Swoop, for whatever its worth, I went looking around that site and picked up a password stealing virus. From the Malwarebytes log
Memory Processes Infected:
C:\WINDOWS\essledv.exe (Spyware.Passwords) -> Failed to unload process.
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ttool (Spyware.Passwords) -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\WINDOWS\essledv.exe (Spyware.Passwords) -> Delete on reboot.
And from Avira
Virus or unwanted program 'TR/Spy.Agent.NVX.1 [trojan]'
detected in file 'C:\Documents and Settings\Mark Schmidt\Local Settings\temp\abcdefg.bat.
Action performed: Deny access
Virus or unwanted program 'HTML/Downloader.Gen [virus]'
detected in file 'C:\Documents and Settings\Mark Schmidt\Local Settings\Temporary Internet Files\Content.IE5\1UKWVKWD\wait[1].htm.
Action performed: Deny access
I ran Purgie to clear out the temps cookies ect, then Avira, then Regcure, then Malwarbytes, then Regcure again. Rebooted only after I felt the viruses were crippled and to delete from memory by Malwarbytes.
For what its worth, I'm definately not blaming you in anyway as you do great work around here, just posting a warning about other content on that site,
<S> Hungry
