
WSH - Windows Scripting Host Settings File
XL* - Excel Files and Templates

And you should always have an >>updated<< anti-virus/anti-malware program loaded and running resident. If you are only running an Anto-virus program, it will only find VIRUSES, not simple spyware or malware.

Everyone operating a PC should know all this or it's just an accident waiting to happen.

longhairbiker's photo
Tue 05/05/09 10:28 AM
I'm not into BBWs. Most of them have viruses.