[Rules, Quick Links, Contact Us]
Welcome Guest [Log In] [Register]





RS Forums, RS Clan Page, Play RS1, Play RS2, Play RS3
Like us on FaceBook
Live Gold Swaps on Twitch
Add an Event
Event Calendar
Deputy Discussion



Welcome to the National Guard of Runescape.

You must be registered to access the forums.

Username:   Password:
  • Pages:
  • 1
  • 3
2011/Feb/16 - RS Wikia Full of Malware and Possible Viruses
Topic Started: Feb 16 2011, 02:47 AM (2,302 Views)
Posted Image Kire667
Member Avatar
Classic Veteran
Discuss this at:
Gaming Heavens
Just Chill
Sythe

Jagex claims RS Wikia is a safe website. http://services.runescape.com/m=forum/forums.ws?254,255,8,61790038

If you think you can trust RS Wikia think again.

http://runescape.wikia.com/wiki/RuneScape_Wiki

This is now the 2nd day in a row I've visited a guide on that website. And both times I've finally tracked it down to the source. Last time on the "Zamorak Arrow" page. This time was while viewing the "Urns" guide.

I'll be viewing the internet as usual, then a pop up asks me if I wish to allow Java (same one you get when running RuneScape) so I denied it. I wasn't loading a damn thing I needed Java for other than RuneScape which was already loaded.

Somehow it opened a 2nd Java client on its own and not even 5 minutes later I get this pop up at the lower right on my desktop claiming a virus was found in "Win/system32". I'm no moron and I know I don't use a virus scanner so any pop ups are bs plus System32 is the operating system itself so why the **** would I block that?

I try closing this and another window appears overlaying my FireFox RuneScape tab showing "scanning for viruses..." and a button for click to stop scan. I know how the scam works.. you click stop and it in fact accepts to install a ton of viruses that completely **** your PC up. So I did my usual Alt+Ctrl+Del to open File Manager and manually closed down BOTH the 2nd Java client AND the random named program "jvwvwvjgm".

Word of advice. Avoid RS Wikia unless you've added their main URL to your blocked sites list under Start > Control Panel > Internet Options > Security > Restricted Sites. And set their security block to "High" to ensure nothing gets through to your PC beyond the guides and that's all!

Figured I'd send this out to everyone in case your internet stops working because of an RS Wikia malware. This "virus scanner" also disabled your internet somehow to make you think something is actually messed up. To get your internet working again follow these easy steps.

Quote:
 
Start > Control Panel > Internet Options > Connections > LAN Settings

Uncheck BOTH boxes here. One for "Use a proxy server for your LAN (these settings will not apply to dial-up or VPN connections)." The other box for "Bypass proxy server for local addresses".


Thanks to owning 2 PCs I had the ability to Google a solution to this last night.It sent me to Yahoo Answers where another person had their internet randomly stop working on a laptop. Theirs too claimed "Unable to connect to proxy servers".
Edited by Kire667, Feb 21 2011, 02:07 AM.
Posted Image

"When I came into the game they didn't do nothing but doubt me.
Now the whole game's changed and it ain't nothing without me.
"


About Me
Offline Profile Top
 
Posted Image Sam
Member Avatar
MotM Oct'09
Wow... I used this site for any info I needed or any help regarding Runescape.. Now I'll have to figure it out myself or use some other source.

By the way, thanks for the heads up on this and have you completely fixed your computer yet?

Offline Profile Top
 
Posted Image glooozo
Member Avatar
Lv 61
hmm ok, thanks for the warning.
Posted ImagePosted ImagePosted ImagePrevious display names: TzHaarmeleon, Tusionite, Toroid, Gluons, Glooey, Red Gnome, Adorno X
Always reverted to Glooozo
Offline Profile Top
 
Posted Image Mitch
Member Avatar
NGoR Elder
Lucky i dont use it anyways.
Posted Image
Offline Profile Top
 
Posted Image Kire667
Member Avatar
Classic Veteran
I believe I have. If I got a virus because of them I should serious look into suing the originator of the RuneScape section of that Wikiapedia. At least for any cost of repair or placement harddrive.

So far so good though. I'll keep an eye on it.

