BP classified on Fauna giving me a virus????

I did not want to say anything until I was sure. I have reproduced the virus or whatever it is 4 times on 2 different computers and I know for sure it is coming from fauna. Since the classified bp section is the only part I have been on during the issue, I am unsure if it is the whole site or just that section. Here is the sequence of events produced 4 times.

Browsing fauna ads and after about 3 pages I get a pop up asking permission to continue because windows is attempting to change user account settings. If we click the red X the window just pops right back up. It is in the front of the screen so you can not do anything. Even tried disconnecting the internet at this point but it still will not go away. Hard reset does not work as the window is there shortly after start up. Choosing the allow or cancel results in the same thing. A bogus virus scan starts and begins to corrupt windows defender It throws a bunch of new 2012 malware software in the security center. Next it gets into your start up screen. The above is true for safe mode also. The only way I can stop it is windows restore, which works perfectly. This exact same thing has happened to me 4 times (within and over the last week) and what convinced me was when it happened to me on a different computer.

Help, I love fauna but geeze someone fix this thing already. I am scared to go back. Anyone else have this issue yet?

I just went through a bunch of fauna classifieds like I have hundreds of times, not even a request to download anything. I can't reproduce your results

It sounds like the window you have popping up is unrelated to the internet, the virus is already there. Do your windows restore and scan the heck out of your computer. Also, are you still using internet explorer?

or look into a linux based operating system and never have to worry about a virus again :)

I'm on fauna everyday and
never had that issue. Did you inform fauna ?

Windows restore does not completely revert your system to the way it was. The computer is capable of reversing the changes. That is, you can un-do system restore, which demonstrates the fact that the machine has everything saved in memory, including the virus. You have to do a system restore in safe mode in order to wipe the memory, and even then, some heavy-duty viruses can survive, or even prevent you from doing a system restore in safe mode. They can even corrupt your restore points so you can't use them.

I have had viruses like yours before. After a system restore, it takes a while for it to get out and corrupt your system again. I highly doubt the fauna classifieds are causing it to come back. It's either coincidence, or there's something about that site that is cuing the virus to activate.

You may need to re-install your operating system from the install disc to completely wipe the virus out. I recommend you either do that or take it to be repaired by a professional, or somebody might be reading your keystrokes and stealing your passwords/credit card information.

Quote:

---

Originally Posted by OhhWatALoser

I just went through a bunch of fauna classifieds like I have hundreds of times, not even a request to download anything. I can't reproduce your results

It sounds like the window you have popping up is unrelated to the internet, the virus is already there. Do your windows restore and scan the heck out of your computer. Also, are you still using internet explorer?

or look into a linux based operating system and never have to worry about a virus again :)

---

I use firefox. I have been looking at fauna for years, everyday, multiple times and never an issue. I did not realize it was fauna at first but it happened multiple times and only on fauna. Each time I would look for other ways to fix the issue but only restore (complete) got rid of it. I browse many other sites every day and no issues with them. I was totally convinced when it happened on my other computer and the only site I had browsed that day was fauna. I am not sure whether it is a virus or a program that is downloading but either way it is some sort of invasion. It has been a few days since I resolved the issue with my computers and have not visited fauna since.

Quote:

---

Originally Posted by dante59

I'm on fauna everyday and
never had that issue. Did you inform fauna ?

---

I was going many times a day until this issue. I have not been back to fauna since I keep having issues.

Quote:

---

Originally Posted by Ash

Windows restore does not completely revert your system to the way it was. The computer is capable of reversing the changes. That is, you can un-do system restore, which demonstrates the fact that the machine has everything saved in memory, including the virus. You have to do a system restore in safe mode in order to wipe the memory, and even then, some heavy-duty viruses can survive, or even prevent you from doing a system restore in safe mode. They can even corrupt your restore points so you can't use them.

I have had viruses like yours before. After a system restore, it takes a while for it to get out and corrupt your system again. I highly doubt the fauna classifieds are causing it to come back. It's either coincidence, or there's something about that site that is cuing the virus to activate.

