Revleft and viruses?

[DinodudeEpic]

I was going to Revleft from a computer that doesn't have ad-blocker on it. So, I ended up being in an ad that suddenly downloaded and produced a program called 'Privacy Protection'.

Unfortunately, I didn't have any sort of anti-virus program, and even more sadly the computer had all my video games on it. (PC games, still have a X-box and Wii.) So, this fake anti-virus program has basically turned my desktop into a paralyzed piece of shit, and it constantly tries to phish me of my money.

Why post this? First of all, one of Revleft's ads was apparently the source of the virus. Second of all, I'm angry as hell. Lastly, this has happened to me 3 times. 2 of them on my laptop. (Yes, all of them were fake anitviruses.)

[TheGodlessUtopian]

To put it bluntly it sounds like you need to be more careful when using computers;I know of no such viruses that automatically download.Rev-Left is in no way responsible.

[SemperFidelis]

To put it bluntly it sounds like you need to be more careful when using computers;I know of no such viruses that automatically download.Rev-Left is in no way responsible.

There is some malware that automatically downloads, you are wrong.

[TheGodlessUtopian]

There is some malware that automatically downloads, you are wrong.

I've never heard of such malware but since I am not a "Techy" person I wouldn't know.On that part I will say I was wrong,assuming others come to back your statement up, but everything else is still unverifiable.

[ÑóẊîöʼn]

Why post this? First of all, one of Revleft's ads was apparently the source of the virus.

How do you know?


Second of all, I'm angry as hell. Lastly, this has happened to me 3 times. 2 of them on my laptop. (Yes, all of them were fake anitviruses.)

Was it the same advert, or was it Revleft? Or both?

The more details you remember, the better.

[Caj]

In my experience, fake antiviruses aren't very hard to dispose of. Sometimes a simple google search is sufficient to learn how to get rid of them.

[DinodudeEpic]

Well, I just clicked the link to revleft, and BAM! 'Privacy Protection' appeared out of some random ad.

And, the other two times had nothing to do with revleft. They all came from advertisements in general. (The first one came from a webpage that looked like windows explorer though.)

They are the same in their functionality.

Edit: Yeah, I know how to take them out. The problem is to prevent them from coming back.

Edit2: Do you use google ads, or whatever ad service? The advertisement is the problem, not revleft itself.

[Manic Impressive]

did you reformat to be sure after the first time you got a virus?

[#FF0000]

To put it bluntly it sounds like you need to be more careful when using computers;I know of no such viruses that automatically download.Rev-Left is in no way responsible.

Wrong.

Could've even come from one of our banner ads.

[LeftAtheist]

This has happened to me before (not from here). That fake anti-virus should have a name; google "how do I remove [name]" or whatever (use another computer if you must). I did that, found a step by step guide and my computer was purged. Good luck.

[ÑóẊîöʼn]

If/when you do get your computer cleaned up, I highly recommend installing Microsoft Security Essentials (http://windows.microsoft.com/en-US/windows/products/security-essentials) and Malwarebytes' Anti-Malware (http://www.malwarebytes.org/products/malwarebytes_free), I've used them for ages and I've not had any problems since.

[James Kluggman]

I had recent problems with spyware/maleware. It is 007guard. I have found it might be a keylogger or root kit type maleware/spyware.In any case , it must be collecting data from my machine. It also must be accessing my machine and editing/changing permissions on my machine.(I am the admin, but it asks for admin to login when I want to change a setting.) When I view the resource monitor it appears to be adapting constantly, it also appears to disguise and take the identity of other programs. If I have one process running it takes on that process identity. I have used every maleware/spyware detector: Ad-Aware, Spybot Search and Destroy, Kaspersky Anti-Virus Removal, and various others. All of them failed to remove this annoyance. I have also tried to remove it manually.

[Zealot]

I would recommend scanning with malwarebytes and depending on how sophisticated the virus is, checking the startup programs in msconfig to locate unknown/unwanted startup programs.

To my knowledge, Revleft has no control over what type of ads appear.

[Sasha]

Not completely true, we do have the possibility to block specific ads so please do report as much as possible details of dodgy adverts to the admin team.

[ÑóẊîöʼn]

Not completely true, we do have the possibility to block specific ads so please do report as much as possible details of dodgy adverts to the admin team.

Sounds like a good argument for using Adblock. Who are we getting our advertisements from? Google?

