Possible Flash Vulnerability! (PUBLIC SERVICE ANNOUNCEMENT)

[Ellay]

I'd say anti viruses are good but it seems they cause enough problems on their own, sometimes worse than a virus itself does.

[Eldi]

the whole reason i dont run them nor windows firewall. so im open to everything unless my static ip fixes that

[glo]

This is huge, you can get redirected from any site that embeds a youtube video. What's that about 98% of sites?

This issue effects IE, FIrefox, and Chrome. Possibly others but these are definitely effected. In Vista there is an accept dialogue box after you are redirected, not sure about other versions of windows.

I would suggest not clicking on any embedded videos at all for now. Visiting youtube is fine, there is nothing wrong with the files themselves it's an exploit taking advantage of the browsers redirect from embedded files on external sites.

This is a nasty virus that's installed, if you are infected you'll more then likely be reinstalling windows to get rid of it. It installs so many trojans, keyloggers, and viruses that's it hard to be sure you have removed all traces.

[keyclone]

for those that won't RTFA...

Apparently some sort of relatively aggressive virus is affecting certain embedded YouTube videos. Some are saying it affects IE and Firefox users, while others say it’s only going after IE. The virus is called Actns/Swif.T and seems to contain a redirect to a phishing website embedded within a SWF file.

The site apparently installs Antivirus 2009, which is malware. We’ll pull our most recent YouTube embeds, but be careful because this one appears to have just broken out today. If you find yourself being automatically redirected or experience other weird pop-ups, especially for something called Antivirus 2009, don’t click on anything.

so... DO NOT USE anything called Antivirus 2009

(and seriously... why use free AV software? you know those companies pay their people somehow, right??)

[Eldi]

my laptop did some weird things on restart ive never seen it do and it curently will not finish booting... i hurd the harddrive making a constant load sound. im going to starting in safe mod and virus scan it.

[keyclone]

[quote='Eldi',index.php?page=Thread&postID=154322#p ost154322]the whole reason i dont run them nor windows firewall. so im open to everything unless my static ip fixes that [/quote]please, Eldi, at least go get a dedicated hardware firewall. they go for about $45 at the local best buy ([url='http://www.bestbuy.com/site/olspage.jsp?skuId=5507043&type=product&id=10518262 45223']netgear WGR614[/url] ... even comes wireless)

[Vicker]

Should I be worried about this as a Linux (Ubuntu, Hardy) user?

[Frosty]

ah poop, now I gotta go buy some AV software. I never used it before as I always visit the same ("trusted") sites, but I guess that doesnt work (well it seemed to!)

/blink 8|

[glo]

ah poop, now I gotta go buy some AV software. I never used it before as I always visit the same ("trusted") sites, but I guess that doesnt work (well it seemed to!)

I have a basic hardware firewall and the windows software firewall running on all of the dedicated wow machines. I keep them updated and run a virus scanner on these machines daily, I've never come across any traces of anything. They are used only to run the wow client though so it would be surprising to find anything, the only thing I worry about is another machine on the network catching something and passing it along

[Vyndree]

[UPDATE: Spoke with Google/YouTube and apparently anti-spyware software from Computer Associates had been returning false positives, identifying certain files contained within YouTube embed codes as malware. The specific YouTube issue is apparently being corrected by Computer Associates and wasn’t actually harmful in the first place. If you’ve got CA software, you might want to check for any updates.]

http://www.crunchgear.com/2008/12/02...-youtube-vids/


I'm still suspicious, but it appears accurate as the antivirus software I'm running is developed by CA. Better safe then sorry, IMO -- I'm not going to poke at my antivirus, I'll let CA push down an update if this is truly the case.