Two points to make :
1 – if you have mcs+ you can now see posts as they’re submitted to the queue. they’ll be the ones with the red border around them, when I get around to adding a red border around them.
2 – I’m totally not trying to hack you, or have bad stuff happen to your computer. I’ve done like a million scans of the site and every single one of them comes up clean, so I have no clue wtf google is smoking. I’ve requested that they remove their heads from their asses and clear the site from the supposed infection of internet AIDs.
3 – if you need to contact me for any reason whatsoever, please look for a link named “FAQ” and learn how to read. Also, your puns all suck.
will out Punishment be a phony casemodes?
who got the mcs+ for posting screen shots of pop ups? Also NK’s Iron Sky post has a red boarder around the middle one, so it must be a future post.
a few people. literally everyone that posted anything.
Don’t think so…
I’ve posted an image or two. I have the MCS+ logo to the right of my comments, but no actual MCS+.
you deserve it,
not being able to see MCs+ that is
I think my UID alone warrants MCS+
where the fuck are the red box borders dammit
I hope I don’t have internet AIDS, I slept with a Dell PowerEdge back in 2008 and it’s RAID didn’t look clean.
1. Apparently not the MCS 1%, 99%, whatever, but since we talking about “teh dreaded moderation queue” – my post is chilling for some time in there. Any ETA ?
2. Yesterday Ghostery reported 7, or something like that, tracking things. Today “only” 5.
find it in mcs+
if it’s been added to the queue, it’ll be there. if it’s waiting, it’ll be there, but with a bloody border.
Like I said – apparently not the part of “chosen few” with mcs+.
you have the mcs+ logo, you should be able to see the MCS+ content…is this not that case?
if so, 🙁
I’ve got the logo, but no MCS+.
I got what you are calling “Internet AIDS” from the NSFW site on several occasions after turning off ad-block for whatever reason. It must have been a 0-day flash rootkit, or NAV truly is shit, because it was running each time and saw it, but couldn’t stop the infection. I had to re-clone my machine each time because it was so persistent. I quit coming here for a while after each infection because I was so pissed off. So, FYI, it DID happen.
If by NAV you mean Norton then you might be on to something there.
So, for us noobs, how did you “see” the rootkit running? If NAV or whatever antivirus is not working to stop it, how would one go about figuring out if one is infected?
I always look at my processes and see what’s running, etc. NAV told me it was infected but couldn’t clean the system. Even safe-mode didn’t allow me to clean it. I even mounted the disk in under Ubuntu, and the Alternate Streamed EXE STILL kept getting reloaded in a new random location with a random name. Scanning it with 3 different AV scanners failed to detect it. One thing it kept doing was killing any process that scanned all running processes or start-up items and set their permissions to null. Also, any program that edited the registry was killed in the same manner. Really, any sysadmin tool was killed the same way. Again, it always required a reclone.
So, it was called “Alternate Streamed”? I’m just not sure what I should be looking for. When I look at the running processes, I see many running and most I recognize (but what is to stop a virus from naming itself something like “Google Process Manager” or something equally benign sounding?) Not all of them though are familiar sounding. By NAV, do you mean Norton Anti Virus?
Yes, NAV=Norton AV. Yes, I know it sucks, but it’s free from work and I combine it with good computing habits. Alternate streams are hard to explain. On NTFS it a way to store data about data… or Meta-data… hard to explain, but it can be used for nefarious purposes. en.wikipedia.org/wiki/Alternate_data_stream So, as you can see, a good thing turned bad. Although I work in IT, I can’t advise you on what’s normal for your system. It would take volumes to explain and it would change radically as soon as you became more knowledgeable and changed your habits.
Check out this example of a simple ADS.
Yea, between my post and your reply I did some poking around and found this: www.shortinfosec.net/2009/12/tutorial-alternate-data-streams.html , which explained enough for me. I’m familiar with resource forks, so it wasn’t too alien a concept. If NAV finds it I suspect that Avast will too (what I have running, and now doing a deep scan), even if it cannot clean it. Just unsure if it is running or not. I don’t have a lot of processes running, and the few I did not recognize were supposed to be there when I googled the name. So, it seems I should be able to at least identify if I have it or not. And I have a Ghost image of my entire machine from after my most recent reinstall from scratch. So… should be good. Thanks for the info.
