180Views25Replies

Author Options:

instant start virus alert programme Answered

I have recently had 2 newsletters from instructables where upon opening an instructable of interest I get a virus warning and the device seems to start searching my C drive.

The warning is nothing to do with AVG and upon running a scan nothing is found.

I am alarmed by such things getting into my computer without my permission, what is going on?

I have AVG, a firewall and windows defender all updated daily.

Why does instructables allow this sort of intrusion?

dougoutcanoe

25 Replies

user
noahw (author)2010-01-04

Here's an update on the virus trouble some people are reporting...

From what we've seen so far, the virus is being caused by one or more of our ad networks.  Instructables is in no way "allowing" this to occur.  We've been working hard to pinpoint the offensive networks and stop their campaigns, but the links are very difficult to track back to the source. 

These trojans are attacking many other sites besides just Instructables, so please bear with us as we work to end the infected campaigns.

If you are having problems after this post (January 4th, 2009 at around 5:00PM PST) please reply to this comment and let me know...your input will help us solve the problem.


Select as Best AnswerUndo Best Answer

user
mcrunyan (author)noahw2010-01-05

@noahw: Got the virus scan again this morning (Jan 5th ~7:45AM PST).

Select as Best AnswerUndo Best Answer

user
noahw (author)mcrunyan2010-01-07

We just shut down yet another ad network and hour ago - can you let me know if it happens to you again?  Thanks!

Select as Best AnswerUndo Best Answer

user
danstax (author)noahw2010-01-10

Just got the "Your computer is infected " message when opening https://www.instructables.com/id/A-Perfect-Twist/ . This is not the first time I've gotten this, probably more like half a dozen. I always manage to shut down the browser immediately and run a scan (AVG). I don't know if it's always the first Instructable of the day that I view, but today it was. I'm with the others, this makes me less likely to spend much time here, don't need THAT kind of project.

Select as Best AnswerUndo Best Answer

user
noahw (author)danstax2010-01-11

All of our ad networks besides Google Adsense have now been turned off.  Can you poke around a bit and let me know if you run into any more trouble?

Select as Best AnswerUndo Best Answer

user
webman3802 (author)noahw2010-01-12

I got it just now on this very page.

Select as Best AnswerUndo Best Answer

user
danstax (author)noahw2010-01-12

Now this is a bit too much. This morning 1/12/10, 7:11 AM, I logged in to Instructables, went to this page to see if there were any additional comments regarding this virus stuff, and it hit again. I made a quick screenshot before closing the browser. I have it as a Word file, but can't seem to attach it here. If you want to see it, please contact me, I can send it this evening. Here is the URL off the screenshot, if that is any use to you-

http://clean-your-pcr1.com/scn1/?id=pHT4xTzuMzc0LjIwNS4xOTUmcGlkPTQwczEmdGltZT0xMjYxMAkOPAZO

Select as Best AnswerUndo Best Answer

user
danstax (author)noahw2010-01-11

I did just that, and got it again. This time it was not the first instructable I viewed, and was not hovering the cursor over any ad. I had been on the site for approximately 2-4 minutes. Same warning-your computer has a virus and needs an online scan, then it appears to start the scan while offering to let you go to a site to "fix" the problem. 7:15 PM Central time 1/11/10
https://www.instructables.com/id/cheap-and-quick-warming-and-sore-muscle-releif/

Select as Best AnswerUndo Best Answer

user
trishs (author)noahw2010-01-05

I had this problem yesterday and it almost wrecked my computer. I had to get the IT guy to completely clean it. I clicked on the link in the newsletter to refill a Swiffer mop. I instantly got a message that said my computer had been infected and I needed to go to Security Tools to get rid of it. I thought this meant the security tools we have installed for our protection. However, to my dismay, it directed me to a site to purchase a product. I knew immediately something was wrong but it was too late. I could not get out of it and could not uninstall. Our IT guy said he could see things flooding my profile. It took 2 hours to fix. I love the website but I CANNOT afford to have things like this happen. My company is pretty tolerant but I would have a hard time explaining if this happens again. Please let us know when this problem is corrected because I will not be using the website or anything in the newsletters until this is resolved. Thanks.