[Sasha]

Yup

[Kornilios Sunshine]

In order for you to get a virus from an ad you would have to press run on a Java Drive-By which means that you would need Java installed on your PC
http://www.gnucitizen.org/static/blog/2007/10/warning-supermario-3d-nintendo.jpg
Now what you actually do when pressing Run is let a suspicious file(Privacy Protection in that case)be downloaded and infect your computer.

That's it there are no other ways of being infected through an Ad.An ad can NEVER secretly download you a virus unless you approve of it.

I recommend you get ESET NOD32 Antivirus it is the best one in the market.

[Pustelnik]

When you leave revleft for another page the site directs you somewhere "anonym.... etc etc" with a black screen.. what is that ?

[#FF0000]

When you leave revleft for another page the site directs you somewhere "anonym.... etc etc" with a black screen.. what is that ?

it's just a thing that masks where traffic is coming from. basically so whoever we link to doesn't see people visiting their site from "Revleft.com"

[Kornilios Sunshine]

When you leave revleft for another page the site directs you somewhere "anonym.... etc etc" with a black screen.. what is that ?
Τhis has no relation to viruses. It is an IP Masker so your IP cannot be logged in sites which could be considered suspicious.

[ÑóẊîöʼn]

If I ever get a box asking me to run/install/download something, I never click OK unless I'm sure that it's something I specifically requested.

Also, get a firewall. I currently use ZoneAlarm Free. So that even if shit does somehow get onto your machine, it can't communicate to the filthy money-grubbing scumfucks who wrote/distributed their little dose of e-poison.

Spam and malware writers all need to fucking die in a huge fire. Shitheads, all of them.

[NewLeft]

Weird. I never had a problem with the ads.. I am guessing the ads you get are different..?

[xub3rn00dlex]

Do what Noxion suggested, and if you can get your hands on an extended trial of norton IS 2012 I recommend that instead. You should be able to run the free malware bytes program to remove the fake antivir.

[Aloysius]

avast Antivirus is free, but I'm not sure about it's capabilities in the whole Internet security field.

[Belleraphone]

OP, if you still need help message me. I know how to get rid of it. Avast or Norton are both garbage and may not work getting rid of this virus.

[ÑóẊîöʼn]

OP, if you still need help message me. I know how to get rid of it. Avast or Norton are both garbage and may not work getting rid of this virus.

I'm not sure about Avast, but I have heard a lot of users complain about Norton.

[Tablo]

Yeah, Norton is garbage. Not heard anything bad about Avast, but I don't have a clue.

[xub3rn00dlex]

Actually all anti-virs are crap since they don't detect and prevent *new* shit from infecting your pc... they only do so once it has been discovered, hence the databases. Until we have self aware anti-virs, I will not be satisfied! *raises fist* I've had a tough time with avast, and it has been a pain in my ass using it before. Norton used to be shit, but they slimmed up and streamlined their IS to make it less intensive on the machine. Kaspersky is another alright one to use.

[Belleraphone]

The best anti-virus is your brain. OP, download http://www.malwarebytes.org/ Update it and run a full scan on all of your drives. If the virus does not let you get onto the website, launch your computer in safe mode with networking and transfer the files onto the hard drive and update MWB from there. I can guarantee that this will get your viruses off your HDD.

[Tablo]

To be honest don't use any anti-virus stuff or firewalls and have had no issues in years. It mostly comes down to common sense and using the internet responsibly.

[ÑóẊîöʼn]

To be honest don't use any anti-virus stuff or firewalls and have had no issues in years. It mostly comes down to common sense and using the internet responsibly.

There is that, but the OP mentions that he got a piece of malware off an advertisement on this site. That means you don't have to go to "dodgy websites" in order to have one's security compromised.

Also malware writers make as much use of social engineering as they do software engineering. That sort of thing is explicitly intended to subvert "common sense".

[Tablo]

There is that, but the OP mentions that he got a piece of malware off an advertisement on this site. That means you don't have to go to "dodgy websites" in order to have one's security compromised.

Also malware writers make as much use of social engineering as they do software engineering. That sort of thing is explicitly intended to subvert "common sense".
That's a good point. What ad service does Revleft use?

[Decolonize The Left]

This issue, and most other virus/malware issues, can be resolved by simple internet responsibility.

1. Use Firefox (http://www.mozilla.org/en-US/firefox/new/).
2. Install Adblocker (https://addons.mozilla.org/en-US/firefox/addon/adblock-plus/) and Noscript (https://addons.mozilla.org/en-US/firefox/addon/noscript/?src=search).
3. Use an anti-virus software (Avast (http://www.avast.com/free-antivirus-download) is the best free one, I use windows security essentials).
4. Temporarily scan your computer with an anti-malware software (malwarebytes (http://www.malwarebytes.org/products/malwarebytes_free) works well enough).
5. Use a firewall. Windows security essentials has one built-in, avast does as well I think.

