blonde poker forum

There is a thread on 2+2 claiming this site has a virus (keylogger).  Can someone please confirm/deny?

Something flashed up on my computer about 12.30 saying this website is asking you to download something.  Then when you ignore it it brings up a fake virus scanning thing...

Also my Symantec anti-virus has picked up a 'tracking cookie'

Yes, something definitely popped up on my screen about that time

Do you have the link to the thread?

I'm investigating it all now.

yeah, WTF this keeps poppin up on mine when on here too.

iv sure as fk got any Anti Virus shit, anyone know anything free i can sort it?

I've had some weird shit come up a couple of times today

Nothing popped up for me when I landed 20 minutes ago.

Yep done it 3 times now, what do I do plz, I have no virus protector, not impressed.

this plz

http://forumserver.twoplustwo.com/29/news-views-gossip/anyone-blonde-poker-here-737564/

Yeah I got the warning too. Wouldn't let me open certain pages in the live poker section but seems fine now.

You shouldn't be getting it any more.

I'm still checking everything to make sure though.

It has happened me too i thought it was my computer.

What if you downloaded the spyware stuff they offered will the lappy be fcuked?

I got a warning too.

Should I do owt to protect my PC as a result? Im a bit clueless about these things

Looks like Kellett is back on Blonde

I would do a scan pronto mate, XoftSpySE is good.

I just had a problem as well,said i was infected and had 30 threats stopped the session I was in because of it FML,Just ran AVG anti virus and said It was fine,should I be ok ??

PS Rich/Rooks you can get AVG anti virus free that's what I have and was told that was suffice

I would guess this was the 'fake' virus scanner, it looks like something windows would do, even has windows replica pop-up boxes...

There was a fake antivirus message so it seems that is what you saw and you should be OK.

When did that happen to you? Now or a little while ago?

I am clueless when it comes to things like this any quick advice?

About 12:45 ish

sdfghjkjhdsd

Restarted comp, and my Desktop Icons didnt appear, didnt no how to. And this thing that popped up before insta pops up when laptop restarts.

So restarted again.. same again.

So i have gone to install AVG thing monda reccommened and i cant 'run' it.

Help!

Would be a bit more believable if I wasn't currently running linux :)

press f8 when rebooting your machine, until a text menu comes up. choose 'start with last known good configuration' and try to get it running from there.

if that doesnt work, you can try starting in safe more, also available from the same menu,

Yep, got this - AVG identified it as exploit.pdf, seems to have managed to remove it.

I keep getting a picture of a greyhound

Justice for the saints coo

I'm running a scan now, pretty worried as I got this several times

Microsoft security essentials + ccleaner and u be sorted. Both free.

Found some kind of trojan in my Victor Chandler software file

Is VC on iPoker?

Lots of places class the software as a trojan as an unscrupulous skin used drive by downloads to install on machines without user consent.

lol at all these people who have no protection on the machines they have live money poker accounts on.


your all fuckin mental!!!

Serious question,Would you say avg anti virus,the free basic thing is enough protection ? or am I in this category :)

So any idea what it was/where it came from?

serious question, do you value your account details and balances so little as to entrust them with something you downloaded for free off the internet ?

It looks like they found an exploit in the ad server to serve additional javascript with the ads that then displayed the fake antivirus page a small % of the time.

Yes, its not my money at the end of the day :D

I was told that AVG is more than suffice and I'm naive enough to believe that,I just put serious question as I found your comment funny that's all.Your advice would be appreciated,thanks.

Did this,
In Safe Mode, your not/cant connect to internet.

In 'last known good config' it wont let me open anything or run the anti virus prog once downloaded, to install.

:(

Does the thing that popups have a name?

Would make it easier to tell which variant it is and tell you how to get rid of it.

I've had it too, its just the standard red screen you get saying there is a virus warning with the page you are visiting, with a tick box asking if you are happy to proceed. Its not appearing now though.

I'm assuming people who've seen these screen are using Internet Explorer as their browser and not Firefox, or has anyone using Firefox seen them too?

Oh and please, everyone use some sort of virus protection - even if it is avast or avg which are both free to home users.

People without virus protection. Buy Webroot, totally worth it.

Security Centre or something.

Its not allowing me to open much, even stuff like Control Panel.


Using Firefox.