I also noted that on that tutorial about ADS it mentions that a number of carriers ignore the ADS data, such as Zip files and FAT32 drives. Could that be a possible insight on how to clean it for you?
Ack.. no link? I’m an idiot. No, if AV are ignoring the ADS, they’ll never be able to clean it up after the infection.
AVAST
+ FIREFOX
+ NOSCRIPT
ADBLOCK PLUS
CAPSLOCK
Capslock is optional, and totally unnecessary. The rest are important.
WILL DESTROY YOU. I AM BIGFOOTS CROTCH, YOU LOOK LIKE BIGFOOTS CROTCH. I AM YOUR KING YOU WILL BOW TO ME. THE KING HAS SPOKEN. TIME TO POOP IN YOURE MOUTH THEN YOU WILL WALK AROUND ALL DAY HOLDING THE POOP IN YOURE MOUTH AND THEN YOU WILL SPIT IT INTO ANOTHER RANDOM PERSON MOUTH TO SWALLOW YUM YUM, THIS MAKES HAPPY INDIAN TIOLET HAPPY. I WILL DESTROY YOU!!! YAHOO MADONNA STOP IT STOP WHAT YOU ARE DOING IM FAMOUS IM WOOPIE GOLDBURG. I AM WOOPIE GOLDBURG!!!GET AWAY IM SPIDERMAN. I THROW FECES AT YOUR FACE BUT I LIKE TO PLAY ROUGH GAMES. YOU WILL POOP MASHED POTATOES EAT THE MASHED POTATOE POOP EAT IT NOW. NO I HAVE A BOOGER COLLECTION AT THEE ND OF MY BED, I WAIT TILL THEY ARE HARD THEN I EAT THEM. WAKE UP!! POOP COMES FROM YOUR MOUTH. PUTTING ON SOCKS HELLO HELLO THANKS FOR THE POOP BY THAT I DIE. NO YOUR FACE IS WHAT I HAVE GONE SHIT ON.I SHIT ON CLOUDS. DICK AND HENRY ARE BACK NOW GO THROW CANTALOPE AT YOUR NEIGHBOURS WHILE SCREAMING IM GOING TO EAT YOUR YUMMY POOP. THE KING HAS SPOKEN YOU WILL BOW TO ME AND SUFFER IM FAMOUS TO BASTE A TURKY WITH GASOLINE
For a second I thought you said
“if you need to contact me for any reason whatsoever, please look for a link named “FAG”
lmao!!!
I WILL DESTROY YOU. I AM BIGFOOTS CROTCH, YOU LOOK LIKE BIGFOOTS CROTCH. I AM YOUR KING YOU WILL BOW TO ME. THE KING HAS SPOKEN. TIME TO POOP IN YOURE MOUTH THEN YOU WILL WALK AROUND ALL DAY HOLDING THE POOP IN YOURE MOUTH AND THEN YOU WILL SPIT IT INTO ANOTHER RANDOM PERSON MOUTH TO SWALLOW YUM YUM, THIS MAKES HAPPY INDIAN TIOLET HAPPY. I WILL DESTROY YOU!!! YAHOO MADONNA STOP IT STOP WHAT YOU ARE DOING IM FAMOUS IM WOOPIE GOLDBURG. I AM WOOPIE GOLDBURG!!!GET AWAY IM SPIDERMAN. I THROW FECES AT YOUR FACE BUT I LIKE TO PLAY ROUGH GAMES. YOU WILL POOP MASHED POTATOES EAT THE MASHED POTATOE POOP EAT IT NOW. NO I HAVE A BOOGER COLLECTION AT THEE ND OF MY BED, I WAIT TILL THEY ARE HARD THEN I EAT THEM. WAKE UP!! POOP COMES FROM YOUR MOUTH. PUTTING ON SOCKS HELLO HELLO THANKS FOR THE POOP BY THAT I DIE. NO YOUR FACE IS WHAT I HAVE GONE SHIT ON.I SHIT ON CLOUDS. DICK AND HENRY ARE BACK NOW GO THROW CANTALOPE AT YOUR NEIGHBOURS WHILE SCREAMING IM GOING TO EAT YOUR YUMMY POOP. THE KING HAS SPOKEN YOU WILL BOW TO ME AND SUFFER IM FAMOUS TO BASTE A TURKY WITH GASOLINE
Looks like the infection notice is not about MCS itself, but from someone that is serving ads on MCS.
