File: lolicatgirls.swf-(2.54 MB, 512x384, Hentai)
[_] Anonymous 11/03/14(Mon)03:14 No.2585725
/r/ ing that one where the anime gril gets her card picked
>> [_] Anonymous 11/03/14(Mon)03:16 No.2585727
lol that describes basically every J posted here
>> [_] Anonymous 11/03/14(Mon)03:16 No.2585728
no
>> [_] Anonymous 11/03/14(Mon)03:22 No.2585736
A virus or unwanted program was found in the HTTP data of the requested page.
Requested URL: http://i.4cdn.or/f/lolicatgirls.swf
Information: Contains the SWF/Agent.nts SWF virus
H-heh
>> [_] Anonymous 11/03/14(Mon)03:24 No.2585738
>>2585736
might be why its different from what I uploaded
>> [_] Anonymous 11/03/14(Mon)03:27 No.2585740
so how fucked am I for clicking that button
>> [_] Anonymous 11/03/14(Mon)03:30 No.2585741
>>2585740
on a scale of 1-10
IDS HABBENING
>> [_] Anonymous 11/03/14(Mon)03:31 No.2585742
>>2585741
>flash just popped asking me to locally store content from website
Welp time to change my passwords
>> [_] Anonymous 11/03/14(Mon)03:42 No.2585744
I opened the flash but didn't click the button
a-am I safe
>> [_] Anonymous 11/03/14(Mon)03:43 No.2585745
>>2585725
I've seen where this goes bad...
>> [_] Anonymous 11/03/14(Mon)04:10 No.2585760
I thought /f/ was safe
>> [_] Anonymous 11/03/14(Mon)04:10 No.2585762
>>2585744
I tried decompiling it with no succes. Trying to see the code on showmycode shows me nothing
harmfull.
Meanwhile, running this SWF through virustotal gives a 15/60 result. Meaning that 15 scanners see
the file as malicious. I highly suggest running a scanner or two to see if you can pick anything
up.
>>2585760
These kind of SWF files come along more often than you think.
>> [_] Anonymous 11/03/14(Mon)04:17 No.2585765
>>2585762
I did a quick scan with malwarebytes and it didn't find anything. People on the archive are
saying avast blocked it though, so try that I guess.
>> [_] Anonymous 11/03/14(Mon)04:33 No.2585774
>>2585765
Im not finding this on the archives. Running a scan with ESET and Malwarebytes right now. Might
be an old exploit, how old is the flash according to the archives?
>> [_] Anonymous 11/03/14(Mon)04:36 No.2585776
>>2585774
I just searched for the filename lolicatgirls on the archive, I didn't click them so I don't know
if they're the same flash or not.
http://archive.4plebs.org/f/search/filename/lolicatgirls/
>> [_] Anonymous 11/03/14(Mon)04:50 No.2585780
Kaspersky positive
>> [_] Anonymous 11/03/14(Mon)04:50 No.2585781
Fuuxk .. ckicked on it bunch of fucking pop ups. Fuck meeeeee
To this site. I disconnected from the internet and am now scanning.
Http://www.italehi.fi/uutiset/2910053111765609_uu.shtml
>> [_] Anonymous 11/03/14(Mon)04:53 No.2585783
>>2585780
https://www.virustotal.com/file/eb3433c370193d25c0597a5c306f56ea66fc069bcb6f821e045b
da5a44200cdb/analysis/1415005280/
Though according to the code it seems to be some shitty sitespammer. if you read what the trojan
names refer to it's apperantly some blackhole rootkit
>> [_] Anonymous 11/03/14(Mon)04:58 No.2585789
>>2585783
so does this mean I should go into full panic mode
>> [_] Anonymous 11/03/14(Mon)05:00 No.2585790
>>2585789
Anon, I already AM in full panic mode. I don't understand why you wouldn't be.
Im going to try various scans, alternatively i'll just format again. But I really don't feel like
formatting again.
>> [_] Anonymous 11/03/14(Mon)05:05 No.2585794
Hehe, woops. Sorry about that guys
>> [_] Anonymous 11/03/14(Mon)05:12 No.2585796
>>2585790
Because Avast blocked it for me.
>> [_] Anonymous 11/03/14(Mon)05:14 No.2585798
>>2585790
Man, I don't know how to reformat. I didn't actually press the button though, so I'll just run a
scan and assume I'm safe.
[spoiler]I hope I'm safe ;_;[/spoiler]
>> [_] Anonymous 11/03/14(Mon)05:14 No.2585799
>>2585796
That's what I find so strange. I have ESET myself and that one didnt pick it up at all. Yet I can
find it back in the ESET database. It's a two year old piece of malware apperantly. Odds are that
it won't work anymore. I still recommend you to atleast scan your system.
>> [_] Anonymous 11/03/14(Mon)05:15 No.2585801
>>2585798
Google it, it's easy but timeconsuming. Reinstalling everything is a pain.
>> [_] Anonymous 11/03/14(Mon)05:21 No.2585805
Currently in safe mode hopefully everything is clean.
>> [_] Anonymous 11/03/14(Mon)05:22 No.2585806
world the time has come to
PUSH DA BUTTOn
>> [_] Anonymous 11/03/14(Mon)05:23 No.2585809
I pressed the button and it opened up a whole bunch of tabs so I just closed my whole browser
(chrome). I didn't even let them load, just saw the multiple tabs and went straight for the
close. Upon reopening there was only one link in my history. I ran a full scan with AVG and
nothing showed up.
I can just shut down now and go to bed now, right?
