MyBroadband hacked ?

[ProAsm]

Has MyBroadband been hacked or is it me.
Sometimes if I sit on a topic or thread too long, a yanky voice pops up saying: "I don't know how you got to this page but if you invest $100.................."
You also here it on some other sites but there it pops up another page which you can kill, here you have to kill the forum completely as no other page has popped up.
This sucks big time

 

[Mike Hoxbig]

Stop visiting questionable porn sites...

 

[biometrics]

Format, reinstall Windows.

 

[saor]

It's you. Have fun with that infection!

 

[Batista]

Has MyBroadband been hacked or is it me.
Sometimes if I sit on a topic or thread too long, a yanky voice pops up saying: "I don't know how you got to this page but if you invest $100.................."
You also here it on some other sites but there it pops up another page which you can kill, here you have to kill the forum completely as no other page has popped up.
This sucks big time

Lets try the process of elimination

Go to another forum and let us know if the same thing happens?

 

[PsyWulf]

Firefox - adblock element inspector
Check for funky things injected into your browser windows

 

[GreGorGy]

You have a browser hijacker installed - probably you think it is is an extension. Check those out - one of them is having fun at your expense. It most likely came with a free download of some or other movie, music or software.


It is also busy eating your bandwidth.

 

[GreGorGy]

http://www.malwareremovalguides.info/audio-ads-playing-in-background-removal-guide/

 

[ProAsm]

Thanks for the inputs.

Stop visiting questionable porn sites...

Not my cup of tea but it cannot be helped when they visit you

Format, reinstall Windows.

Fortunately I made a image backup on the 24/01/2014 so if it comes to it that's the way I'll have to go.

Lets try the process of elimination

Go to another forum and let us know if the same thing happens?

I visit several forums but it only happens here.

http://www.sarl.org.za/forum/default.asp?CAT_ID=8
http://radioshack.co.za/smf/index.php?action=forum
http://www.unrealadmin.org/forums/forumdisplay.php?f=115
http://www.ut99.org/viewforum.php?f=18

It happens pretty quickly if I go to the Business and Finance forum here, and click on the "JSE - Realtime Prices download/API" topic.
Withing a minute or 2 from doing nothing, it starts up.

Firefox - adblock element inspector
Check for funky things injected into your browser windows

I use Google Chrome, checked the extensions and there is one there I have never seen:
RemoveTheAdApp which is enabled and says it cannot be disabled.
The only other extension that is enabled is "Windows Media Player Extension for HTML5 1.0"
I also checked the chrome://plugins and nothing suspicious there.

http://www.malwareremovalguides.info/audio-ads-playing-in-background-removal-guide/

Thanks, I tried that, but it reported all is well.

Funny in all the time it has taken me to write this it has not happened.
Maybe its only if there is no activity.
Looks like I'm gonna have to re-install the backup

 

[biometrics]

A new staff member got click jack malware within a week of starting last year on a brand new PC with AV installed. Nothing could detect it.

There are so many variants out there it's a losing battle. Best is to scrub it or else you'll never know for sure ...

 

[Venomous]

run adw cleaner, tdss killer, then make sure your AV is up to date and working.

 

[GreGorGy]

Ja - what extensions/plugins/addins/etc are running on your browser?

 

[The_Unbeliever]

A new staff member got click jack malware within a week of starting last year on a brand new PC with AV installed. Nothing could detect it.

There are so many variants out there it's a losing battle. Best is to scrub it or else you'll never know for sure ...

Sickening.

 

[Fudzy]

Can it come in via any browser?

 

[ProAsm]

Ja - what extensions/plugins/addins/etc are running on your browser?

Not wanting to take up forum space, I have posted them here:

Extensions:
http://www.proasm.com/images/pics/chrext.jpg

Plugins:
http://www.proasm.com/images/pics/chrpins.jpg

No addins.

Can it come in via any browser?

Yes.
A few months back I got hit by a hack that removed all my YouTube viewing.
Everytime it said something like: "ERROR! This video is no longer available, Try again later"
It took me a lot of googeling to find that one.

 

[GreGorGy]

Browser Hijackers:
* RemoveTheAdApp
* FindBestDeaol


Uninstall both of those. The second is not enable but the first is your problem - get rid of both.

 

[genetic]

You've been clicking on dodgy links which have infected your PC with malware. It ain't MyBB.

 

[genetic]

Browser Hijackers:
* RemoveTheAdApp
* FindBestDeaol


Uninstall both of those. The second is not enable but the first is your problem - get rid of both.

Maybe he should enable Avast online security as well?

 

[longboy]

Stop visiting http://***************

 

[koeksGHT]

Download Hirens boot disk, burn to disc or put on flash.

Reboot and load hirens from start menu

Wait till loaded desktop

Use AV's and update by enabling network connections, nuke will spyware killer and everything. Leave running over night.

Grab some marshmallows