safebrowsing.clients.google.com/safebrowsing/diagnostic?site=http%3A%2F%2Fnsfw.myconfinedspace.com%2F&client=googlechrome&hl=en-US
And the culprit itself:
www.google.com/safebrowsing/diagnostic?site=hupmarketing.net/
but I’m not seeing that domain anywhere in the source code of the nsfw section. there’s only two ad providers though, adbrite and juicyads
adbrite is oneof the suspicous sites mentioned, so that’s probably a good place to start
I AM THE KING!!! I WILL DESTROY YOU, YOU WILL BOW TO ME
WILL DESTROY YOU. I AM BIGFOOTS CROTCH, YOU LOOK LIKE BIGFOOTS CROTCH. I AM YOUR KING YOU WILL BOW TO ME. THE KING HAS SPOKEN. TIME TO POOP IN YOURE MOUTH THEN YOU WILL WALK AROUND ALL DAY HOLDING THE POOP IN YOURE MOUTH AND THEN YOU WILL SPIT IT INTO ANOTHER RANDOM PERSON MOUTH TO SWALLOW YUM YUM, THIS MAKES HAPPY INDIAN TIOLET HAPPY. I WILL DESTROY YOU!!! YAHOO MADONNA STOP IT STOP WHAT YOU ARE DOING IM FAMOUS IM WOOPIE GOLDBURG. I AM WOOPIE GOLDBURG!!!GET AWAY IM SPIDERMAN. I THROW FECES AT YOUR FACE BUT I LIKE TO PLAY ROUGH GAMES. YOU WILL POOP MASHED POTATOES EAT THE MASHED POTATOE POOP EAT IT NOW. NO I HAVE A BOOGER COLLECTION AT THEE ND OF MY BED, I WAIT TILL THEY ARE HARD THEN I EAT THEM. WAKE UP!! POOP COMES FROM YOUR MOUTH. PUTTING ON SOCKS HELLO HELLO THANKS FOR THE POOP BY THAT I DIE. NO YOUR FACE IS WHAT I HAVE GONE SHIT ON.I SHIT ON CLOUDS. DICK AND HENRY ARE BACK NOW GO THROW CANTALOPE AT YOUR NEIGHBOURS WHILE SCREAMING IM GOING TO EAT YOUR YUMMY POOP. THE KING HAS SPOKEN YOU WILL BOW TO ME AND SUFFER IM FAMOUS TO BASTE A TURKY WITH GASOLINE WILL DESTROY YOU. I AM BIGFOOTS CROTCH, YOU LOOK LIKE BIGFOOTS CROTCH. I AM YOUR KING YOU WILL BOW TO ME. THE KING HAS SPOKEN. TIME TO POOP IN YOURE MOUTH THEN YOU WILL WALK AROUND ALL DAY HOLDING THE POOP IN YOURE MOUTH AND THEN YOU WILL SPIT IT INTO ANOTHER RANDOM PERSON MOUTH TO SWALLOW YUM YUM, THIS MAKES HAPPY INDIAN TIOLET HAPPY. I WILL DESTROY YOU!!! YAHOO MADONNA STOP IT STOP WHAT YOU ARE DOING IM FAMOUS IM WOOPIE GOLDBURG. I AM WOOPIE GOLDBURG!!!GET AWAY IM SPIDERMAN. I THROW FECES AT YOUR FACE BUT I LIKE TO PLAY ROUGH GAMES. YOU WILL POOP MASHED POTATOES EAT THE MASHED POTATOE POOP EAT IT NOW. NO I HAVE A BOOGER COLLECTION AT THEE ND OF MY BED, I WAIT TILL THEY ARE HARD THEN I EAT THEM. WAKE UP!! POOP COMES FROM YOUR MOUTH. PUTTING ON SOCKS HELLO HELLO THANKS FOR THE POOP BY THAT I DIE. NO YOUR FACE IS WHAT I HAVE GONE SHIT ON.I SHIT ON CLOUDS. DICK AND HENRY ARE BACK NOW GO THROW CANTALOPE AT