You may need to re-install your operating system from the install disc to completely wipe the virus out. I recommend you either do that or take it to be repaired by a professional, or somebody might be reading your keystrokes and stealing your passwords/credit card information.

---

I do not think it is coincidence since it has happened multiple times on two different computers on different days and I visit so many other sites. I thought about your other suggestion about fauna having a trigger. Either way, it seems to only happen on fauna and has not happened since I have not been visiting the site. I have nothing to steal, poor thieves have hacked the wrong system. I be pretty poor, lol.

Sounds like a False Positive, Happens all the time with certain Anti Virus programs like AVG, Avast, Norton.

Could of been a bad cookie or temp file that cause your system to trigger it over and over.

The computers at work have some pretty hardcore blocks, antivirus, etc. Every once in a while the computer will lockdown while I'm looking thru the adds on fauna. I think it's one of the google adds on the top that do it. That's because instead of the add, it will show the "access denied" page that pops up if you try to go to a site with blocked content.

It only happens on fauna, and it's only happened in the classifieds so far.

My home computer has never done anything like this, only the ones at the college.

Quote:

---

Originally Posted by RichsBallPythons

Sounds like a False Positive, Happens all the time with certain Anti Virus programs like AVG, Avast, Norton.

Could of been a bad cookie or temp file that cause your system to trigger it over and over.

---

I thought this at first also so I deleted all my cookies and temporary internet files on the first go around, but it still happened 3 more times. This scan was an obvious look alike. It was attempting to look like defender while at the same time disabling it and telling you that you needed to purchase an updated version to get rid of the bad stuff it had just scanned.

Quote:

---

Originally Posted by garweft

The computers at work have some pretty hardcore blocks, antivirus, etc. Every once in a while the computer will lockdown while I'm looking thru the adds on fauna. I think it's one of the google adds on the top that do it. That's because instead of the add, it will show the "access denied" page that pops up if you try to go to a site with blocked content.

It only happens on fauna, and it's only happened in the classifieds so far.

My home computer has never done anything like this, only the ones at the college.

---

I thought at first it may be a certain member's classified ad but noted that it happened on different ads that I was browsing. I think you may be right about the side ads. Some are good stuff but some of those are pretty out there and defiantly questionable like the penny auction site.

I would suggest you download malwarebytes. Update it and reboot into safemode. Run it full scan then run antivirus program. Reboot computer and see.

Sounds like you have a replicating virus which are pita to remove as you delete,reboot and its back

It's not from the internet, your not getting a prompt to download something, therefore it's already on your computer. Unless you screwed with your settings, firefox will tell you are downloading something and windows xp and onward by default asks permission to download everything.

by your description it is not false positive, you have a virus of some sort

I still say scan the heck out of your computer, if it doesn't fix it, reinstall the operating system. if you don't want to deal with these issues again and don't rely to heavily on pure windows programs look into this.... http://www.ubuntu.com/

Well, I feel better now.

The exact same thing happened to me last night while I was browsing Fauna. Took me hours to get rid of that stubborn virus.

I am not sure that it came directly from Fauna, but I haven't had a virus in months until last night. If it happened to myself as well, I suspect something related.

Gale

just opened every ad on the first 7 pages of the ball python section in windows 7, got nothing.

Quote:

---

Originally Posted by Ladybugzcrunch

I did not want to say anything until I was sure. I have reproduced the virus or whatever it is 4 times on 2 different computers and I know for sure it is coming from fauna. Since the classified bp section is the only part I have been on during the issue, I am unsure if it is the whole site or just that section. Here is the sequence of events produced 4 times.

Browsing fauna ads and after about 3 pages I get a pop up asking permission to continue because windows is attempting to change user account settings. If we click the red X the window just pops right back up. It is in the front of the screen so you can not do anything. Even tried disconnecting the internet at this point but it still will not go away. Hard reset does not work as the window is there shortly after start up. Choosing the allow or cancel results in the same thing. A bogus virus scan starts and begins to corrupt windows defender It throws a bunch of new 2012 malware software in the security center. Next it gets into your start up screen. The above is true for safe mode also. The only way I can stop it is windows restore, which works perfectly. This exact same thing has happened to me 4 times (within and over the last week) and what convinced me was when it happened to me on a different computer.

