Budy SCAMS!...

[MP3_Player]

REMOVED BY SEACAT

[pechie100]

Link dnt work
soz

[Wootzeh]

Link don't work =S
and Budy has kept quiet for abit?

[MP3_Player]

Link fixed...

[Carlos]

Stupid noob :rolleyes:

[Bear-Max]

What the hell is that link about?

[Pelfe]

I was talking too him earlier. I think he's pretty nice >.<

[Blunte]

I advise you not to go onto that site because it has a cookie grabber. A cookie wil contain your passwords taht you entered for example; habbohotel. Change all your passwords NOW!

[Antony]

My bullguard alerted me when i clicked on that site, i think it's time for a keylogger check. :@

[MP3_Player]

It doesn't have a cookie grabber... Do you know what one is?

[Pelfe]

Well obviously they do ;l

[Bear-Max]

-.- What is it MP3?

[timROGERS]

Are you safe if your on Firefox?

[Lehi]

Are you safe if your on Firefox?

I'm using that and I got no warning and i have Zone Alarm firewall

[timROGERS]

I wonder if you are, I'm downloading Bullguard to do a scan. Evil person, stealing cookies :( Can anyone confirm if it affects Firefox?

[Georgia]

I didnt get an alert?

[Bear-Max]

I don't know if it's a cookie grabber. It's definately not a logger.

And if it doesn't affect Firefox, I'll be fine :)

[Cypher-]

Dont click the link please, on firefox you will get a popup asking to accept or deny the cookie, if you have clicked on this link please click deny.

This is a form of kiddie scripting (non habbo related scripting) where they get certain snippets of code from another programmer, likely on a hacking website then they upload it into html code on any random site they make.

When you go onto the site, if your browser accepts cookies, it will send a string of data back to the recipient server of whatever you have processed in.

In other words, this guy is a kiddie who thinks he can get lucky, dont fall for it please.

[Carlos]

I didnt get an alert?

Me neither, and I have avg antivirus and zonealarm firewall.

[timROGERS]

If your using a fireware you probably will, I'm doing a virus scan now, if you went to it I would too

[Carlos]

I'm scanning with AVG now.

[Bear-Max]

I just got a pop-up, and then it closed.

I haven't a clue what I'm supposed to do/whether I'm safe.

[Carlos]

I just got a pop-up, and then it closed.

I haven't a clue what I'm supposed to do/whether I'm safe.

I didn't get anything, and I have Zonealarm and AVG on.

[cocaine]

What the hell..?

[buzzing]

Im confused :I

[MP3_Player]

It ISNT a cookie grabber! If it is, freewebs are trying to steal steal your habbo accounts lmao

[Carlos]

It ISNT a cookie grabber! If it is, freewebs are trying to steal steal your habbo accounts lmao

Explain then you idiot.

[cocaine]

Aaah, Zonealarm didn't bring up an alert. I'm scanning with Norton Anti Virus now.

[timROGERS]

It didn't even give me an option to deny to cookie :P

[Carlos]

Aaah, Zonealarm didn't bring up an alert. I'm scanning with Norton Anti Virus now.

Didn't for me either.

[cocaine]

Ah, this is where your HxHD Skills come in ;]

www.mcaffee.co.uk does virus scans I think.

[GommeInc]

If it is a cookie grabber, then clear your cookies before going on a forum etc.

I clicked it, didn't get a warning, but deleted all the cookies afterwards, refreshing a forum would send them the cookie but not refreshing does nothing. Just clear your cookies and you will be fine. Or change your pass on anythig you just signed up on.

[le harry]

Can someone PLEASE tell me if I just got a Cookie Grabber or whatever?? I havnt scammed or whatnot. Tell me please!

[MP3_Player]

Woah we have lots of paranoid members! Virus checkers PROTECT you against viruses coming in aswell. So even if there was one then your pc would of picked it up. ITS A ****** FREEWEBS ACCOUNT!

[timROGERS]

Apparently it is, I'm scanning with Bullguard

[-<Josh>-]

I clicked the link, i got the almost multiplied logos and then it simply vanished. No idea if i'm safe or not.

