Report Blacole Trojan In Ad Provider

Devin64156

Devin64156

Epic Skial Regular
Contributor
It has been brought to my attention that people are saying that skial's ad provider is compromised and has a blacole Trojan in it.

emad.demon: yo dev
emad.demon: what up with this shit im hearing about today about skial
[Skial]Devin64156: What
emad.demon: people say skials ne ads fill yo computer with malwares and trojans and shit
[Skial]Devin64156: and who said that
emad.demon: a lot of people
emad.demon: and a dude on my friend list heard it from some people in game today
[Skial]Devin64156: hmmm
emad.demon: all tho i got 2 anti virus softwares installed im afraid one of the virus can slip its way in my system

I had done a scan on my computer a couple of days before and had found this hiding in my steam tf local files.

This is the info page they sent me to when it had found the Trojan http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Blacole

Should have taken a screen shot of it when I found it but I did not think it would have been skial related.

Edit: The photo in the info page is what I have seen with the ad provider 3 time in the time line of 1 month.
 
Questionable Moose said:
More information of this problem can be viewed here:
http://www.skial.com/threads/java-exploit.36198/

And please tell emad.demon to uninstall one of his two antivirus software, otherwise he may be faced with some problems in the future.
Click to expand...
(CAF)
There was a thing I read about another virus that a user will controle your computer and not unlock it until you pay a fee.

Now moist muffins has got it too.

Moistmuffins: man
(CAF) Moistmuffins: i just git a thing from the winnipeg police
(CAF) Moistmuffins: saying was under investigation
(CAF) Moistmuffins: for child pornography
[Skial]Devin64156: ohh shit
[Skial]Devin64156: what did you say
(CAF) Moistmuffins: i shut my laptop down
[Skial]Devin64156: take screen shots of it and send them to me
(CAF) Moistmuffins: but it saod
[Skial]Devin64156: or pictures
(CAF) Moistmuffins: pay a 100 dollars to pay off my fine
 
We're aware, the issue really isn't widespread. It's one person complaining and they posted a thread on reddit. We're looking into it though.
 
Devin64156 said:
(CAF)
There was a thing I read about another virus that a user will controle your computer and not unlock it until you pay a fee.
Click to expand...

It's called the FBI Moneypak virus. Most of them are quite simple coded and you can kill them by killing its processor, but it will start again after a restart of the computer. For the most part, there isn't anyone that are controlling the computer nor will the fee unlock the computer. It's just a very big lie that has tricked a lot of people.

Tell your friend to scan his computer with his installed antivirus software, and if that doesn't work tell him to install Malwarebytes Anti-Malware and scan with it.
 
Lets not jump to conclusions about his infections origin, this exploit is possible anywhere ads are displayed, on any website.
 
OakyTree said:
Lets not jump to conclusions about his infections origin, this exploit is possible anywhere ads are displayed, on any website.
Click to expand...
wow
(CAF) Moistmuffins: 4 trojans
[Skial]Devin64156: does one say its in the tf2 folder
(CAF) Moistmuffins: yes
(CAF) Moistmuffins: 2 actually

He is getting screen shots for me right now
 
You just have bad luck when you get in contact with a virus, the only thing you can do is to have a decent firewall up (and anti-virus?) so it will block an attempt of a virus to get access to your computer. However I truly think Skial needs the ads to stay online, and I'm pretty sure that if something could be done to black out possible viruses it would have been done already.

I ran Norton through my Steam folder and didn't find anything suspicious, which makes clear it's not every ad that is infected as I only play on Skial servers.

Edm9wbp.png
 
If you were infected, it was because you clicked run on the Java dialog or from an unrelated event.

A lot of these anti-viruses are detecting the images related to the malware, not the malware itself. Images cannot infect you.
 
Bottiger said:
If you were infected, it was because you clicked run on the Java dialog or from an unrelated event.

A lot of these anti-viruses are detecting the images related to the malware, not the malware itself. Images cannot infect you.
Click to expand...
It blocked the URLs, we can't say the applet wouldn't have attempted to launch if it hadn't. Someone may be stupid enough to click run, and so long as people are even perceiving there to be a risk of infection it's going to harm us. Every time someone's antivirus sends a warning, we're going to see this.
 
I have no problem with the ads I think that they are fine but one ad that was infected or some thing might have slipped its way in and that's what some people are starting to get.
 
Yeh a few times I noticed that my security program blocked the ad. Not sure if it's relevant, but I hadn't thought much of it until I saw this post
 
Honestly I would not rely know because I make sure to donate every month and there was a 1 day gap that I had ran out and might have contracted it then from an infected ad that had slipped through. But I can gladly say that since it has been removed and I have donated and played a week or more on Skial|2fort+|LA it has not come back.
 
  • Like
Reactions: Sharkey
You must log in or register to reply here.
Top Bottom
Back