I discussed this on Amber Meow's clan and another user claimed he got keylogged on RS Wikia lately. May be a thing going around like the recent keylogger on PowerBot/RSBot site. Someone hidden in the page's script that isn't seen from first glance.

If it's a keylog I had that once in 2006. So I know what it looks like. When you type it takes a few seconds to send a line. The game window overrides all other programs or windows. Kind of obvious something ain't quite right to the usual how my PC runs.


I notified Jagex to remove RS Wikia off their safe site list.

http://services.runescape.com/m=forum/forums.ws?254,255,8,61790038

Posted my claim of two day straight I visited both the "Zamorak Arrow" and "Urn" pages of that website and both times it had a fake virus scam pop up and altered my LAN Settings to "proxy connection" and "bypass settings".
Edited by Kire667, Feb 16 2011, 04:18 AM.
Posted Image

"When I came into the game they didn't do nothing but doubt me.
Now the whole game's changed and it ain't nothing without me.
"


About Me
Offline Profile Top
 
Posted Image Rach
Lv 59
erik, is the virus Antivira AV?
Posted Image
Offline Profile Top
 
Posted Image Jake
Member Avatar
NGoR Elder
I got the popup about java too but nothing else popped up about a virus or w/e
Posted ImagePosted ImagePosted Image
Posted ImagePosted Image
Posted Image
Offline Profile Top
 
Posted Image Rach
Lv 59
i had gotten the AntiVira AV virus scanner pop up telling me my computer was mass infected and to buy the upgraded version to remove them. The virus didn't let me open task manager and everything and said all my .exe files were full of viruses. I had to do a system restore to the last previous update which got rid of the virus. However I got "infected" again and did another restore to cure the problem. It would make some sense for this to be rs wiki because I like to collect and compare information from runehq, tip it, and rs wiki.
Posted Image
Offline Profile Top
 
Posted Image Kire667
Member Avatar
Classic Veteran
I can't run programs on my laptop anymore.

Soon as I start it up it has that annoying thing pop up ask if I wish to run virus scan. I don't own a virus scanner and never will.

I went to Task Manager to shut it down, and the damn thing closed off my Task Manager. I went to System restore and it closed that down too. It closed down Screen Recorder Studio when I attempted to make video proof that RS Wikia installs a virus/malware/keylogger on my laptop.

I'm now trying to figure out how to run safe mode so nothing can shut down my programs and I can run a System Restore to before the virus installed itself on my laptop.

If ANY of my accounts log in I was keylogged. I'll hop on from my safe PC to check my items are still there and to issue a bank pin to ALL of my accounts. RS Wikia is going down I'll make damn sure Jagex removed them from the certified fansite list.

Hell.. and here we've never had a keylog or virus installed off our website and just because Google AdSense shows Gold4RS ads they exclude us from the safe site list? **** it! This is utter and complete bull ****. Not to mention Google's top links on anything about Runescape sends everyone to the keylog/malware website RS Wikia for advice.


I hope I fixed the problem. I hit Alt+Ctrl+Del soon as Windows Vista started (thought they made it to be completely virus proof FINALLY since it's the newest thing at its time) and I shut down the program name "rjgfgfmj" soon as it tried to start up 3 times in a row. Then I opened Accessories > System Tools > System Restore to return my laptop to BEFORE RS Wikia put a virus on my laptop to the earliest date being February 5th 2011.

I'll be back to notify if this removed the problem or if it persists.
Edited by Kire667, Feb 17 2011, 12:04 AM.
Posted Image

"When I came into the game they didn't do nothing but doubt me.
Now the whole game's changed and it ain't nothing without me.
"


About Me
Offline Profile Top
 
Posted Image Sam
Member Avatar
MotM Oct'09
Good luck, only other thing I can think of is reformat. But gf files?
Offline Profile Top
 
1 user reading this topic (1 Guest and 0 Anonymous)
Go to Next Page
« Previous Topic · Community News · Next Topic »
  • Pages:
  • 1
  • 3


National Guard of Gaming, National Guard of Runescape, Clan MF-D and all logos are trademarks of Webtronix Design, ©1998. All Rights Reserved. View our ToS for more details. Runescape™ is a trademark of JaGeX Ltd ©1999. Andrew Gower and Jagex, Ltd. Forum banners by Bobbydown. Forum design by Ackerben. Team Speak by Gaming Heavens.