weldeng web seems to have been hacked

admin

Nasty malware "win 7 internet security 2012" was activated while I was checking out the new posts.Admin might want to look into thatAlso, had trouble logging in.ɹǝʌo ǝɯ lloɹ 'sıɥʇ pɐǝɹ uɐɔ noʎ ɟı
Reply:Wrong place for this topic?Seems like something could be wrong with your computer.Gordie -- "I believe you understand what you think I said, but I'm not sure you realize that what you heard is not what I meant."
Reply:Just a heads up.  Mods can put it where they want.Coincidence, maybe.  This malware just popped on screen while on this site.ɹǝʌo ǝɯ lloɹ 'sıɥʇ pɐǝɹ uɐɔ noʎ ɟı
Reply:I had the same thing on vista.
Reply:I have the hardest time with this site, and no other. I use Linex Mint for operating system. Those ads at the top of the page make it very difficult to maneuver around, and all he!! to post. I have to hit the refresh button at least a dozen times to ever submit a post.Don’t pay any attention to meI’m just a hobbyist!CarlDynasty 300V350-Pro w/pulseSG Spool gun1937 IdealArc-300PowerArc 200ST3 SA-200sVantage 400
Reply:Tsor I've just had this turn up on my occur as well.....how do u get rid of it? Im pretty computer stupid, I have been using Microsoft essentials to try to prevent this kind of thing. How do I get rid of it now?
Reply:Use a replacement HOSTS file to block the ads from loadinghttp://winhelp2002.mvps.org/hosts.htmI browse on FreeBSD during the daytime at work, so I don't think I'll be getting it here.
Reply:Originally Posted by natesuehrUse a replacement HOSTS file to block the ads from loadinghttp://winhelp2002.mvps.org/hosts.htmI browse on FreeBSD during the daytime at work, so I don't think I'll be getting it here.
Reply:I use Chrome + Adblock Plus and have never had an issue. Mind you I'm using linux here at work and Mac at home, so I can't verify for windows.
Reply:Originally Posted by CEPWere you talking to me? If so, isn't that a windows based software?
Reply:Originally Posted by TSORNasty malware "win 7 internet security 2012" was activated while I was checking out the new posts.Admin might want to look into thatAlso, had trouble logging in.
Reply:Originally Posted by CEPI have the hardest time with this site, and no other. I use Linex Mint for operating system. Those ads at the top of the page make it very difficult to maneuver around, and all he!! to post. I have to hit the refresh button at least a dozen times to ever submit a post.
Reply:Originally Posted by natesuehrJust out of curiosity, what browser are you using under Mint?   I haven't browsed WW on my Mint box in quite some time, but I think that it was working with Chrome the last time that I used it.
Reply:Originally Posted by CEPMint 11 now, I was on 8. I do run Firefox, I'll go look for Addblock Plus.
Reply:Originally Posted by yakdungRun Firefox with "Addblock Plus" addon.Yakdung
Reply:Originally Posted by CEPWOW! That was easy, and it works! Thank you, thank you, thank you!
Reply:If you want something really unique then try Element Hiding Helper for Adblock Plus.It works with Firefox.With it you can highlight anything on the page, a title, an ad box, anything and hide it. Very useful for taking out any annoying element on the page.
Reply:thanks for the help, im gonna try this.....
Reply:Now, I apologize for sounding stupid, but i know nothing about computers. I installed the mozzilla firefox, so now when I want to use the internet I should open that page or will it open automatically, can I move all my favorites to that page or not, if so how do i do that, and this will take the place of internet explorer correct?
Reply:It wouldn't let me run any .exe file.  I googled it on my phone and was able to load a registry file that allowed me to run windows recovery.  Seems to be ok now.  I will only be accessing this site with my Droid for a while thoughɹǝʌo ǝɯ lloɹ 'sıɥʇ pɐǝɹ uɐɔ noʎ ɟı
Reply:I managed to get that virus on my wife's laptop(WinXP) as well. I did get rid of it manually as I couldn't find any removers for it. It surprisingly wasn't very hard if you're intimate with registry settings. I'm not sure if it came from here or thepiratebay cause I was at both sites in different tabs at the same time. It was the first virus I've ever seen that made it through FireFox. Usually it is very good at not letting stuff through, I was using a very outdated version though.But...This virus installed a file on my computer called, "JSY.EXE" then edited the registry settings for EXE(Applications) so that any program I tried to open, it would open JSY.EXE first, infect the program I was trying to run, then actually run the program. I rebooted in safe-mode, manually repaired the registry, deleted JSY.EXE, then uninstalled(completely-incase it was infected) avast, reinstalled avast, uninstalled and reinstalled FireFox(it turned out to be 1 of 2 programs that got nailed). Set Avast to do a Boot-Time scan, removed/repaired everything it found, and all has been fine since...It was a real super pain in the ***(Manually repairing the registry.) but I had way to much to lose stored on this computer if I would have had to wipe it out.Edit: Thanks for the tip about ADP. I'm a computer nut but somehow I overlook the simplest of things...Brad GeorgeCurrent Equipment:AIRCO Heliwelder IV 300Amp Model - Total Awesomeness!Old 120v Hobart Handler MIGVarious grinders, cutting tools, hammers, clamps, ect..."I'm an amateur welder with lots left to learn..."