Help, I love fauna but geeze someone fix this thing already. I am scared to go back. Anyone else have this issue yet?

---

It sounds like you have a browser 'hijacker'.

Go to http://housecall.trendmicro.com/ and run a free scan and then download and install this free program.

http://www.malwarebytes.org/

I have had my antivirus tell me there was an attempted attack while browsing the adds on there twice now. I am guessing its one of the adds. The information given is this:

Category: Intrusion Prevention

An intrusion attempt by 178.17.163.189 was blocked.

Web Attack: Malicious Toolkit Website 9

Network traffic 178.17.163.189 matches the signature of a known attack. attack.

Attacking Computer: 178.17.163.189, 80

Attacker URL: zouris.com/news

Quote:

---

Originally Posted by OhhWatALoser

just opened every ad on the first 7 pages of the ball python section in windows 7, got nothing.

---

I have windows xp, perhaps that has something to do with it?

Quote:

---

Originally Posted by OhhWatALoser

It's not from the internet, your not getting a prompt to download something, therefore it's already on your computer. Unless you screwed with your settings, firefox will tell you are downloading something and windows xp and onward by default asks permission to download everything.

by your description it is not false positive, you have a virus of some sort

I still say scan the heck out of your computer, if it doesn't fix it, reinstall the operating system. if you don't want to deal with these issues again and don't rely to heavily on pure windows programs look into this.... http://www.ubuntu.com/

---

It does ask permission to continue. It is starting something on its own. In the original description of the issue I talk about this permission window a lot. I have fixed the problem, I have no problem now at all. I just want to know why I am getting this with a site that I really like and so many others browse. I was hoping that my post here would elicit a response from fauna making it more safe to browse.

Quote:

---

Originally Posted by angllady2

Well, I feel better now.

The exact same thing happened to me last night while I was browsing Fauna. Took me hours to get rid of that stubborn virus.

I am not sure that it came directly from Fauna, but I haven't had a virus in months until last night. If it happened to myself as well, I suspect something related.

Gale

---

Sorry you had the issue but I am glad it is happening to others beside myself. I am hoping fauna will crack down on the issue.

Quote:

---

Originally Posted by jjj_85

I have had my antivirus tell me there was an attempted attack while browsing the adds on there twice now. I am guessing its one of the adds. The information given is this:

Category: Intrusion Prevention

An intrusion attempt by 178.17.163.189 was blocked.

Web Attack: Malicious Toolkit Website 9

Network traffic 178.17.163.189 matches the signature of a known attack. attack.

Attacking Computer: 178.17.163.189, 80

Attacker URL: zouris.com/news

---

I thought it was a specific ad at first as well because it did happen twice while I was on a certain member's ad. However, the other two times I was on different member's ads. I think the mentioned advertisements are more likely the culprit.

Quote:

---

Originally Posted by Ladybugzcrunch

I was hoping that my post here would elicit a response from fauna making it more safe to browse.

---

Unfortunately, Fauna doesn't follow BP.net. ;) On rare occasions, the mods might pop in, but I don't think Rich is even registered here.

Use this form to contact Rich directly:
http://www.faunaclassifieds.com/forums/sendmessage.php

There shouldn't be anything buggy or scary about that particular link. Fill it out, make sure you include your username for Fauna and give him as much details as you can about what you've experienced. (You might also copy the text from the post in this thread where a second user describes a similar issue, and include a link to this thread so he can read more if he chooses to.)

That's how I would want to be notified if something like that were happening here. Good luck with it.

Forgot to mention. I have no problems with my computer before, during, or sense my Norton antivirus popped that up. It can be a little picky sometimes also, maybe it was nothing. Hopefully its no big deal. Hasn't stopped me from searching for my next snake everyday and it doesn't seem to ever have a problem now.

My laptop is out to be wiped and reloaded right now from a virus(the one that says "Your firewall is down, click here to fix this!" and tries to behave like it's running scans on your computer.

I was reading the BOI when it hit. I'll use the form to send Rich a note. I never had any virus trouble before on Fauna so I didn't really think I got it from there.