1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

serious problem.

Discussion in 'Entertainment and Technology' started by fallendream, Jun 28, 2009.

  1. fallendream

    Full Member

    Joined:
    Jan 1, 2009
    Messages:
    715
    Likes Received:
    0
    this is the post i made on another forum (feel free to ask questions and ill try and answer):
    it has been brought to my attention that there is a growing malware site, this site takes you're clipboard and history and the clipboard and history of anyone else who has ever visited the site and plays them, it also moves the browser around, dumps viruses onto you're hard-drive and opens up javascript window e=whenever you ctrl+alt+del.

    this site is commonly described as 'a cool site' or 'my new blog' spread by omegle.com, 4chan.org and forwarded emails.

    the site itself is .on.nimp.org - two variations ive seen are stacey.on.nimp.org and img00023.on.nimp.org and as far as im aware all prefixes work.

    the origin is from the cyber-terrorists anonymous who have made this and distributed this to its full extent.

    wikipedia search anonymous, 4chan or /b/ for more info.

    do not click or type anything conataining 'on.nimp.com'

    edit: the site contains, goatse, meatspin and a few other internet chock sites.

    it also movies it around.


    how to stop:
    ctrl+alt+delete, open task manager, repeatedly close the window, it takes one click per pop-up in my exxperience i found it opens 1 popup per .25 seconds.
     
  2. Kenko

    Full Member

    Joined:
    Jan 3, 2007
    Messages:
    1,378
    Likes Received:
    0
    Location:
    Canada
    Gender:
    Male
    Gender Pronoun:
    He
    Sexual Orientation:
    Gay
    Out Status:
    Some people
    You could also terminate the browser process under the processes tab.

    Iexplore.exe for Internet explorer

    firefox.exe for Firefox

    Opera.exe for Opera.

    It's unknown whether it actually contains malicious code, or if it's just annoying.

    You can alternatively open up task manager with Ctrl+shift+esc... which is also useful in Classic login / corporate environments because you don't get the security dialog popping up.
     
  3. fallendream

    Full Member

    Joined:
    Jan 1, 2009
    Messages:
    715
    Likes Received:
    0
    task manager needs to be used closing it ALOT.
     
  4. Kenko

    Full Member

    Joined:
    Jan 3, 2007
    Messages:
    1,378
    Likes Received:
    0
    Location:
    Canada
    Gender:
    Male
    Gender Pronoun:
    He
    Sexual Orientation:
    Gay
    Out Status:
    Some people
  5. fallendream

    Full Member

    Joined:
    Jan 1, 2009
    Messages:
    715
    Likes Received:
    0
    go on task manager, close the page - usually closes when you press end task, it doesn't with this - it took me a few hundred clicks/3 mins of cliking
     
  6. Just Adam

    Full Member

    Joined:
    Mar 17, 2009
    Messages:
    4,435
    Likes Received:
    1
    Location:
    My AV room
    i get what you mean what a pain... dont click any links with nimp in it remember the name folks...NIMP
     
  7. Kenko

    Full Member

    Joined:
    Jan 3, 2007
    Messages:
    1,378
    Likes Received:
    0
    Location:
    Canada
    Gender:
    Male
    Gender Pronoun:
    He
    Sexual Orientation:
    Gay
    Out Status:
    Some people
    Task manager->Processes->iexplore.exe
    *delete* or click "end process" ends it immediately for me.

    With IE 6.

    One of the worlds worst browsers.

    Also works in an unpatched version of firefox 3.0.0.

    And neither browser spawned any additional popups.

    It really seems more of an annoyance site than anything dangerous.
     
  8. fallendream

    Full Member

    Joined:
    Jan 1, 2009
    Messages:
    715
    Likes Received:
    0
    i use IE 7 or firefox 2.7.7
     
  9. Kenko

    Full Member

    Joined:
    Jan 3, 2007
    Messages:
    1,378
    Likes Received:
    0
    Location:
    Canada
    Gender:
    Male
    Gender Pronoun:
    He
    Sexual Orientation:
    Gay
    Out Status:
    Some people
    Firefox 2.7.7 doesn't exist...

    And IE 7 would be hardier against attacks than IE6.
     
  10. kettleoffish

    Full Member

    Joined:
    Feb 20, 2009
    Messages:
    891
    Likes Received:
    0
    Location:
    Scotland
    I'll bear in mind to steer clear, although I should be safe from the malware on a Mac, you never know. And I don't want to see goatse etc again, once is enough for this lifetime.
     
  11. SAGUY84

    SAGUY84 Guest

    You could also not click the link?
     
  12. fallendream

    Full Member

    Joined:
    Jan 1, 2009
    Messages:
    715
    Likes Received:
    0
    it's firefox 2.[something] - i don't know where i got those no.s from =/

    follow just adam's advice.
     
  13. Kenko

    Full Member

    Joined:
    Jan 3, 2007
    Messages:
    1,378
    Likes Received:
    0
    Location:
    Canada
    Gender:
    Male
    Gender Pronoun:
    He
    Sexual Orientation:
    Gay
    Out Status:
    Some people
    It's annoyware not malware.

    But yes lets start going off about how wonderful the almighty Mac is...
     
  14. fallendream

    Full Member

    Joined:
    Jan 1, 2009
    Messages:
    715
    Likes Received:
    0
  15. Kenko

    Full Member

    Joined:
    Jan 3, 2007
    Messages:
    1,378
    Likes Received:
    0
    Location:
    Canada
    Gender:
    Male
    Gender Pronoun:
    He
    Sexual Orientation:
    Gay
    Out Status:
    Some people
    I'm not going to say they suck but I will point out that a recent cross-platform Java exploit was only patched on Mac OS this month, which it was patched on other platforms back in December (6 months ago), and the exploit was used at pwn2own in February.

    http://voices.washingtonpost.com/securityfix/2009/05/apple_is_slow_to_fix_java_flaw.html
    http://arstechnica.com/apple/news/2...ues-patch-for-critical-java-vulnerability.ars

    Also here's a recent load of secure Apple software:
    http://www.betanews.com/article/App...count-10-QuickTime-1-iTunes-0-Java/1243893833

    10 exploits fixed in Craptime. You know, the virus that sneaks iTunes and Safari on Windows computers.
     
  16. GhostDog

    Full Member

    Joined:
    Apr 14, 2009
    Messages:
    1,933
    Likes Received:
    1
    Location:
    DFW area, Texas
    I run FireFox with NoScript and AdBlock Plus. I usually don't have too many problems with annoying sites like that now. Mind, NoScript and Facebook don't play nicely (NoScript blocks cross-site scripting and Facebook has a lot of XSS features for some reason), and it can be annoying when you first install it (you have to tell it which sites you trust), but it stops websites running scripts without explicit permission. It may help keep your computer safe from stuff like that. Not clicking suspicious links is the way to go, yes, but sometimes they're well-disguised and shit happens anyway. So I use this stuff just in case an innocent-looking site is hiding something. =P