[cocaine]

TO DELETE COOKIES GO TO

TOOLS -> INTERNET OPTIONS -> DELETE COOKIES

Caps grab your attention ;)

[le harry]

Damnitt, anyone know a free, quick, non downloadable scan? Whats bullguard?

[cocaine]

Go to www.Hobtech.net

[GommeInc]

I shall do a guide quickly.

If you used Firefox, go to:
Tools > Options > Privacy > Cookies > Clear

I suggest clearing the Cache, which is down 1 from cookies.

Internet Explorer users:
Tools > Internet Options... > General > Delete Cookies...

I suggest clearing the Temp Internet Folder aswell, which is next door to Delete Cookies...

[timROGERS]

Damnitt, anyone know a free, quick, non downloadable scan? Whats bullguard?

It's Habbo's recommended virus scanner, as it is very good for removing keylogging type things

[cocaine]

Yeah, I think I am safe.

[MP3_Player]

I reccomend using the Virus scanners... I use them all the time - Better Safe than sorry

[cocaine]

I reccomend using the Virus scanners... I use them all the time - Better Safe than sorry

Shush, you. It better not be any type of virus/keylogger type.

[timROGERS]

MP3 don't act like you know nothing, would you post the contents of your i.js file?

And don't say it dosen't exist.

[MP3_Player]

Shush, you. It better not be any type of virus/keylogger type.

Its not I swear - Its this thing where you get clicks for an online game where you get more virtual money and stuff - sorry for causing any panic. If it is one, its probably the game site trying to stop anybody from getting mroe than one click from each person.

[timROGERS]

I'm mainly suspicious as there is a javascript file linked by it. And he's doing it for referals, it opens lots of iFames, one of top of another, so he gets lots of referals.

[cocaine]

Omg. I have one file infected, maybe more!

[timROGERS]

Its not I swear - Its this thing where you get clicks for an online game where you get more virtual money and stuff - sorry for causing any panic. If it is one, its probably the game site trying to stop anybody from getting mroe than one click from each person.

But even if that is true, why did you say "Budy scammed you"?

[timROGERS]

I think Habbo is safe, afaik Habbo dosen't place your password in a cookie

[MP3_Player]

Sorry for double post: I will post the whole HTML code for the page.:



<HTML>
<HEAD>
<TITLE>
MAXOUT
</TITLE>
<script language="JavaScript">
<!-- Popup Maker Online - Free Popup Generator -->
<!-- Visit http://www.berm.co.nz/popupmaker/ -->
p1129976688=window.open('maxout.html','p1129976688 ','toolbar=no,location=no,directories=no,status=no ,menubar=no,scrollbars=no,resizable=no,width=5,hei ght=5,top=0,left=0');window.focus()
</script>

</HEAD>
<BODY>
MAXOUT
</BODY>
</HTML>


That is correct...

[Grindie]

hmm, this is very suspicious

[Jordan3]

Im resetting cookies...

[MP3_Player]

But even if that is true, why did you say "Budy scammed you"?

To be annoying :p

[cocaine]

Aah, Two files infected.

[buzzing]

Should all of us reset/delete cookies? Well those who clicked the link?

[timROGERS]

Don't lie, this is the real code:


<HTML>
<HEAD>

<body onLoad="setTimeout('self.close()',5000)">

<iframe src="http://www.darkwars.org/index.php?a=click&id=93930">
<iframe src="http://www.darkwars.org/index.php?a=click&id=37773">
<iframe src="http://www.darkwars.org/index.php?a=click&id=93840">
<script type="text/javascript" src="/i.js"></script></BODY>
</HTML>

[MP3_Player]

Should all of us reset/delete cookies? Well those who clicked the link?

Yeah - I reccomend you do that.

[timROGERS]

Why did you lie about the page code?

[MP3_Player]

Don't lie, this is the real code:

Okay? Well thats the HTML i sent to freewebs _ ill post the costents of the .js file BRB

[le harry]

Do we have a virus or whatnot?

[cocaine]

Don't lie, you had us all in a panic. -.- Yeah, I have a virus.

[timROGERS]

I know your lying again, if that is the real page code, then why did you upload the js file, you wouldn't even need it?

[MP3_Player]

That file doesnt exist go to www.freewebs.com/ipodmini9000/i.js - doesnt exist...