I had it on Chrome if that in any way answers your question.

I have all the Norton package and mine looks fine, in fact since I have had Norton I've never really had a problem with it in over 4 years.

Have chrome too, just running Nod 32 now and have already checked for spyware.

As a purchased option, what would you recommend Boshster?

download malwarebytes, that should get rid of it

I cant..i click to download. It downloads, then when you go to run it, just nothing happens and cant run it.

try renaming the mbab-setup.exe file to something else, to fool the malware into thinking it isnt malware bytes

My Great Grandma is better at using computers than ChipRich.

She gives better head too.

I'm no expert in this area - so Laz can probably advise you more than I can.

Have you tried to boot up in 'Safe Mode' and run a system restore?

ok then, how do i get my Laptop back to normal buddy?

:(

http://www.bleepingcomputer.com/virus-removal/remove-personal-security

Or get someone else to download it on their computer and use a USB stick or CD to transfer it onto your computer.  Just make sure you don't put anything on the USB drive that will affect another computer when it's used in the future.

on firefox the page turns into another page called homsearch something, and it starts trying to open files before i click off it.

it was called personal security

doesnt really matter, they are pretty much the same thing just with different names

was happening to me on firefox for about 1/2 hour. thought it might've been today's ff update so switched to ie but got the same on that

can't remember what it was but my av caught it then after a while it stopped

Looks like this will help, but


2. It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then you will need to download the files requested in this guide on another computer and then transfer them to the infected computer. You can transfer the files via a CD/DVD, external drive, or USB flash drive.


Sure know how to do this though.

My CD/DVD drive sure as hell works.

I got this with firefox as well and closed the window.

I didn't click on anything just closed firefox - has this page put malware on my brand fckin new totally clean laptop?

 

Do you (or anyone you can ask) have a usb memory stick?

I haven't and currently at my parents, and if i ask them if they have a USB memory stick. They'l just look at me with a blank face and wonder wtf im talking about.
hmmm

Nope, you did the right thing.  It can't infect your computer unless you actually run it.

Run a scan using malwarebytes as Laz recommended though if you want more peace of mind.

http://images.google.co.uk/images?q=usb+stick

I was wondering how it worked, and I'm guessing that it asks you first to install something or run something in your browser, and only then it can infect your machine.

Sounds like a nasty bugger!

Can you get into windows explorer? (aka My computer, file manager, thing that opens when you press windows key and e at the same time)

Yeah, pressing Windows key and E, opens my Comp, then can go to prog files from there.

my av said it was blocking the connection to some site or other that I can't remember the name of. I checked this with mcaffee etc and none of them had heard of it so guess it's new. cleared my browser history so can't check the name

We might be in luck then.

Get that up. Click Search.

Search for all files and folders.

Search string *.exe

Then expand the modified bit and set it to created today.

Does it find anything?

Searched .exe, finds the Personal Security thing x 2.

Then the 2 things i tried to download on as people reccomended on here. AVG and XoftspySE (which wouldnt let me run once installed)

Can you rename the folders the personal security things are in and t hen reboot.

ok, rebooted.

Can you run malwarebytes now?

no, fml.

Did it let you rename the folders and did you rename them both?

yep.

Just gone back to it now, and theyve gone back to what they were origianlly called before the reboot.

Press CTRL+SHIFT+ESC

Does taskmanager come up?

nope

Was the main problem when you were in safe mode that you couldn't get online? i.e. did other things work?

I had this same exact situation rich, i sorted mine. Best of luck with yours

seemed to be, yup.

just picked this up on my system. don't know if it's related

(http://i333.photobucket.com/albums/m389/_gatso_/Capture.png?t=1268846426)

meh, that didn't work

this http://i333.photobucket.com/albums/m389/_gatso_/Capture.png?t=1268846426

So can you:

a) install malwarebytes in safe mode
b) delete the bad files in safe mode
c) select safe mode with networking and get malwarebytes working?

Don't think it's a big issue (if an issue at all gatso).

Right, I wasn't getting anywhere.

So my dads took it to someone who is apparently 'good with computers' and sorts stuff like this out all the time' LOL

on my phone now, as got no laptop. Sigh

gl me and ty bongo, kin, laz etc for trying to sort it.

