*Warning* Virus Alert ...For those who use Photobucket.

I had PB open here at work while surfing over lunch, and, sure enough, a Symantec box popped up to say that "Trojan.Pidief.G" had been blocked.

They have to clean up their ads! :mad:
 
thombrogan said:
Thanks for the information, everyone.

Norton blocked Trojan.Pidief.G for me last night while I was looking in my photobucket account and last night and this morning, the computer would go into its rest mode, but not wake up until the eighth holding down of the power button to turn it off and then back on.

Off to use many of the suggestions listed here.
Click to expand...

Here's another little tip: go into your settings and turn off ALL of the sleep, hibernate, monitor power savers, hd power savers, etc. shut off or time out features. I've seen too many with a small semi-harmless bugs turn into big paperweights because of these features. Either have your computer on or off.
 
thombrogan said:
Thanks for the information, everyone.

Norton blocked Trojan.Pidief.G for me last night while I was looking in my photobucket account and last night and this morning, the computer would go into its rest mode, but not wake up until the eighth holding down of the power button to turn it off and then back on.

Off to use many of the suggestions listed here.
Click to expand...

That's the one that mine blocked a few times now. You might have noticed at the top of the IE window (if you use IE) that states it has also blocked the site from downloading files to your computer. If your AV/firewall says that it blocked the download, it most likely did. Run Malwarebytes or any other trusted scanner to doublecheck, but your computer should be ok.

iamtoast said:
until I hear differently I will not be going back to photobucket which is a shame as it has been a valued resource for several years.
Click to expand...

Photobucket support believes that this is connected to one of their advertisers, whose content, IIRC, is linked in just like we link in our pix here from there. This is why they've asked me to send screenshots to them so they can see exactly which advertisements are showing on the page that triggers an alert. I sent them the first screenshot last night, and will send another for each event. It would be helpful for any of you experiencing this same problem to send them a screenshot of the page that triggers an alert on your computer also. Hopefully this will help them find the source and shut it down and /or notify the company responsible for the ad with the malware attached. I don't blame Photobucket and I do believe that they want to stop this problem as much as we want them to, but I must admit that I'm rather skittish while on their site now.

I'm hoping that they'll update me later today now that they have the first screenshot to examine. If they do, I'll post an update here about it. :)
 
My norton just blocked(or at least said it did) the same one you mention...
...Trojan.Pidief.G...

I hope it blocked it, cause I know nothing about PC's, and wouldn't know if anything got past my norton 360:confused:




Can anyone suggest another very good photo sharing site ?



edit- I'm gonna try the Nikon site and see how it goes..

...
 
Last edited:
Ken44 said:
My norton just blocked(or at least said it did) the same one you mention...
...Trojan.Pidief.G...

I hope it blocked it, cause I know nothing about PC's, and wouldn't know if anything got past my norton 360:confused:




Can anyone suggest another very good photo sharing site ?
Click to expand...

Did you grab a screenshot... Or at least remember the advertisements on the page that triggered an alert? Lemme know. :)

BTW, Ken... I'm still running 360 for a little while longer... You should be OK, however, I would suggest preparing to run a full scan when you are done online tonight. Takes about an hour+.
 
Last edited:
SPXTrader said:
Here's another little tip: go into your settings and turn off ALL of the sleep, hibernate, monitor power savers, hd power savers, etc. shut off or time out features. I've seen too many with a small semi-harmless bugs turn into big paperweights because of these features. Either have your computer on or off.
Click to expand...

Turned off the standby mode and hibernate was already off, but left the monitor thingy on its standard setting. Seems to have helped a lot.

Jaxx said:
That's the one that mine blocked a few times now. You might have noticed at the top of the IE window (if you use IE) that states it has also blocked the site from downloading files to your computer. If your AV/firewall says that it blocked the download, it most likely did. Run Malwarebytes or any other trusted scanner to doublecheck, but your computer should be ok.
Click to expand...

Two+ hours of malware bites later and nothing found. Thanks for the tips! :thumbup:
 
Jaxx said:

Photobucket support believes that this is connected to one of their advertisers, whose content, IIRC, is linked in just like we link in our pix here from there. This is why they've asked me to send screenshots to them so they can see exactly which advertisements are showing on the page that triggers an alert.

... I don't blame Photobucket and I do believe that they want to stop this problem as much as we want them to, but I must admit that I'm rather skittish while on their site now.
Click to expand...

I do not blame Photobucket either, they have been a wonderful free service. As such I am willing to take the good with the bad but cannot deal with having to start over, yet again, on my machine.

