Virus from FFcars

[bil1024]

I tried logging into FFcars this morning and got a virus!!!!!!! Can not get it out for nothing, great!:(

[AC Bill]

It's not a virus, it's part of an advertising software that's acting up.

http://www.ffcars.com/forums/17-factory-five-roadsters/285889-virus-site.html

[bil1024]

Whatever it is it locked up my computer and screen is black, my IT could not fix it now they have to come and do a scan

[edwardr30]

Whatever it is it locked up my computer and screen is black, my IT could not fix it now they have to come and do a scan

i got he same problem it was a fake anitvirus and this is my rkill log:
This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Ran as HP User on 02/04/2012 at 14:47:30.


Services Stopped:


Processes terminated by Rkill or while it was running:


C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
C:\ProgramData\lBNGWEcXoY.exe
C:\ProgramData\UdoVVGDYtXaSIh.exe
C:\Windows\system32\DllHost.exe
c:\Users\HP User\Desktop\desktop\rkill.com
C:\Users\HP User\AppData\Local\Temp\1860.tmp\pev.rkexe


Rkill completed on 02/04/2012 at 14:49:24.

the last line was the virus i opened a cmd prompt and renamed the pev.rkexe and then i had to do a restore point and got it to run.
i was worryed for a while my Malwarebyes would find it and delete it but it was back on a reboot. i run the RKill app and went after it and got my computer back usable.
just fyi what worked for me...

[first time builder]

TTT Moderator should make this a sticky !!!!

[frankeeski]

TTT Moderator should make this a sticky !!!!

Why sticky it here? It's the FFcars site that had/has the issue. That site continues to spiral downward, the new owners of the site have no interest in it other than collecting advertizing $$$$$$. It's really sad.