Not sure if I have a virus?

aaroncaz

Clicked on a link here last night for a comp, without reading ll the thread and the link went instead of to the comps site, it had been "hijacked"? Cant find comp now...... anyway ran avast last night but as soon as i turned it on, started scan a box popped up saying there was an update, then i seconds wanted to reboot, i turned that off, scan was ok, no scan was ok, now this morning laptop crashed turned it back on and avast box popped up saying it had detected a new network NTL infrastructure- cosham and to click box for private or public?? What is this? Thanks.

Edit, hitmanpro scanned and found something MSIA54C.tmp and hopefully deleted it,

aaroncaz

This was the comp:

https://forums.moneysavingexpert.com/discussion/5314375

kwikbreaks

Thanks for the invitation to get the same infection myself. I think I'll decline it.

For post infection cleanup the usual advice is to use Malwarebytes. Hopefully the nasty isn't crafty enough to prevent the download. If it is you'll need to download to usb stick on a different machine. The free version will be OK for this task.

aaroncaz

Am running free malware now. And no I didn't want you to get an infection it was for reference and to see if anyone was infected from it.

bsod

can't see evidence of infection amongst the story, if you're using the full version of avast, the new network is probably your isp, virgin?

aaroncaz

bsod wrote: »

can't see evidence of infection amongst the story, if you're using the full version of avast, the new network is probably your isp, virgin?

Just finished malware, nothing found, googling that network shows it is virgin which im on...... if that avast box pops up again should I just click on private or leave it alone. This laptop is not working at its best so could be the problem I guess....

bsod

if you're using you home router, private, if you're out and about using a wifi hotspot, public. Unlikely to be connected with performance issues.

kwikbreaks

The competition thread suggests that the site was hacked (or maybe just false positives from some AVs). Anyway if malwarebytes says you are clean then the odds are that you didn't pick up any nasties.

I have seen driveby infections in the past where just visiting a site is enough to get something downloaded so I always scan with Malware bytes if I notice anything unusual about my machines behaviour.

Gillor

This site appears to have been infected with Blackhat SEO Spam.

Normally this is a means of driving hackers traffic to their own (often dodgy sites) and Wordpress sites have been particularly vulnerable to this type of attack.

However, although not generally the main intention, it can install malware on your computer such as fake anti-virus, so to be on the safe side try a couple more on-demand scans, say with something like Eset's Online A/V Scanner and Emsisoft's Emergency Kit.

Although nothing is certain in life (apart from death and taxes) you can then be reasonably sure that your machine is infection free, but keep a look out for any unusual activity for the next few days or so afterwards.