EVE General Discussion

Howdy,

I'm a fairly new player to Eve (March/April of this year) and mostly did mining and mission running until my computer was so overloaded and slowed by rootkits that I lost a faction BS with a deadspace loadout during a particularly challenging mission. I know you vets might chuckle and say "hey, that happens to me every day", but the experience was enough to make me leave Eve for quite a while. Incidentally, I was two full days trying to remove all the malware on my laptop.

I missed Eve, though, so I came back a week ago, sold a bunch of junk I'd apparently piled up and had enough to buy a Megathron and get rolling with L4 mission running again. Again, I visited sites like eve-survival.org to assist me with mission running and again, I found myself stuck with malware - more specificlaly, the Happili and Beesq redirect rootkits.

Has anyone else noticed that these sites harbor an inordinate amount of malware? I'd like to continue using sites to help me with the mission running, but not at the cost of endangering my computer and personal information (which these rootkits often harvest).

Nope been using eve survival for 3 years now, never got any malware from there, if you're using the ingame browser you shouldn't get any malware at all, it doesn't support flash because of the previous vulnerabilities of it, and afaik will not allow any nasties through as it is sandboxed (I could be wrong but that's my understanding of it), javascript and DHTML do work with the IGB but if it is sandboxed then that shouldn't open up any holes.

Pretty sure it's impossible to get a rootkit from a website, but i could be wrong.

Someone probably said the same thing about downloading a patch and suddenly your 'puter won't boot up.






:P

Persistent and or reoccurring infections usually stem from compromised sources ,

such as the mbr of your system.

use tdss killer from kapersky and awsmbr from avast to check and remove .


also these infections can come through tool bars and certain add servers on websites .

another point of infections is peer to peer downloads ,shady game utilities or mods and/or certain types of freeware that serves adds.

to aid in prevention the core internet technology on your machine should be up to date as possible

flash player 11.5

adobe reader 11

java 7.9

and internet explorer 9 or 10 (rather you use it or not )
and the latest version of your favorite browser

also recommend a full scan with comodo cleaning essentials cce 32bit or 64bit to pick out iffy software .

if you still find your self getting compromised either take your machine to a professional or do a full clean install with a mbr wipe. .

monitor the sites you go to and the programs you use . most likely it is a adserver or a shady piece of software reinfecting you .

that is is of course you are not infected with something residing in your mbr.

IGB is technically Chromium with a few bits disabled, Chrome is based on Chromium.

Suggesting you visit p0rn-themed sites is hardly an attack at all, considering that we all do it...

---

Now, moving on topic again, eve-survival is not your problem. It's basically a straight text-based website, with hardly any way to inject the required code. A lot of people here use it, if there was malware on there for such a stretch of time, we'd have heard about it... It's most likely just a coincidence.

Moving along, what could actually be the source?

• Version a, your rootkit never left. It is still hiding in your master boot record or on your Motherboard (flashable BIOS).
• Version b, you got reinfected via local storage media (usb-sticks !!!, an external hardrive, etc.)
• Version c, you got reinfected via the same web-based source again. Again, eve-survival is a VERY unlikely cause. Knowing nothing about your web-habits... its hard to make a good guess.

How did you clean your PC? Did you completely wipe your drive? Preferably reset your BIOS? Did you clean all your usb-based flash drives as well?

"Core internet technology" my ass. Those two programs are the work of the Devil. Try and live without them, if you can. Adobe Reader has pretty good alternatives (Foxit Reader for example), Flash is a bit more difficult to do without - let's just hope enough websites will switch to HTML5 in a decent timeframe.

He's lucky that only NPC's got in on the kill, shiny mods attract trouble like poo attracts flies

OP, the problem lies between your chair and your keyboard.

If you don't know how to protect your computer while surfing you need to hang it up and get a job at McDonalds.