>> [_] Anonymous 11/03/14(Mon)05:25 No.2585810
>>2585809
Idk man IDK!!
holds back panic mode*
>> [_] Anonymous 11/03/14(Mon)05:25 No.2585811
>>2585809
shut down
wait 5-10 minutes
turn on
check to see if everything is alright
you should be able to notice if something is fucking with your computer, if it isn't you should
be fine.
>> [_] Anonymous 11/03/14(Mon)05:26 No.2585812
Wondering can my router get infected???
>> [_] Anonymous 11/03/14(Mon)05:26 No.2585813
>>2585801
I'm on win8 and apparently I have an option called Refresh your PC? Is that the same thing? I
don't have a way to backup my shit and I kinda want to keep it.
>> [_] Anonymous 11/03/14(Mon)05:26 No.2585814
You guys are overreacting.
The url it directs you to is a joke originating from a finnish 4chan-style imageboard Ylilauta.
You can see the end of the url, 609_uu which means that the article tells you about a handicapped
young man who has a band, and was rejected from a bar because the bouncer thought he was drunk.
Instead of being drunk, the boy Kalle was just handicapped.
And all this flash does is open up a million popups to that article.
>> [_] Hot2Trotsky 11/03/14(Mon)05:27 No.2585815
>...wonders why no one reports the file...
>> [_] Anonymous 11/03/14(Mon)05:28 No.2585816
>>2585814
I guess I can rest easy now.
Thanks anon.
>> [_] Anonymous 11/03/14(Mon)05:28 No.2585818
>>2585809
>>2585805
So general update. I've been looking more into what the trojan exactly is.
The bad news:
It is part of the blackhole family of trojans, and is bassicly an exploit that allows the hacker
in question to download more malware to your computer (read: rootkits/keyloggers etc) Said
exploit will work with java, adobe etc.
The good news:
It dates back from 2012, with the latest update I could find being from 2013. That said, this
piece of malware will apperantly only work with very old versions of java. So you SHOULD be fine.
however. I can't gaurantee shit here, this is just based on what im finding.
>>2585814
There is malware embedded with this SWF. See:
>>2585783
>> [_] Anonymous 11/03/14(Mon)05:31 No.2585821
>>2585813
No, if you want to properly format you would have to backup and everything. Alternatively you
could just reinstall and have all your old files being stored in a "windows.old" map.
To format you simply need a windows ISO on either a USB or a DVD. Either change the boot options
so the disc/usb starts first, and follow the instructions. or insert that CD while windows is
running normally and then reinstall (creates that map) but this might not be foulproof.
>> [_] Anonymous 11/03/14(Mon)05:38 No.2585825
I just did a full scan with the latest malwarebytes, everything is clean.
So, it's like >>2585818 said, the flash is an old file and the malware will not work with new
Java.
>> [_] Anonymous 11/03/14(Mon)05:40 No.2585826
>>2585818
>>2585825
>don't even have java installed
phew
>> [_] Anonymous 11/03/14(Mon)05:43 No.2585828
Yeah, seems pretty harmless. Clicked on this a few days ago when it was posted, ran a scan both
times and came back with nothing. Haven't had any problems since.
>> [_] Anonymous 11/03/14(Mon)05:52 No.2585836
Well i can sleep better.but still gonna run some deep.scans tomorrow.
Bringingout the heavy hitters muahaha.
First time in years im actually afraid that i might be infected.
Might aswell change all my passwords on my laptop while i wait
>> [_] Anonymous 11/03/14(Mon)06:00 No.2585843
literally nothing happens if you just alt f4 as soon as soon as you see a window open
>> [_] Anonymous 11/03/14(Mon)06:00 No.2585846
Kinda confused right now, there is no button and that virus total link of LCG has a radically
different file size...?
>> [_] Anonymous 11/03/14(Mon)06:10 No.2585850
shitstorm over, nothing happens unless you're retarded and haven't updated anything in 2 years
>> [_] Anonymous 11/03/14(Mon)06:50 No.2585870
Im on Macbook, does that mean im fine?
>> [_] Anonymous 11/03/14(Mon)06:51 No.2585871
I've had old Java installed but i deinstalled it now.
Only clicked the flash shortly and because there was nothing i closed the tab, running
malwarebytes now
am i safe?
>> [_] Anonymous 11/03/14(Mon)07:08 No.2585876
>>2585871
you're fine, do you really expect fucking swf viruses to do much?
>> [_] Anonymous 11/03/14(Mon)07:11 No.2585877
>>2585876
thanks and not really but you'll never know
>> [_] Anonymous 11/03/14(Mon)07:14 No.2585878
>>2585870
dunno man, i'm on one too and nothing seems different here, i just closed the tabs as soon as
they opened, didn't even let it load.
i'll do a quick scan but i think it's fine, as the other anon said it's a .swf malware and old at
that, it isn't or shouldn't be anything too serious or dangerous.
>> [_] Anonymous 11/03/14(Mon)07:14 No.2585879
>>2585870
same here, what's the story? Also, fuck whoever posted that shit.
>> [_] Anonymous 11/03/14(Mon)07:28 No.2585884
>>2585818
Oookay.. Update 55 (2014) Java
you said you can't gaurantee it.. but i hope im safe D:
>> [_] Non-Anonymous 11/03/14(Mon)07:30 No.2585887
>>2585806
chemical brothers. nice.
>> [_] Anonymous 11/03/14(Mon)08:49 No.2585929
>>2585812
*snigger*
No.
>>2585818
Thanks for saving me the trouble.
>> [_] Anonymous 11/03/14(Mon)08:53 No.2585930
i clicked on it but didn't click the button, but it's good to hear that i'm safe. i figured the
worst i'd have to worry about is a screamer or somethin, so. time to start checking replies first
