NEW VIRUS, WEB SITE TURNS OFF COMPUTER!

system · 2007-04-26T08:23:18.000Z

DO NOT VISIT THIS WEB SITE OR YOU MIGHT CONTRACT A VIRUS. BUT, ALL I KNOW IS THAT I VISTED IT AND IT SHUT DOWN MY COMPUTER. IN FACT, EVERYTIME I VISIT IT, IT WILL SHUTDOWN MY COMPUTER.

SO, I WILL POST THE URL TO THE SITE, BUT DO NOT CLICK ON IT
DO NOT CLICK ON IT
I REPEAT, DO NOT VISIT THIS SITE.

ok, the site is www DOT gmbar DOT com

I was hoping that some of the professionals at avast could help me out.
I clicked on the google cache for this site, and my computer screen went black, then my monitor started to turn off and on ever second.
I have windows xp x64. I was using firefox. I will reformat/repartition my drive.

Could any of you employees at avast figure out what the heck this is?

RejZoR · 2007-04-26T10:47:54.000Z

Hm, i’ve visited the page and nothing happened. Tried Firefox 2 and also IE7. Must be something else…

system · 2007-04-26T11:29:21.000Z

Well, my computer has been acting strange, ie AV and Firewall not working properly. I have had random black screens, yet, it is odd that visiting a web site would cause this.

Also, I am wondering if it is some flash expliot, do you have flash.
Becasue I saw in the html file that it was running flash.

Lisandro · 2007-04-26T11:41:23.000Z

ErikW1248 post:1:

I have windows xp x64.

Maybe you can scan with some on-line service before formating…

Kaspersky
Trendmicro housecall
Ewido
F-Secure
Panda ActiveScan
BitDefender (free removal of the malware)
HitmanPro (new online scanner)

system · 2007-04-26T17:36:13.000Z

Yes, I will try that

Lisandro · 2007-04-26T17:51:56.000Z

ErikW1248 post:5:

Yes, I will try that

Please, post the results…

system · 2007-04-26T18:41:23.000Z

It is still scanning, but I did notice something odd in the registry:
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/`ko$8

And, that was never there before and it is blank.

Also, what was odd is that in my avast firewall log, there was this user: åõa}0aí

åõa}0aí, is not a user on my system.

Also, I am having recovered file fragments show up in My Documents.

UPDATE:
I just now noticed that rootkit revealer crashes whenever I run it. AND, it worked about 3 days ago. Even redownloading it does not fix the issue.

system · 2007-04-29T00:53:49.000Z

RejZoR post:2:

Hm, i’ve visited the page and nothing happened. Tried Firefox 2 and also IE7. Must be something else…

ErikW1248 post:1:

DO NOT VISIT THIS WEB SITE OR YOU MIGHT CONTRACT A VIRUS. BUT, ALL I KNOW IS THAT I VISTED IT AND IT SHUT DOWN MY COMPUTER. IN FACT, EVERYTIME I VISIT IT, IT WILL SHUTDOWN MY COMPUTER.

SO, I WILL POST THE URL TO THE SITE, BUT DO NOT CLICK ON IT
DO NOT CLICK ON IT
I REPEAT, DO NOT VISIT THIS SITE.

ok, the site is www DOT gmbar DOT com

I was hoping that some of the professionals at avast could help me out.
I clicked on the google cache for this site, and my computer screen went black, then my monitor started to turn off and on ever second.
I have windows xp x64. I was using firefox. I will reformat/repartition my drive.

Could any of you employees at avast figure out what the heck this is?

DavidR · 2007-04-29T00:59:25.000Z

And you point is ???

system · 2007-05-04T20:28:28.000Z

I found a virus during an online scan. It is called Casper, a file infector. I saved it to a floppy disk before I wiped my hard drives. Although, I have a feeling that this might be a false positive because even after reformating, my computer was acting haywire. I found that out of 3 of my raid zero hard drives, 1 had smart turned on, the others had it off. The one with smart on had many reallocated bad sectors and some seek problems. Now, I don’t know if this is caused by a bad cable (I have a IDE to SATA converter), bad Hard Drive, or bad power supply. The reason I think it could be the PSU is that I bought 4 generic power supplies from a local computer shop for a buisniess, 4 of them failed. And, I bought an Antec from them and I suspect it might be failing. So, I bought a really tight power supply tester.

Anyways, the point is, I will later upload you the virus file and if it is a real virus, then I hope it helps avast. If not, oh well.

DavidR · 2007-05-04T21:28:35.000Z

Thanks for the feed back.

I have been using an Antec True Power 480 for several years and it hasn’t so much as had a hiccup considering the damage a failed PSU can cause it is a false economy to get a cheap no-name PSU.

However with 4HDDs and your RAM, Graphics and other peripherals I would imagine that you would need a fairly high power PSU 600 plus probably if you have powerful graphics/SLi.

Announcements