You shouldn't have any problems unless someone is specifically targeting you. If you do opt for Firefox, NoScript and AdBlocker deal with 99.9% of any problem before it even gets to your eyes. Read up on all programs/add-ons before you use them.

- August

[ÑóẊîöʼn]

That's a good point. What ad service does Revleft use?

Google, I believe. I think the dodgy adverts may be limited to certain geographical locations, because looking at Revleft using Chrome (which is my alternate browser, and doesn't have Adblock), I'm getting adverts for PS3s, British Gas, and Google Adwords. Nothing that looks like it could transmit malware, although I haven't clicked on any of them.

[Tablo]

Google, I believe. I think the dodgy adverts may be limited to certain geographical locations, because looking at Revleft using Chrome (which is my alternate browser, and doesn't have Adblock), I'm getting adverts for PS3s, British Gas, and Google Adwords. Nothing that looks like it could transmit malware, although I haven't clicked on any of them.
Actually Chrome has adblock now.
https://adblockplus.org/en/chrome

[DinodudeEpic]

well, it could come from somewhere else, but it came as soon as I ended up in the ad.

It just went into the virus. Suddenly, without me even clicking. It just automatically downloaded into my desktop.

I only go to websites like Revleft on my desktop, I use it mostly for games. So, I didn't really want to spend time on downloading anti-virus programs.

[ÑóẊîöʼn]

Actually Chrome has adblock now.
https://adblockplus.org/en/chrome

I meant that I don't have Adblock installed on Chrome. Besides, I've heard that Chrome's version of Adblock isn't as effective as the one on Firefox. Which considering how much Google relies on advertisement revenue, isn't surprising.


well, it could come from somewhere else, but it came as soon as I ended up in the ad.

It just went into the virus. Suddenly, without me even clicking. It just automatically downloaded into my desktop.

So why didn't you just cancel the download or delete the resulting file? This makes it sound like your security was already compromised, because I'm pretty sure not even Windows automatically executes downloaded files.


I only go to websites like Revleft on my desktop, I use it mostly for games. So, I didn't really want to spend time on downloading anti-virus programs.

A decent firewall program isn't that hard to find, relying on the Windows firewall is a bad joke.

[Kornilios Sunshine]

Νorton sucks ass. You remove their antivirus,they leave you the virus you had. Use ESET NOD32 or MalwareBytes.

[piet11111]

Kaspersky user here and never had an issue except some false positives.

[xub3rn00dlex]

Kaspersky user here and never had an issue except some false positives.

False positives are a pain in the ass.

[DinodudeEpic]

Virus (exact same one) attacked the laptop. But, I found a way to remove it.


Privacy Protection's exe file is renameable and is in program data.

So I managed to rename the file and reboot the computer. Then I redownloaded malwarebytes and bested the son of a ***** back to Berlin. (Also downloaded a few other things. Like a TDSS Killer or something like that.)

The virus actually happened as soon as I entered Devaintart this time. It's either an ad or something else.

[ÑóẊîöʼn]

Virus (exact same one) attacked the laptop. But, I found a way to remove it.


Privacy Protection's exe file is renameable and is in program data.

So I managed to rename the file and reboot the computer. Then I redownloaded malwarebytes and bested the son of a ***** back to Berlin. (Also downloaded a few other things. Like a TDSS Killer or something like that.)

The virus actually happened as soon as I entered Devaintart this time. It's either an ad or something else.

TDSS Killer? Never heard of it, you should get rid of it.

[DinodudeEpic]

It's from Kaspersky.

One of the suggested anti-viruses suggested by the users here.

It didn't say that there are any viruses, while a false antivirus would show tons of infections.

[ÑóẊîöʼn]

It's from Kaspersky.

One of the suggested anti-viruses suggested by the users here.

It didn't say that there are any viruses, while a false antivirus would show tons of infections.

Fair enough. My security paranoia would have me eliminating any programs I didn't recognise, though. :unsure:

[xub3rn00dlex]

Never heard of TDSS killer either, and I've used Kaspersky before.

[piet11111]

Never heard of TDSS killer either, and I've used Kaspersky before.

Same here its apparently a removal tool from Kaspersky though so it is legit.

[Meditation]

i haz linux no viruses there

[farleft]

i haz linux no viruses there

Indeed and if security is your highest priority Linux is the best way to go.

I have no anti-virus software either because I use Linux, never had a problem.

Robust. :)