PDA

View Full Version : Was Ausfish comprimised



ColJacDak
26-01-2010, 09:18 AM
What has been happening every time i try to logon to anything with ausfish, it was redirecting me to another site, and would not let me access anything

Owen
26-01-2010, 09:58 AM
Quite possibly you have experienced a browser hijacking.
Do a search for a file called HOSTS (no file extension)
Usually in C:\Windows\System32\drivers\etc\
You can open it in wordpad by right clicking it and using "open with"
Don't use notepad as it won't let you save again without adding a txt extension

If you see a whole bunch of entries then chances are you have been hijacked.

they'll look like this
192.168.0.10 www.someplace.com
You can safely delete these.
They tell your browser to redirect any attempt to go to www.someplace.com to the IP address listed.
Anything with a hash # in front is fine as it's just a comment.

If you DO find such entries, then there is probably a running process that will put them back as soon as you restart, so you need to run some anti-malware anti-trojan software to find the culprit.

Usually the redirect your startpage and any search engines like google, but it IS possible the get web addresses from your favourites as well.

dreemon
26-01-2010, 10:21 AM
Hi
We had some problems a few days ago. If we opened up mozilla browser and did google search for ausfish, & clicked on a link – it took us to a VIRUS page, with many popups, we did cnt+alt+delete to get out of it, but that then stuffed browser.
I emailed ausfish, but they only said to get to forum use www.ausfish (http://www.ausfish/),
So we think google & yahoo etc links have been hijacked.
After reinstalling mozilla, all sites were ok, but then tried ausfish links again & it took us to searchtop10.
I rang my pc shop, and they got the virus page too!
These are the programs to try & clear pc (for free), try getting from download.com –
Ad-aware; Superantispyware; CCleaner; MalwareBytes AntiMalware; Spybot Search & destroy……

tigermullet
26-01-2010, 10:45 AM
Trying to get on to Ausfish a couple of hours ago was unsuccessful and a message popped up that the database was down. I use Mozilla but will check to see if this computer has been affected. Thanks for the warnings, Owen.

grey_inflatable
26-01-2010, 10:48 AM
hi i could not get a password last night but it has worked today
i think here are two of the issues

http://www.ausfish.com.au/vforum/login.php?a=pwd&u=33907&i=63161150
http://piskanovayaura.xorg.pl/go4/

Steeler
26-01-2010, 11:00 AM
Had drama's also this morning, immediately done a full system scan and nothing came up untoward.

Cheers

Steve

Owen
26-01-2010, 11:03 AM
grey_inflatable

You have been redirected which is why you got the attack site warning.
You should also check for browser hijacking.

Owen
26-01-2010, 11:10 AM
If you are getting redirected on your home page, or getting wierd stuff from searches then you have been hijacked.
This has nothing to do with ausfish other than the url may be one that's being redirected on YOUR browser.
The problem is YOUR end, not the site.
Most likely you have installed a program recently that has had a trojan.
I got one downloading a copy of winzip!
I did a search for winzip and selected one of the top download sites to get it from. Nothing fancy, was just after the usual shareware versin so I could open a .tar gzip file
Turned out to be a scam site and had a hell of a time clearing the hijack.
The usual tools could not remove all of it. Required manual file deletions and registry changes.
But before you can cure it, you have to figure out what it is.

FNQCairns
26-01-2010, 12:32 PM
Download Commodo and put this behind you for free! it's a commercial grade firewall/antivirus etc so just a little knowledge needed over the common fare but well worth it.

cheers fnq

the gecko
26-01-2010, 01:06 PM
I had a trojan masqerading as a google update a few days ago. AVG pro found it and isolated it, so no probs.

Free anti virus is just not strong enough. Its the only software that I do pay for, cos its worth it.

Andrew

Mindi
26-01-2010, 03:36 PM
Hi
We had some problems a few days ago. If we opened up mozilla browser and did google search for ausfish, & clicked on a link – it took us to a VIRUS page, with many popups, we did cnt+alt+delete to get out of it, but that then stuffed browser.
I emailed ausfish, but they only said to get to forum use www.ausfish (http://www.ausfish/),
So we think google & yahoo etc links have been hijacked.
After reinstalling mozilla, all sites were ok, but then tried ausfish links again & it took us to searchtop10.
I rang my pc shop, and they got the virus page too!
These are the programs to try & clear pc (for free), try getting from download.com –
Ad-aware; Superantispyware; CCleaner; MalwareBytes AntiMalware; Spybot Search & destroy……


Further....having run Ad Aware/Defender and norton-symantec for years I have just replaced them all with one free product from Microsoft which is too little known. Windows Security Essentials. It covers firewall, spyware and virus checking all in one free package downloadable from Windows website,.... runs on XP or W7 ...it just checks that your copy of Windows is legal before giving the download. It has simplified and made free all my security software needs.

I cant believe I just recommended something from Microsoft but there you go....!...$80 a year for Norton or whatever is (IMHO) a waste of money.

blueline
27-01-2010, 06:57 PM
Hi
We had some problems a few days ago. If we opened up mozilla browser and did google search for ausfish, & clicked on a link – it took us to a VIRUS page, with many popups, we did cnt+alt+delete to get out of it, but that then stuffed browser.
I emailed ausfish, but they only said to get to forum use www.ausfish (http://www.ausfish/),
So we think google & yahoo etc links have been hijacked.
After reinstalling mozilla, all sites were ok, but then tried ausfish links again & it took us to searchtop10.
I rang my pc shop, and they got the virus page too!
These are the programs to try & clear pc (for free), try getting from download.com –
Ad-aware; Superantispyware; CCleaner; MalwareBytes AntiMalware; Spybot Search & destroy……
i got one of thos viruses a few months back, it was on the news last week about a trougen trying to sell a antivirus software, as you say i got rid of it with ad-aware.

smashed crabs
27-01-2010, 11:31 PM
i bought my lap top in 2007 it had nortons or what ever you call it, my computer got the clap and i lost some very exspensive software , got it all fixed up and the protection stuff ran out after a year. since then i have no anti virus and all that other jazz and have not ever had a problem since , can anyone tell me why my computer is not getting the clap?? is it because the buggers who make the bad stuff have designed them thinking in mind that their bad stuff has to beat then attack protected computers??

yes im a computer retard

groverwa
28-01-2010, 09:18 AM
smashed crabs

I have been using the free version of AVAST antivirus software for a while and it will stop viruses infecting the pc. If a site is accessed that has a virus or potentiak virus the it will come up with a screen telling the name and suggest what you should do about it

I also use the free version of ZONE ALARM as my firewall software

On another subject re the DO NOT CALL list so that the your phone is not called by those pest callers. It was on the ABC radio that we have to renew this after 3 years of use or the pests can start calling us again

Mike