BAD VIRUS ON IMAGESHACK

**johnnieangel** · October 16, 2011, 01:15 PM

Just an FYI- after downloading my last set of screenshots and got a nasty virus called "Cloud protection" Turns out its a nasty Trojan that bombards your PC with virus warnings and tells you to buy their Spyware protection. Then the key logger steals your info. pass it on

**kyler721** · October 16, 2011, 01:19 PM

Ive seen this virus and delt with it. Try a system restore. Seems to be the only way to get rid of the spyware notifications

**johnnieangel** · October 16, 2011, 01:24 PM

Thats what I did and it seems to work ok now.. what a bugger it is! I didnt even lose my saves from last night! woot!

**kyler721** · October 16, 2011, 01:26 PM

Im not sure what it is but system restore seems to be the only way to kill it. Not even virus scans works because it disguses itself as a system process therefore the virus scan doesnt detect it

**dvk901** · October 16, 2011, 04:44 PM

Originally Posted by kyler721

Im not sure what it is but system restore seems to be the only way to kill it. Not even virus scans works because it disguses itself as a system process therefore the virus scan doesnt detect it

It is likely this is not a virus, but what we called straight up 'Spyware'. The reason your anti-virus can't find it is because it doesn't 'infect' like a virus. This type of thing usually attaches itself to a Web entry in the Registry so that it runs when your browser runs. That's why system restore removes it, because a previous version of the Registry is what is restored. Spybot would more likely be able to find stuff like this.

**kyler721** · October 16, 2011, 04:52 PM

Originally Posted by dvk901

It is likely this is not a virus, but what we called straight up 'Spyware'. The reason your anti-virus can't find it is because it doesn't 'infect' like a virus. This type of thing usually attaches itself to a Web entry in the Registry so that it runs when your browser runs. That's why system restore removes it, because a previous version of the Registry is what is restored. Spybot would more likely be able to find stuff like this.

Thank the Gods of Mars for System restore then

**johnnieangel** · October 16, 2011, 05:49 PM

Originally Posted by dvk901

It is likely this is not a virus, but what we called straight up 'Spyware'. The reason your anti-virus can't find it is because it doesn't 'infect' like a virus. This type of thing usually attaches itself to a Web entry in the Registry so that it runs when your browser runs. That's why system restore removes it, because a previous version of the Registry is what is restored. Spybot would more likely be able to find stuff like this.

whats another good option to imageshack for screenshots?.

**Paedric** · October 16, 2011, 01:53 PM

It basically goes back to the latest working state, and exactly this one.
Everything new is removed, everything deleted is restored.

Where exactly did you got this malware?
What browser and av do you use?

**johnnieangel** · October 16, 2011, 04:28 PM

If I were to narrow it down, the ony new site I spent much time on recently was Image shack. Im using Mozilla and I run something not extremely hardcore like malwarebytes

**tone** · October 17, 2011, 12:40 AM

Spybot is good, as is adaware for removing those sorts of things

**Ybbon** · October 17, 2011, 04:35 AM

I use picasaweb which is OK. But I also use 3 types of AV and anti-malware etc.

**apple** · October 17, 2011, 11:26 AM

Originally Posted by ybbon66

I use picasaweb which is OK. But I also use 3 types of AV and anti-malware etc.

Ugh 3 AV's, that must really slow your pc down.
I'm currently without any AV as I'm running the windows 8 dev preview (no AV works).
Though it really wouldn't matter that much if I'd got a virus as I only use W8 for games while all the rest of my stuff are securely stored in OS X Lion.

**Ybbon** · October 17, 2011, 03:25 PM

Originally Posted by apple

Ugh 3 AV's, that must really slow your pc down.
I'm currently without any AV as I'm running the windows 8 dev preview (no AV works).
Though it really wouldn't matter that much if I'd got a virus as I only use W8 for games while all the rest of my stuff are securely stored in OS X Lion.

No, not really. My secure stuff is on a separate linux partition. I have a SSD boot drive and then a large capacity data drive. Most stuff is on the large drive so speed on the SSD is great.

I have a licensed copy of BitDefender which works well, then Malware bytes and something else (I forget what), they run on schedules so generally have no major impact. That and my PC is pretty good anyway, the 8GB of RAM and quad-core probably help there

No good for RTW but not bad the rest of the time.

Oh and like DVK I use Opera and have done since v3 (I think), way back anyway. I never use IE, rarely use firefox and stick to Chrome or mainly Opera.