Author Topic: New malware attack going around  (Read 900 times)

Offline Vulcan

  • Plutonium Member
  • *******
  • Posts: 9913
Re: New malware attack going around
« Reply #15 on: April 06, 2011, 03:18:51 PM »
Had no idea SQL could do that

Decent firewalll should sort it out, unless work is dumbed out and went cisco?

Offline Blackwulf

  • Copper Member
  • **
  • Posts: 160
Re: New malware attack going around
« Reply #16 on: April 06, 2011, 04:19:55 PM »
http://www.eweek.com/c/a/Security/LizaMoon-Mass-SQL-Injection-Attack-Escalates-Out-of-Control-378108/

This gives the details, and like I said, you still need to give permission for the app to run on your system before it can do real harm.  Anti virus doesn't block it, as it is not a normal virus attack.  Firefox with script blocker is working great, I have also recommended switching our browsers at work over to it, but having the same problem getting my boss to understand how it works, and why our anti-virus isn't the solution.

Offline Dichotomy

  • Plutonium Member
  • *******
  • Posts: 12391
Re: New malware attack going around
« Reply #17 on: April 06, 2011, 04:39:30 PM »
you too Blackwulf?

I've tried for four years to get management to make the employees use Firefox with absolutely no luck.  And every time there's a problem with someones machine 'oh look a toolbar'.

 bunch of nitwits.
JG11 - Dicho37Only The Proud Only The Strong AH Players who've passed on :salute

Offline dedalos

  • Plutonium Member
  • *******
  • Posts: 8052
Re: New malware attack going around
« Reply #18 on: April 06, 2011, 05:01:54 PM »
you too Blackwulf?

I've tried for four years to get management to make the employees use Firefox with absolutely no luck.  And every time there's a problem with someones machine 'oh look a toolbar'.

 bunch of nitwits.

Hey, as a company, who do you call for firefox support?
Quote from: 2bighorn on December 15, 2010 at 03:46:18 PM
Dedalos pretty much ruined DA.

Offline Dichotomy

  • Plutonium Member
  • *******
  • Posts: 12391
Re: New malware attack going around
« Reply #19 on: April 06, 2011, 06:03:05 PM »
you :)

In all seriousness though I've never had a problem with FF or any person I recommended (forced) it on.  Cut wayyy down on instances of malware etc. 

JG11 - Dicho37Only The Proud Only The Strong AH Players who've passed on :salute

Offline Babalonian

  • Platinum Member
  • ******
  • Posts: 5817
      • Pigs on the Wing
Re: New malware attack going around
« Reply #20 on: April 06, 2011, 06:16:31 PM »
I had a run-in with this stupid thing this morning, so thought I'd pass along a heads-up for those who are not computer savvy.

A new malware attack is going around, nicknamed "Lizamoon" it is the usual SQL code line that redirects your browser to a web page that does a fake scan of your computer, and of course finds all sorts of viruses that you have to delete right away with their special software! It also has an annoying pop up window that blocks you from being able to just browse away.
There is no way to know if web page you are going to is infected, so once this pops up you have to deal with it, which is fortunately very simple. This piece of crap has infected a huge number of websites, not just the usual culprits, so you are likely to run into it no matter how safe your browsing usually is.

1. Do NOT click to download or run the app.  This is a no-brainer.
2. Do NOT click to close the pop up window, it usually is coded to give permission to run the app as though you had clicked "yes" no matter what you click on, including the red X button that normally closes a window.
3. Hit alt-ctrl-del and bring up the task manager.  Highlight your browser in running apps, and close it using task manager.
4. Delete your temporary internet files and browsing history using CCleaner (recommended) or manually.  If your browser asks to restore session, tell it no.  Not an essential step if you use an old browser, but better to be safe and not have any links or code from this hanging around. Also after closing this way, some browsers will restore session automatically if you don't delete the temp files, and that will just take you right back to the malware.
5. I call first dibs to hang the originator of this by his family jewels with piano wire.



This is where you can put your knowledge of the Alt+F4 trick to good use for you too.  If it looks like something you don't even want to touch with your mouse, just hit Alt+F4 a few times first, it often will do the trick of just stopping and closing your web browser program, but if not then some cntrl+alt+delete forced process stopping/canceling should do the trick.
« Last Edit: April 06, 2011, 06:18:51 PM by Babalonian »
-Babalon
"Let's light 'em up and see how they smoke."
POTW IIw Oink! - http://www.PigsOnTheWing.org

Wow, you guys need help.