Ty to whoever put the virus on this site too :)

justice

Cue BH opening a new account 'RHarehasnoPC'

defo justice

seriously guys i cant believe that some of you guys that have huge figures in there poker accounts and use cards to refill and take money out of there accounts dont have atleast a basic anti virus on there machines.

i dont have a fraction of some of your bankrolls but i wouldnt go near my bank or poker account without making sure my details are secure

I had the AV virus a few times, it's a real bastard.

It messes with your registry, if you restart your computer and no programs will run anymore or it asks you "choose the program you would like to open the file with" then you need a .exe file association fix.

Download this: http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip Extract and double click it, that should fix it and the programs should run properly.

Then download Malwarebytes run it and remove the virus then get a firewall, PC Tools Firewall Plus is free and has caught the virus a few times now.

Don't you think Rich has had enough rubdowns today?

i dont care the pays more in buy ins in one day than i play in a year he should have his computers as tight as fort knox

i thought he was smarter than that or maybe as rookie said at the end of the day its not his money

Lol at all the anti virus lovers on this thread.

they are respawning processes, so that when you delete them, they automatically recreate themselves on startup.

another thing to try is system restore, which will restore your machine to a checkpoint before you had he virus

lol. nh guy.

Richs computer problems are such justice for his Southampton tip.

System restore doesn't run though once its trashed ur PC. It does after you do the .exe fix.

All the time spent not worrying about virus' is used to study the pokers ldo

but all the time not keeping there pc's clean will mean an idiot like me that makes a small profit or even a small loss will have more money in long run
as i shouldnt have to worry about getting my details stolen

Pretty sure you've lost more in the past 5 years than I could tomorrow if I got hacked.

How likely do you really think it is for an unprotected PC user to have their online poker acct details stolen?

pretty sure your wrong but that semantics, in comps along in last 10 months i am over $20k up

i seriously hope that you guys without AV software dont use your bank cards online or have internet banking as you will have no cover if your hacked

like i said it doesnt matter... my bank is empty and my poker accounts only have dempseys money

so if your account is hacked you wont feel obilgied to repay the money lost to dempsey
and he wont expect you to pay it back

sorry i still feel you should get yourself a decent AV as i know you play more in a day than i normally play in a year and i think that silly to risk that for the sack of £25 a year

as a saint fan i do agree with this

but we did beat leeds at weekend so makes up for it

The last report I read reckoned an unprotected PC (XP) gets compromised in about 8 seconds. From there I'd say it won't take long for the account to be emptied.

Things improve if your OS is up to date etc

I thought you'd know that online poker is a big target for fraudsters...

lol, you won't even let your bank know your address in case they rob you

if i was balla and xould afford to be robbed then maybe i wouldnt be so security minded
but i dont fancy having to pay off massive debts due to be careless and sloopy

0.00002%

I have just changed to Mac, i am not 100% sure do they need AV software? If so can anyone recommend one?

They can get viruses but because hackers want a large target audience they generally steer clear of macs.

Should be fine without AV software.

I'd say this figure is way off.

Blonde has 10,000 members and I can think of at least 2 cases where players had their poker accounts hacked - that's already a factor of 10 above your estimate and I doubt they were totally unprotected

Not withstanding the cases we don't know about, the ones I forgot, the fact that lots of members don't play online etc etc.

It seems that you are trivialising a serious and growing problem.

There is a 87.0004% chance you may have taken my original percentage too seriously.

I realise you were taking the piss :P

It wouldn't be funny if someone didn't take the problem seriously and lost a few grand though...

mbn having a few grand online

So do I have a virus or not from visiting here the other day?

A popup appeared saying "download betpot" or something along those lines but i didnt press the ok box

Ta

Betpot is not a Virus is a poker softwear maybe someone got a pop up on the site and was trying to make some cash

I would say no but you can never be too careful so I'd run an AV scan to be sure.

some good advice -

always keep a copy of malware bytes downloaded on a memory stick. you should then be able to install in (rkill as well)

keep you virus definitions and windows updates up to date

be careful opening attachments from webmail - some integrated mailscanners dont check webmail and only installed mail clients

keep a copy of another internet browser (not IE) installed on your machine as backup. most malware will try and intercept IE, but sometimes dont with other browsers

needless to say dont open attachments from senders you dont know

a lot of people have their browser defaulting to automatically save and open downloads. this can be dangerous


stay safe kids !!

ok kids, we're back online and on the laptop

Had it all sorted and its working fine and everythings ok!

