Picking up malware from crpg forums

[Warcat]

Seems like almost every time I visit the forums recently I pick up some annoying malware trying to disguise itself as windows 2012 virus protection. Like most of these types of things, this one is incredibly obvious and easy enough to deal with, but it's annoying none the less. Hopefully you can solve this issue before someone on here gets it and is dumb enough to buy its fake virus protection.

[Cepeshi]

Weird, i has KiS and nothing ever happened to me on this website...god i love autoprotection 

[Warcat]

It's only been happening for a couple weeks for me but its definitely from this site. I don't get it any other time.

[isatis]

but, this anti-virus is good I got him! *looking at internet bill* FUUUUU

lol.

srsly, what's you internet browser and anti-virus? maybe problem is here, atleast could help people willing to know what happen. if we can find a link between all those thing we could see a pattern and eventually eliminate the threat.

[Warcat]

Typing this from an IPhone, but I've been getting it while using firefox on win7. Microsoft security essentials doesn't pick it up. But I use malwarebytes to remove it.

[Tomas_of_Miles]

Typing this from an IPhone, but I've been getting it while using firefox on win7. Microsoft security essentials doesn't pick it up. But I use malwarebytes to remove it.

Maybe get the Adblocker Plus plugin for Firefox.

[dodnet]

Might be helpful if you show a thread or post where you get this message/virus. Maybe its in someones signature or some picture?

[[ptx]]

wat O_o

[BlameMeForTheNoise]

I actually had the same virus once. Its pretty common but annoying as hell to deal with.

The thing is: Your PC is already infected. You are not downloading any additional malware from this or any other(reasonable) website. You already have it on your harddrive.
And not only this but it is - secretely - downloading a lot (was in the 100s for me) of other malware including viruses, trojans and keylogger.
The pop-up you get is just a side-thing with which the people behind this are trying to get you to purchase their "antivirus"-software.

I remember it took me four days(and nights) to get rid of this fucker (using malwarebytes and a removal-tool specifically written for this demon). Or so i thought. Everything i tried in the end there were always some malware-progs left. In the end i decided to just fry the whole system and basically set up new.

On a sidenote: I'm pretty computer-savvy myself. I'm a programmer and as a part-time job i clean other peoples pcs from this kind of stuff... But this little thing i was unable to get rid off.

So good luck from someone who has been there.

[Warcat]

After using malwarebytes and not being on the forums for a few weeks on my PC I still haven't noticed any signs of any problems on my computer, from regular use or during scans.  The only thread I had consistently visited when the problems happen was the Fallen thread. Perhaps someone has been posting there with an infected sig?

[Meow]

I remember someone having a link in his sig or posting pics hosted on a russian picture service that would get a malware warning in my browser.

It might be possible that your malwarebytes thingy did automatically preload sites and stuff which are linked on your current page to check for malicious code.
So yeah i would say it might have been caused by some sig/pics/links in that thread.

[isatis]

as a morale: no goes in the fallen thread.

[Vieuxcrotter]

Your computer is already infected and when you try to remove it with a scanner or some tool its programmed to reinstall itself after every reboots.

What you need to do is find the process.exe and track it down into your registry to disable it then proceed to clean your system.

[Warcat]

I think everything is all good now, I guess I'll have to wait to know for sure.