General Chat

Ron is well aware of the various threads about this problem, what he was suggesting was that if everybody looked at what adverts were showing on the page at the time it might help nail the problem, there must be dozens of adverts that pop up on a rotating basis and if we all make a note of the adverts that are on screen at the time and they turn out to be the same one it will help everybody and get it sorted.

Carol
www.genealogyprinters.com

Rosalind

Thanks have followed your advice

Ans done it.

Cheers
Sue

Sue, if you are using Firefox, tools options privacy and then you will see the bits about cookies

Rosalind

Sorry to be a pain,I click on TOOLS and all it says is Options at the bottom,onlt thing that comes up is about Firefox.

I used to know how to get to cookies cos Jude in USA did a maintenance thread for us.

Will look for that thread.

Sue

Budgie, I believe there is a lot of truth in what you have just said.

As far as I can tell, this is not a trojan per-se but just a dodgy site which wants to sell you some software to cure a problem that you don't actually have. The nasty bit, as far as I can tell is that there is something, whether in a cookie, or a piece of malicious code, which tries to direct you to their site.

It is possible that this is the trojan bit and also why it is hard to eliminate, because it lies dormant and then bursts into life later.

on the "tools" drop down sue is there a "delete browsing history" section? If so go into that x

Twinkly

Thanks,have recieved your pm.

Sue

ps have tried on Options bur can't find browse history on that.

Sue I have pmd you x

Like Jeanette I am a complete divvy on comp.How do I get into my cookies.

Sue

I think the trojan appears once the performanceoptimizer has downloaded itself, I may be wrong. Some are getting warnings of a trojan being blocked, and others have had to remove trojans.

Rosalind

Thanks for placing this on Ros :):)

I have just done a Flash Player Cache check from using the site you give, what was in flash player cache but quinquecahue, despite all the scans I have done so far.

I have added a site here for people to do a check on their own flash player cache

http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html

Genes ought to look at this

http://msmvps.com/blogs/spywaresucks/archive/2008/02/03/1493184.aspx

Rosalind

Can we bear in mind that the GR team are very small, can count them on one hand, and not anywhere near as big as a normal company IT department? They are the same people who deal with all the emails we have flooded them with. Give them time, the solution is not as simple as some people on here think, it will take more than a click on a button to sort it out.

A number of people said they had the downloader trojan too.

Jeanette, actually mozilla firefox is much better than IE7 and you dont have to change, you can have both on your puter and just choose which one you want to use by clicking on their icon.

I know Daves solution looks techi but in fact I managed it after a bit of fumbling and it really wasnt difficult :)

Out of intereste I googled malware genesreunited to see if this issue was being discussed on other forums. Not surprisingly it is.

One poster on Rootschat claims he was infected with the Download virus on a visit to GR on 16th January. That is interesting as it predates the spate of attacks which we are all now too aware of.

Thanks for the explanation Steve.....but you know what a computer divvy I am....lol...and I am sure there are many more like myself out there who don't want to start fannying about with their pc when they don't know what they're doing.

GR have had at least 4 days to get this sorted....isn't that enough time to contact the ad companies? It's not often I have a whinge at GR but I do think they are taking the proverbial wee wee this time!

Morning Jeanette

I would think the adds are on a remote server that the IT team have no access to, so it is down to the ad compamy to remove them

but the owners wont want to loose the revenue from the advertisers so we will never have an add free site

also this practice is becoming more and more common on web sites, so its usefull to have another browser other than IE as most of these trojans use an hole in IE to load, firefox is more secure

Sxx

I've just got it after simply opening the front page og genesreunited. It has been happening for the last few days and I get the feeling it was a little more aggresive today, in that closing the 'Warning Malware' window just seemed to re-open the original malware page. This is a really serious security threat to genesreunited users.
Andy

Does anybody know what this particular trojan actually does? Apart from being alerted by antivirus and antispyware programs, how would a person be aware that their machine had been infected?

Hi Heather

I read that over on FTF and I'm sure other members will be grateful for the information. But personally I don't want to change my browser and why should I? Also Dave's fix is far to complicated for a technophobe like me to even contemplate attempting.

GR should be sorting this problem out