I have no clue what ads were up when I accessed the site last as that access is disassociated, time wise, with the advent of the symptoms (or at least is so in my craptastic memory). As much as I would love to be part of the solution I do not want to temp a viral-fate by getting back on there to see what triggers a warning.
 
I went there yesterday to post some pics of a new great-niece.

Came away with win32/nugel.e and win32/BankerFox.A.

Geeks at work are working on it.

It self-launched "laptopantivirus.net" and started scanning, then opened several iterations of IE going to several different "adult entertainment" sites.

Would not let me run AVG,Spybot, or Malicious Remover.

People who create these should be imprisoned....
 
iamtoast said:
I do not blame Photobucket either, they have been a wonderful free service. As such I am willing to take the good with the bad but cannot deal with having to start over, yet again, on my machine.

I have no clue what ads were up when I accessed the site last as that access is disassociated, time wise, with the advent of the symptoms (or at least is so in my craptastic memory). As much as I would love to be part of the solution I do not want to temp a viral-fate by getting back on there to see what triggers a warning.
Click to expand...

LOL, I hear ya. I did spend a good amount of time on PB to try snd catch another alert yesterday since Norton was effectively blocking it, but didn't get any. Ken44 did see an alert on his computer, however, so the problem still exists. I did notice since sending my screenshot that I have not seen one of the two ads captured in the image... The one in Spanish for "XOOM.com" that showed a hand feeding a dollar bill into a piggybank.
 
thatmguy said:
I went there yesterday to post some pics of a new great-niece.

Came away with win32/nugel.e and win32/BankerFox.A.

Geeks at work are working on it.

It self-launched "laptopantivirus.net" and started scanning, then opened several iterations of IE going to several different "adult entertainment" sites.

Would not let me run AVG,Spybot, or Malicious Remover.

People who create these should be imprisoned....
Click to expand...

:eek: Wow... :( Sorry to hear, Hammy.

Congrats on the Great-niece. :thumbup:
 
If you run Secunia PSI's free checker, it will tell you what software on your system is vulnerable. Adobe Flash player ActiveX (IE) and Plugin (firefox) have patches and it seems those systems without it are being exploited. ???
 
PorcupineMtns66 said:
If you run Secunia PSI's free checker, it will tell you what software on your system is vulnerable. Adobe Flash player ActiveX (IE) and Plugin (firefox) have patches and it seems those systems without it are being exploited. ???
Click to expand...

+1 on Secunia. :thumbup: And although Adobe Acrobat .pdf reader isn't used by Photobucket, there has been a serious vulnerability patched in the most recent updated version.

I learned the hard way... Well, not so hard as it turns out, but I got really lucky...But ya gotta keep that **** current! ;)
 
Was the Adobe Flash Player involved in any way with the ad's that PB is requesting screen shots for?
 
PorcupineMtns66 said:
Was the Adobe Flash Player involved in any way with the ad's that PB is requesting screen shots for?
Click to expand...

That I don't know, but they do use Flash. I would assume so, but I did notice that when Norton would block Trojan.Pidief.G, my Java icon would appear down next to the clock. Normally it isn't visible, so I'm not sure if the virus was denied trying to access Java, or if that has no relation to the attack.
PhotoBucket Support via email said:
Yes the Adobe PDF reader is not utilized by our site. We do not support PDF files however we do require Adobe Flash as do many other sites. I am forwarding all this information onto higher level tech team member to see what they make of it and I appreciate all the time you've taken to supply us with this information.

Sincerely,

Your Photobucket Support Team
Click to expand...

In any case, they requested screenshots so that they could see exactly which ads were showing at the time of these events. They seem to believe that some of these linked in advertisements may be the root of the problem...

PhotoBucket Support via email said:
Dear Jaxx,

What would be really helpful in identifying the specific ad-content, would be a screenshot of the actual page as you got the warning or whatever, so that we could see that for example, a Sprint ad was loaded on the page.

Does this make sense?

Thanks

Sincerely,

Your Photobucket Support Team
Click to expand...
 
Can anyone confirm if PB has taken care of this problem ?



Need to use them, but I'm not even goin back there untill I know its safe.
 
Nope, picked this up over the weekend. Nasty stuff, I've run all the above mentioned, and am still having issues.
 
I do too, but about a year ago, I tired of seeing ads and upgraded to the version that you see no ads and you get some more options. Now I am really glad I did.
Never had an issue,
Jim
 
You must log in or register to reply here.
Back
Top