JAVA popup : VIRUS

[Ronnel]

Please note that some users may get a JAVA popup screen when opening the site. This is due to a possible infection.
We are checking all files and will remove any problem.
Do not install anything.

[Cane]

Well I'm f**ked then

[Marcell]

Aw shit, I believe i clicked yes once by mistake but my antivirus detected a trojan and deleted a file. Good to know, I thought it's a false-treat

[Morphine]

I believe I accepted it and derp, no antivirus installed.
If you have also clicked it, immediately check your process list and terminate s.exe. It is one of the suspected threats of the keylogger dropped on the forum.
Run a full system scan too if you haven't already.

[Chief J. Schappell]

ARFD forums don't seem to be infected, either do ADF or UA. I believe this is isolated to RON's FTP server.

[Morphine]

Here is what happens when you delete the virus from it's location.
The antivirus moves it to a chest since the virus fights back as much as it can.

[Bert]

ARFD forums don't seem to be infected, either do ADF or UA. I believe this is isolated to RON's FTP server.

The forum was infected

[James Bowling]

Please note that some users may get a JAVA popup screen when opening the site. This is due to a possible infection.
We are checking all files and will remove any problem.
Do not install anything.

I dnt install but I get the pop up.

[Chief J. Schappell]

ARFD forums don't seem to be infected, either do ADF or UA. I believe this is isolated to RON's FTP server.

The forum was infected

No it wasn't. Something is being exploited. We are looking into it. I already decrypted the JavaScript code and we have a website URL already. This hacker just got out-hacked. More to come soon.

Oh ya, warn your friends!

[Pepper]

I get the pop ups on main site only but am start enough to know not to click anything popping up on the internet

[Dolfa]

So..I just got avast anti-virus since its the best one, informed by friends and no threats were found. However I did run that pop up.

[JunkMan]

MSE rocks bud disinfected the virus and made him shut up even before poping up i love ya MSE!

[Salmonella]

ARFD forums don't seem to be infected, either do ADF or UA. I believe this is isolated to RON's FTP server.

True. usaa.argonathrpg also stayed up and clean. It runs on caion's VPN

[Julio.]

I just denied it access when I got it yesterday, as I never clicked anything

Does it go under the name 'S.exe.?

[KhornateMonkey]

Thank f**k for McAfee. Detected it as a Trojan and deleted it for me 

[Ben]

AVG is shit. End of.

I could have done with this topic before allowing it once...downloaded MalwareBytes, so it stopped it spreading further, chucking it into quarantine!
s.exe may be the one to look out for in Task Manager.  If it is running, find out where the file location is, remember it, and make sure your anti-virus gets rid of the spreading. Reboot your computer, and if it is no longer in Task Manager, delete s.exe manually by going into the specified location. Do not open it.

I did that...no more virus

[Allison]

Oddly enough I never got a popup or anything. 

[Bert]

I just denied it access when I got it yesterday, as I never clicked anything

Does it go under the name 'S.exe.?

yes , that's what i got

[Ben]

I just denied it access when I got it yesterday, as I never clicked anything

Does it go under the name 'S.exe.?

yes , that's what i got

High five to the other innocent fool, who thought it was actually Java 

[[Rstar]Vince]

Java plugin needs my permission to run.. good thing I seen this first. Doubt I would've installed it anyway as I was wary why it was popping up in the first place.