YOUR NEIGHBOURS WHILE SCREAMING IM GOING TO EAT YOUR YUMMY POOP. THE KING HAS SPOKEN YOU WILL BOW TO ME AND SUFFER IM FAMOUS TO BASTE A TURKY WITH GASOLINE WILL DESTROY YOU. I AM BIGFOOTS CROTCH, YOU LOOK LIKE BIGFOOTS CROTCH. I AM YOUR KING YOU WILL BOW TO ME. THE KING HAS SPOKEN. TIME TO POOP IN YOURE MOUTH THEN YOU WILL WALK AROUND ALL DAY HOLDING THE POOP IN YOURE MOUTH AND THEN YOU WILL SPIT IT INTO ANOTHER RANDOM PERSON MOUTH TO SWALLOW YUM YUM, THIS MAKES HAPPY INDIAN TIOLET HAPPY. I WILL DESTROY YOU!!! YAHOO MADONNA STOP IT STOP WHAT YOU ARE DOING IM FAMOUS IM WOOPIE GOLDBURG. I AM WOOPIE GOLDBURG!!!GET AWAY IM SPIDERMAN. I THROW FECES AT YOUR FACE BUT I LIKE TO PLAY ROUGH GAMES. YOU WILL POOP MASHED POTATOES EAT THE MASHED POTATOE POOP EAT IT NOW. NO I HAVE A BOOGER COLLECTION AT THEE ND OF MY BED, I WAIT TILL THEY ARE HARD THEN I EAT THEM. WAKE UP!! POOP COMES FROM YOUR MOUTH. PUTTING ON SOCKS HELLO HELLO THANKS FOR THE POOP BY THAT I DIE. NO YOUR FACE IS WHAT I HAVE GONE SHIT ON.I SHIT ON CLOUDS. DICK AND HENRY ARE BACK NOW GO THROW CANTALOPE AT YOUR NEIGHBOURS WHILE SCREAMING IM GOING TO EAT YOUR YUMMY POOP. THE KING HAS SPOKEN YOU WILL BOW TO ME AND SUFFER IM FAMOUS TO BASTE A TURKY WITH GASOLINE. IM FAMOUS
Got twenty pics waiting in the mod queue, lurch.
And although I’ve tried to purchase MCS Plus, I’ve been rebuffed several times, as your system doesn’t seem to like credit cards. Is it better to use PayPal?
paypal IS credit cards. don’t need an account with paypal to use it
FREE MONEZ COOL
(and domo arigato on the queue action)
Mail to webmaster bounced, message on facebook got no response nor did any other contact methods so maybe someone else can get the message through or maybe nobody cares. Whatever. nsfw.myconfinedspace.com has been flagged by Google for a couple of weeks now as having malware and it pops up a warning on every visit. Just letting someone know.
are you retarded or something?
I guess so
FUCK YOU IM FAMOUS
So, do I take it I now have to pay for access to MCS+ (and other features)? And yes, I am retarded. I would like to be able to carry on using and appreciating MCS. HEEEEEEELP.
I just tried posting something but can’t see my submission, just two pages starting with some caterpillars on carpets. No red outlines. WTF is going on?
you’re commenting on a three year old update post, it’s pretty incorrect now. you’ll want to visit the most recent one: www.myconfinedspace.com/2015/06/25/another-advertiser-bites-the-dust/