I recently visited a wiki I frequent, and clicked on a link within the wiki. I noticed something strange, the link said "nyud.net" instead of what the link description said. The page I was taken to was all blank except for "HI"
I was then a bit freaked out and went to cmd and typed "netstat -b" and saw several strange websites and IPs connected to my computer. Increasingly freaked out at this point, I unplugged my ethernet cable and did a virus scan in safe mode. Nothing came up. I then started up in normal mode and did a spyware scan, and two high risk (as the program classified) items came up:
"Trojan.Agent.HT" with the infection being "vsid www.adbaaz.com"
The second high risk item was:
Adware.Agent.BN
infection at 'ractive.com'
My anti-spyware software was able to remove both, and out of paranoia I did 2 more scans, they didn't come up again.
Am I safe? What additional action should I take?
Thanks in advance
Clicked on a link to a website in a wiki that I trusted, link contained "nyud.net" worried about compromisefree spyware
I believe the site is using a proxie network to increase performance, not a security risk. Look at this link %26gt;%26gt;%26gt;%26gt;%26gt; http://www.coralcdn.org/
If your concerned about your browser being compromised, use HighJackThis to check all processes and BHO's
@ http://www.majorgeeks.com/download5554.h...
Scanning makes no system changes. Before using it to remove something make sure you know exactly what you are removing. If you remove a important system process you may do serious damage.
No comments:
Post a Comment