Reply:Happened to me also, strangely on a Windows 7 laptop but not on a WinXP one. Both computers have up-to date anti-virus software.Definitely came from this site. Now using the old XP machine to browse this site, and will continue to do so until the Admins acknowledge this problem and fix it. JohnA few weldersA lot of hammersA whole lot of C-clamps
Reply:Originally Posted by Silicon-basedDefinitely came from this site. Now using the old XP machine to browse this site, and will continue to do so until the Admins acknowledge this problem and fix it. John
Reply:Personally, I browse with Firefox, Adblock Plus and Noscript.  I don't want to run any content that I haven't explicitly selected to see.I've dealt with a few sites using OpenX for their banner ads (I don't know what they use there), and it wasn't much time between when an exploit came out for OpenX until the banner ad site was hacked, and it wasn't much time after that that Google Webmaster tools marked the site as malware and blocked visitors (through browser safety checks that most browsers have nowadays).  Boy did the stuff hit the fan.Hopefully the admins acknowledge this and are on top of it before it gets to that. . .
Reply:you might convince your wife that the malware came from this site,but we know where you were really surfing.miller thunderbolt 250vlincoln square wave tig 175 prolincoln idealarc mig sp250everlast tig 210EXTeverlast power plasma 50chicago electric (hf) 130 tig/90 arcchicago electric 90 amp flux wire3 sets oxy/acetYou didnt get it from this site. Its a worm, you got it from an executable file you downloaded and ran either from downloading a file or a file in an email and clicking and running that .exe file...tackleexperts.comwww.necessityjigs.comhttps://www.facebook.com/groups/mach...dingequipment/
Reply:Vista anti virus 2012 is from pop ups is what I was told.I got it also three days ago.Tim Beeker.
Reply:Guys!! There is a great website with excellent instructions and links to curealot of the issues mentioned. You may need A DIFFERENT computerand a flash drive, floppy disk, SD card, or some other removable media.Check out www.bleepingcomputer.com....and stop clicking every porn link that appears on the screen! How do you know the blacksmith's dog? When you hollar at him he makes a bolt for the door!
Reply:^^^ check out what he said ^^^he knows what he's talking abouti should know seriously tho, i've used the info from them a couple timesHow do you know the blacksmith's dog? When you hollar at him he makes a bolt for the door!
Reply:So is it from here or not?  Is this just a coincidence that some of those that got it happen to visit the WeldingWeb?Last edited by Aquafire; 12-30-2011 at 08:49 PM.Lincoln AC225 & MigPak 140, Lincoln Magnum SpoolGun, Miller Spectrum 375-X Plasma, Syncrowave 200 TIG, Millermatic 252 MIG, Miller Digital Elite, General 7x12" horiz/vert bandsaw, 3' box/pan brake, 20 ton press, milling machine, 12x28 lathe, etc.
Reply:hmmm problem with that linkSo I guess I can't figure out how to link to their site (bleepingcomputer.com) but if you....Google search  "how to remove vista virus bleeping"click the first link and they will give you detailed instructions on how to proceed.Sorry for the confusion but they are a reliable resource for removal info. You will still probably need a different computer that is not currently infected and a way to transfer the downloads.Last edited by that'll_buff_out; 12-30-2011 at 08:55 PM.How do you know the blacksmith's dog? When you hollar at him he makes a bolt for the door!
Reply:nope it's not from here (weldingweb.com)it's all over the web and from popups, crappy sites without any security, and many porn sites (seriously)How do you know the blacksmith's dog? When you hollar at him he makes a bolt for the door!
Reply:Originally Posted by Silicon-basedHappened to me also, strangely on a Windows 7 laptop but not on a WinXP one. Both computers have up-to date anti-virus software.Definitely came from this site. Now using the old XP machine to browse this site, and will continue to do so until the Admins acknowledge this problem and fix it. John
Reply:I just started up in safe mode , selected safe mode with command prompt.The when it got to c;\windows\system32\ I added rstui.exe to the end of it.I rebooted from a week before the infection.Voila, gone.Tim Beeker.