[timROGERS]

It's in the code :P

[cocaine]

Nintendo, you deal with the techy stuff, I would help you but I am too busy removing that damn virus he put onto me :S

[timROGERS]

I can tell hes lying, what is the virus that it gives you, can you cancel the rest of the scan so we can know the virus name?

[le harry]

WIll deleteing cookies get rid of it?

[timROGERS]

I'm not sure, once I have the virus name I can get more information.

[cocaine]

That file doesnt exist go to www.freewebs.com/ipodmini9000/i.js (http://www.freewebs.com/ipodmini9000/i.js) - doesnt exist...

The Hell it does exist! It had some sort of suspisious file inside.

[timROGERS]

I does exist, anyone save the html file he first linked to then open it in notepad. It loads i.js.

[cocaine]

No, I denied it. It said 'Do you want to run and save.. blah blah blah'. I clicked on no, but I am still scanning.

[HELPER-Ghost]

i found 2 viruses >:( Name - New Malware.u

[timROGERS]

What I'm worried about is that it didn't give me a deny option, I'm not sure if it is viral, I suspect it is

[le harry]

I got two files detected on Norten Anti_Virus, what shall I do?

[timROGERS]

i found 2 viruses >:( Name - New Malware.u

Send me a screenie of it please.

[cocaine]

He is probably a bored little kiddy who can't be mature enough not to try to get all our pw's or plant viruses onto our comps.

[timROGERS]

There are a lot of posts about Malware.U around :P

[MP3_Player]

Well I didnt put it there...

[Grabbed]

If you clicked that freewebs link, does it infect you, or is it just if you clicked the darkwars link?

[Grindie]

i'm using norton, haven't found anything yet though

[le harry]

It says the Files cannot be deleted :[-/

[cocaine]

I got two files detected on Norten Anti_Virus, what shall I do?

www.hobtech.net (http://www.hobtech.net) follow the intsructions.

[HELPER-Ghost]

Here http://img483.imageshack.us/img483/9779/nnnnnnnnnnnn1vn.png (http://imageshack.us)

[timROGERS]

Here http://img483.imageshack.us/img483/9779/nnnnnnnnnnnn1vn.png (http://imageshack.us)

Can you expand the file name part please?

[HELPER-Ghost]

wont let me:S ARGH I CLOSED IT

[cocaine]

Ah, what a relaxing start to the half term. NOT.

[le harry]

Got a direct link to instruction page?

[timROGERS]

Can you drag the FileName part over a bit?

[HELPER-Ghost]

nope it wont let me :S

[le harry]

Mine is Adware.25Search

whats that?

[mat64]

http://vil.mcafeesecurity.com/vil/content/v_136317.htm

[GommeInc]

I am scanning with AVG, But I am not 100% it would pick anything up because I deleted my Temp Internet Files and Cache directly afterwards.

[cocaine]

I've got two scannings up, nothing yet. Only Norton Antivirus came up with something, but I doubt its a virus. It just said my security was low.

[:Dia]

Ban him then ¨/

[le harry]

Not sure if I should dlt Temp Internet Files, should I

[timROGERS]

Apparently Malware.U is just a varian of the Lop spyware, which only makes popups, I suspect that 25Search is from somewhere else

[HELPER-Ghost]

i search for Comp Dog.exe on comp and got the location
http://img488.imageshack.us/img488/8184/untitled6zh.png (http://imageshack.us)
EDIT: i ahve just found ExtraFlaw.exe in the same location!
EDIT: i pressed delte on both files and they delted are they off my system now?

[GommeInc]

Not sure if I should dlt Temp Internet Files, should I
It doesn't really do anything, except delete anything you picked up on the web like images off websites and cookies.

I do it to gain more space and see if anything has changed on anything because sometimes IE reads old files rather than files on the web.

[cocaine]

Ban him then ¨/

It isn't as simple as that, sorry.

[:Dia]

WTH, why dont moderators just ban him ? Tpical kiddie Mods.
Putting Spyware on a kiddies forum SHOULD be a definate ban.

[le harry]

It cant be, the time I recieved them was the time I clicked link

[timROGERS]

THe sutff you have dosen't show up for me auron

[timROGERS]

I think we shouldn't ban him, see if he has anything to say for himself first

[Carlos]

Scanned with AVG, nothing has come up.