Select as Best AnswerUndo Best Answer

user
PhotoMaster (author)2010-01-11

It appears to be one of the advertisers on the site or else someone has hacked the site. Every time I get on the site it is the first instructable I choose to view, no matter which one choose. I turn off the wireless card and stop IE. Then it reconnect to the internet and contnue using instructables.

Select as Best AnswerUndo Best Answer

user
noahw (author)2010-01-05

**FURTHER UPDATE**

Hey everyone having virus troubles - we've just made a change and blocked a whole bunch of ad networks that appear to be the cause of our virus troubles. 

Can anyone still actively having this problem please post on this thread and let me know if they are still getting warnings and alerts? 

Thanks for your help - we're working hard to resolve this.

Select as Best AnswerUndo Best Answer

user
dougoutcanoe (author)noahw2010-01-11

Just happened again when I tried to look at an instructable from the newsletter dated 07 January 2010 11:59:53.

I hope I managed to stop it in time.

dougoutcanoe

Select as Best AnswerUndo Best Answer

user
Pepsi Supreme (author)noahw2010-01-11

I'm also having this problem.
Only when opening your ads on my e-mail.
Happened today again. 1-11-10

Select as Best AnswerUndo Best Answer

user
Bug2k (author)noahw2010-01-07

Yes, it happened to me today 1/7 at 10AM EST.

Select as Best AnswerUndo Best Answer

user
noahw (author)Bug2k2010-01-07

We just shut down yet another ad network and hour ago - can you let me know if it happens to you again?  Thanks!

Select as Best AnswerUndo Best Answer

user
dougoutcanoe (author)noahw2010-01-07

Hi noahw,
Just got another one from the latest email. I just clicked on flipbook instructable.

AVG caught it.
Threat name Exploit Search engine hijack.
File name freshantyflu.com/index.php?affid=91107
Process name: C:\Program files\Internet Explorer\iexplore.exe
Process ID: 6776

Dougoutcanoe, 23.55GMT, 7th Jan 2010

Select as Best AnswerUndo Best Answer

user
webman3802 (author)dougoutcanoe2010-01-08

I got it this morning (1/8, about 8:45am) with the first instructable I visited on the site.  For some reason, it only seems to happen with the first 'ible I visit each day.  After that, it doesn't happen again.

Select as Best AnswerUndo Best Answer

user
randcal (author)webman38022010-01-11

Happened to me just today.

Select as Best AnswerUndo Best Answer

user
rizingf3nix (author)2010-01-09

Seems this comes up on both of my PCs as well. One is running XP, the other Vista, and both have virus/malware/spyware scans run on them regularly.

Select as Best AnswerUndo Best Answer

user
bwpatton1 (author)2010-01-03

Aha! I am not the only one with this issue, yes it tries to download stuff to your computer!!! I cannot believe instructables is allowing this along with those dang ads on the side of the page that expand when your roll your mouse over them!!! Its crazy, surfing the internet is almost not fun anymore.....

Select as Best AnswerUndo Best Answer

user
yoda1763 (author)2009-12-31

it's not a program, it sends you to a website and installs a trojan, remove it immediately. Here is the trojan information from microsoft. http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=TrojanDownloader%3aHTML%2fRenos&threatid=2147575298 

If anyone has information on this trojan please post! I've even got this on revision3.com, as well as some other normaly safe websites.

Select as Best AnswerUndo Best Answer

user
MCHarm22 (author)2009-12-29

My son has had two instances of this activity one which rendered his system completely inoperable. In addition they occurred on two different PC's with two different operating systems. We love this site and the community but will be forced to discontinue our membership if this is not addressed and rectified.

Thanks

Select as Best AnswerUndo Best Answer

user
dougoutcanoe (author)2009-12-29

n8man I have managed to repost it in Help/Bugs. It wasn't as difficult as it sounded.
Doug

Select as Best AnswerUndo Best Answer

user
n8man (author)2009-12-28

 People seem to be having the same problem, check out the bugs section of the help forum for help. It would also be a good idea to move your topic there so you can get better help from those who work at  instructables.

Select as Best AnswerUndo Best Answer

user
dougoutcanoe (author)n8man2009-12-29

Thanks n8man, Can you suggest where to and how to move my topic?
Doug

Select as Best AnswerUndo Best Answer