Reply:It happened to me after coming to this site as well, I got rid of the problem came back here to this.  Site and it happened again. There. Are only 4 sites that I would go to with that computer this site Craig's list eBay and rigewelder.  I talked to my computer Guy and it could have come from here and the admins might not know yet
Reply:I checked the WeldingWeb site with 3 different threat scanners and they all found no issues, have been on this site with 3 Windows boxes and 2 Linux boxes with no issues. Needless to say all computers are up to date with current antivirus  "http://free.avg.com/us-en/homepage" and firewalls. I wouldn't run any Windows before Vista and for that fact I wouldn't actually run any windows before Windows 7 for myself but I have been able to get new versions for free through my previous employer. Get some good antivirus "http://free.avg.com/us-en/homepage", and if your system has issues the only reasonable way to get rid of it is a fresh install of windows, you can never really tell what has been compromised once you have been infected. And most likely you downloaded and installed the issue yourself and will again. If you are pron to downloading viruses I would recommend running a Linux live cd.Last edited by nikodell; 12-31-2011 at 04:20 AM.
Reply:Originally Posted by yakdungIf the virus came from this site, how do you know that? I run XP-Pro with standard anti-virus and have never encountered any issues.Yakdung
Reply:Originally Posted by brucerYou didnt get it from this site. Its a worm, you got it from an executable file you downloaded and ran either from downloading a file or a file in an email and clicking and running that .exe file...
Reply:Originally Posted by TSORNasty malware "win 7 internet security 2012" was activated while I was checking out the new posts.Admin might want to look into thatAlso, had trouble logging in.
Reply:A couple of weeks ago when I opened this site 2 or 3 times my ESET jumped in and  blocked something, can't remember exactly what but I seem to remember a trojan was mentioned in the ESET pop up.Miller Challenger 172Miller Thunderbolt AC/DC 225/150Miller Maxstar 150 STLVictor 100CVictor JourneymanOxweld OAHarris O/ASmith O/A little torchNo, that's not my car.
Reply:Originally Posted by CEPWOW! That was easy, and it works! Thank you, thank you, thank you!
Reply:I was in the thread on painting questions when my anti-virus stopped an attack.  It was a generic trojan attack.  I'm pretty sure it came from this site.  Am cleaning up things now to make sure the software cleared it up.
Reply:Originally Posted by CEPI have the hardest time with this site, and no other. I use Linex Mint for operating system. Those ads at the top of the page make it very difficult to maneuver around, and all he!! to post. I have to hit the refresh button at least a dozen times to ever submit a post.
Reply:Originally Posted by hp246I was in the thread on painting questions when my anti-virus stopped an attack.  It was a generic trojan attack.  I'm pretty sure it came from this site.  Am cleaning up things now to make sure the software cleared it up.
Reply:Originally Posted by jackalopeI NEVER search any porn or anything like that. What I DID do was open this site up and immediately got blasted with everything. That has never happened to me before. We have a very secure network where I work and I am 100% positive that whatever happened came from here.Grant
Reply:Originally Posted by CEPI have the hardest time with this site, and no other. I use Linex Mint for operating system. Those ads at the top of the page make it very difficult to maneuver around, and all he!! to post. I have to hit the refresh button at least a dozen times to ever submit a post.
Reply:I have 0 Ads at the top of the page and I use Google Chrome.
Reply:Originally Posted by that'll_buff_outGuys!! There is a great website with excellent instructions and links to curealot of the issues mentioned. You may need A DIFFERENT computerand a flash drive, floppy disk, SD card, or some other removable media.Check out www.bleepingcomputer.com....and stop clicking every porn link that appears on the screen!
Reply:Firefox with NoScript. I also run the Ghostery add-on. I see nothing I don't want to see.Lincoln Idealarc 250 (circa 1962)Lincoln Weldpak 155 w/Mig KitLincoln Squarewave TIG 175
Reply:Porn sites have incentive to make sure their customers can pay and don't make money from malware in most cases. Sloppily maintained non-porn sites can be infected with nasties without the owners caring, and adverts from them can be linked from well-maintained sites.Trust nothing. Check everything,If you can manage to find exactly what caused the infection please post. I've been trying to get a Windows test install infected with no luck! (No, I don't post from it, it's in a VM.)I run a Virtual PC, and download the software inside an isolated virtual computer and test things out inside there before it gets put on my actual computer. That way if it would be infected, the infection cannot spread past the walls of the virtual system. I have way to much stuff to lose if my system gets infected as my backups are way out of date. I need to invest in another external 1TB hard drive and make an image of all my hard drives.