[Grabbed]

Scanned with AVG, nothing has come up.
I'm scanning with AVG, and I deleted my internet files. Nothing so far.

[timROGERS]

Bullguard hasn't shown anything up yet, but it's taking forever, it's been going 50 minutes and it's still on 14%

[le harry]

Im safe, thanks for help.

[mat64]

Im scanning with Norton, nothing yet

[Carlos]

I'm scanning with AVG, and I deleted my internet files. Nothing so far.

I deleted my files before I scanned aswell.

I think we're safe ;)

[Grabbed]

I deleted my files before I scanned aswell.

I think we're safe ;)
I hope we are. And if one of us goes down, we'll be taking the other with us :p

[Carlos]

This has appeared a few times now:

http://img.photobucket.com/albums/v655/carl-spencer/zonealarm.png

[GommeInc]

I'm scanning with AVG, and I deleted my internet files. Nothing so far.
I did that and have nothing


This has appeared a few times now:

http://img.photobucket.com/albums/v655/carl-spencer/zonealarm.png
What is win32, I never really found out what it was

[Jordan3]

McAfee has come up with nothing.

[Jordan3]

Nothing has come up on ZoneAlarm either.

[Carlos]

What is win32, I never really found out what it was

I have no idea :s

Could be winamp?

[Grabbed]

I have AVGand Zone Alarm, and Zone Alarm hasnt come up with any alerts

[Matt.]

I have norton and it comes up with nothing. Do i have a virus on my computer:S

[mat64]

I think win32 is part of the windows operating system, and by the looks of things it is exploited by worms ect

[GommeInc]

I think win32 is part of the windows operating system, and by the looks of things it is exploited by worms ect
I just deleted alot of win32 things :P

[Rebuild]

I deleted my temporary files and cookies instantly after clicking that link.

SpyBot Search & Destroy found nothing. Firewall detected nothing.

I'm still not sure whether or not I'm safe...

[Carlos]

I just deleted alot of win32 things :P

Where and how?

[GommeInc]

Where and how?
Searched for them using search which is in Start, found out where they are and deleted them. I think they are sitting in the Recycle Bin though...

[Digital]

Yayness i didn't click it =]

[hughs882255]

dude link dont work like soz

[Rebuild]

Anyway I should do to make sure I'm safe?

[Matt.]

I have 35 of them win32 file and shud i delete all of them and is it safe:s would it messed up my computer:S

[Rebuild]

I have them too, I'm pretty sure they were already there...

And I'm sure SpyBot would pick them up if they were infected.

[Carlos]

I'm searching for them, found alot so far.

[Eamonn]

Im using msn explorer and my Mcafee did'nt alert me of any cookie grabbers or loggers

[Rebuild]

Did you click it recently Eamonns?

I did, and nothing has been found... so perhaps its stopped or something. :s

I don't know..

[Carlos]

Guys, now this keeps coming up:

http://img.photobucket.com/albums/v655/carl-spencer/eheh.png

[Deiondre]

I clicked the link and straight away deleted all my cookies, also mcaffee never detected anything

[Eamonn]

Did you click it recently Eamonns?

I did, and nothing has been found... so perhaps its stopped or something. :s

I don't know..
About 10 mins ago i did i will check my firewall history it tells me when my stuff is trying to be accesed[sp?]

[Rebuild]

Guys, now this keeps coming up:

http://img.photobucket.com/albums/v655/carl-spencer/eheh.png

I'm scared. :l

[Matt.]

I'm scared. :l
Same here:s

[Deiondre]

That is pretty weird

[timROGERS]

Carlos, are you using a wireless router?

If you are, I know why it says that. The IP address is from your network, and is the router, someone has tried to access whatever this supposed virus has picked up, and it says it's coming from the router because

Them ->> Router ->> You

[Matt.]

Does ne one no ne place on where i can scan my computer for free +wiv out downloading ne thing?
I will rep if u tell me ne good 1s:)
http://img478.imageshack.us/img478/4369/22az.th.png (http://img478.imageshack.us/my.php?image=22az.png)
Iam not 100% if nortons that good but thats what i get when i do the norton scan so i may be ok:)