Offline Blackwulf

  • Copper Member
  • **
  • Posts: 160
Re: New malware attack going around
« Reply #21 on: April 06, 2011, 09:09:39 PM »
Hey, as a company, who do you call for firefox support?
Me, unoffically LOL 

I have been forced into using IE at work until the other day, hence my warning being mostly for IE users. I may have been a little unclear on that fact as my original post was written from work on a break, and I was still in IE mode.

We have a contract with the local college (who we also rent our office space from) for things like maintaining our server or installing new equipment, but for the day to day stuff everyone runs to me, as it can take several days for a response to a problem.  My boss is very hands-off when it comes to the computers, and panics at the thought of me doing anything, so we have to do it on the sly.  Basically he is a college snob, I don't have a computer degree, so to him I obviously don't know anything about computers. (My first personal computer was a TRS-80, and I opted for technical college instead of my last two years of High School. I was running jobs on a Digital 1250 mainframe in COBOL and RPG-II via punch cards while he was still in kindergarten.  I don't even begin to claim to be the end-all of computer knowledge, but I am no 12 o'clock flasher when it comes to tech) [Now I have dated myself pretty good I think]

At the same time, I am the one who is maintaining our website, and am in the process of rewriting the whole thing from scratch.  Any time I talk about computer stuff, or my progress on the website his eyes glaze over and he brushes me off real quick.  I thought he was going to have a heart attack one time when he found out that I had opened the case on my CPU and gave it a good cleaning and rerouted the ribbon cables to get better air flow.  The next time one of the college guys comes by, I am going to ask him to give a recommend to my boss for Firefox, and that should resolve the issue for me.  (And he will march into my office and order me to do it like it was his personal revelation from God)  Unkown to him, I also have a blank check to do whatever I want, hardware or software, on my system from the college guys, they drop by to "talk shop" now and then. Sorry to prattle on, but my boss drives me nuts!

In the meantime, I just hope no one gets hit with this thing.  Given the frequency that they have to come over and remove malware from the other computers, I think it is a pretty safe bet they will do the recommendation for me. I have been running FF on my home comp for years as I have always liked it's features better, but didn't know about the no script addon. I have quietly installed FF and no-script on my system at work, to um, test my webpage updates in multiple platforms, of course......

Offline Dichotomy

  • Plutonium Member
  • *******
  • Posts: 12391
Re: New malware attack going around
« Reply #22 on: April 06, 2011, 09:52:52 PM »
geez black

sounds like my job excepting the blank check of course. 

'the network is down' - fixed (ipconfig release / renew) 
'my computer is slow' - fixed (thanks for installing that tool bar tool boy) 
'my email isn't working' - fixed (you changed your settings to 'view unread messages idjit')
'can you move these pictures for me' - sure (come ON buy your own freaking camera and learn how to use it)

but when I tell them to move out of their comfort zones I run into a brick wall.  I'm hardly an expert.  I'd give myself an 'okay' rating at fixing stuff but who is the guy that gets yelled at when the owner can't open a pdf file? ME. 

Then I come here if I can't fix it and say 'HAAAAALLLLLPPPPPPP!!!!' and the AH community
always comes through.  :D

Speaking of.. does anybody know a way to block IE on XP so I can force my coweinies to use FF?
JG11 - Dicho37Only The Proud Only The Strong AH Players who've passed on :salute

Offline Blackwulf

  • Copper Member
  • **
  • Posts: 160
Re: New malware attack going around
« Reply #23 on: April 07, 2011, 08:22:16 AM »
I started my day today by unjamming and resetting the copier, and explaining to my co-worker that you have to properly unfold the originals before they will feed through the auto-feeder.  >sigh<
Maybe we need to start a new thread for these stories.

Offline dedalos

  • Plutonium Member
  • *******
  • Posts: 8052
Re: New malware attack going around
« Reply #24 on: April 07, 2011, 08:31:03 AM »
I started my day today by unjamming and resetting the copier, and explaining to my co-worker that you have to properly unfold the originals before they will feed through the auto-feeder.  >sigh<
Maybe we need to start a new thread for these stories.

Now that would be a funny thread  :lol
Quote from: 2bighorn on December 15, 2010 at 03:46:18 PM
Dedalos pretty much ruined DA.

Offline Dichotomy

  • Plutonium Member
  • *******
  • Posts: 12391
Re: New malware attack going around
« Reply #25 on: April 07, 2011, 09:25:16 AM »
Indeed it would
JG11 - Dicho37Only The Proud Only The Strong AH Players who've passed on :salute