Thursday, October 22, 2009

Clicked on a link to a website in a wiki that I trusted, link contained "nyud.net" worried

I recently visited a wiki I frequent, and clicked on a link within the wiki. I noticed something strange, the link said "nyud.net" instead of what the link description said. The page I was taken to was all blank except for "HI"



I was then a bit freaked out and went to cmd and typed "netstat -b" and saw several strange websites and IPs connected to my computer. Increasingly freaked out at this point, I unplugged my ethernet cable and did a virus scan in safe mode. Nothing came up. I then started up in normal mode and did a spyware scan, and two high risk (as the program classified) items came up:



"Trojan.Agent.HT" with the infection being "vsid www.adbaaz.com"



The second high risk item was:



Adware.Agent.BN



infection at 'ractive.com'



My anti-spyware software was able to remove both, and out of paranoia I did 2 more scans, they didn't come up again.



Am I safe? What additional action should I take?



Thanks in advance



Clicked on a link to a website in a wiki that I trusted, link contained "nyud.net" worried about compromisefree spyware



I believe the site is using a proxie network to increase performance, not a security risk. Look at this link %26gt;%26gt;%26gt;%26gt;%26gt; http://www.coralcdn.org/



If your concerned about your browser being compromised, use HighJackThis to check all processes and BHO's



@ http://www.majorgeeks.com/download5554.h...



Scanning makes no system changes. Before using it to remove something make sure you know exactly what you are removing. If you remove a important system process you may do serious damage.

No comments:

Post a Comment