Got Norton on here too now, so should be ok from now on.

thanks all, for all help etc other day.

Secunia PSI is a handy program for keeping everything patched too:

http://secunia.com/vulnerability_scanning/personal/

i got good AV, zone alarm, use firefox with no script, every website with a password is protected by rapport, run ad aware scan weekly and i still found malware on my computer yesterday, not sure whether it was from here or not.

have you guys looked into it, know what happened and sorted it so it hopefully can't happen again?

Ironside asks an interesting question which hasn't been answered.

If a backed player has his account hacked and loses all his roll, who is liable for that loss?

stick it on make up

if i was backing a player and they lost any money,  would add it to the make up for sure so the player in my eyes

I guess it's the backer who is always liabile from an ultimate point of view. If they back someone they should always account for the possibility of that money being lost, whether it's lost legitimately or if it's as a result of being grimmed.


Assuming the backed player cares about their reputation and/or has an ounze of moral fibre about them, the money really should go on some sort of makeup arrangement. (I got hacked - yeah right)

Obviously it would be unreasonable to expect the backed player to come up with the money out of their own pocket. They probably couldn't if they wanted to, but also the nature of the arrangement of getting staked means one side does the work, the other side shoulders the financial risks.

Wondering what I'd do if it happened to me (unlikely as I have RSA security token, antivirus bollox, etc)

I play sitngos off a bankroll of $7.5k and I divide any profit and cashout after every 300 games; I get 75% the backers share 25%. If it happened to me today, halfway through a set of 300 games, the hackers would get more than $7.5k from emptying my account as I'm $X in profit since we last divided up.

Things come up in any long term staking arrangement. Communication is always key but, with multiple backers, I've found the best way to deal with things is to call the ball yourself and come up with something that you see as being fair then communicating it to your backers with as much notice as you can (not always possible) and just proceeding. If a backer is unhappy with it they have the option to contact you and pull their money out.
The alternative of waiting for people to ok things can be a logistical nightmare. Even worse is the idea of negotiating with multiple peeps. It's my experience that backers prefer this no feedback required approach so long as you make an effort to do things fairly.

I'd probs come up with something like this...

The money that was over and above the 7.5k (the $X I'm up) would be treated (initially) as if it had been lost at the table. The 7.5k would go on to some special dodgy makeup thingy.

My backers pay $300 a slice (25 slices) some of these are now owned by me.
I'd give them the option to come up with another $300 for each of their slices on the special understanding that they'd get $300 back first before I started dividing profits normally again.

If any of them couldn't come up with this money they could probably sub let it without any problem. If any just wanted to take the hit and walk away then I'd sell their slice to someone else as a normal slice without the special $300 makeup arrangement. I'd also sell the slices that are currently owned by me as normal slices without the makeup.

So with the new $7.5k I'd play sitngos again, and would probably flip the 75:25 to be in the backers favour until they'd won their $300 back. Would love to give them 100% but in my world I have to eat.

Obviously all this assumes the security issue that caused the money to be stolen is resolved somehow so that it won't happen again.

If at a point in the future any of the monies lost from the hacking are recovered, how they got divided up would depend upon whether the $300 makeup is paid off yet.

If the $300 was already made up, they'd get 25% of the first $X recovered (as if it was profit from the tables for that period) and I'd pocket remaining $7.5k if that gets recovered too.

If the $300 not yet made up, they'd get 100% share of recovered monies till it was. They would also recieve 25% of the first $X recovered.

Obv this would require a response from the backers, as they have to ship more money to continue, but the pattern of the staked player bearing the responsibility of coming up with a plan is consistant with my philosophy.


This is all if I get hacked. If I do the money at the tables they get hee haw. Pay your money take a chance :)

Yes and yes for the first two questions

Bongo said "It looks like they found an exploit in the ad server to serve additional javascript with the ads that then displayed the fake antivirus page a small % of the time"

Bongo I am sure soon will confirm that it's far less likely to happen again, as far as he can tell. Whether this requires a change in 3rd party ad server/security around that or other options, he needs to come back on.

Anyway, its all being addressed as you can tell.