Google Images propagating nasty virus?

[Rick in PA]

Does anyone know if Google Images is being used to propagate the nasty malware / virus Security Shield?

Two days ago my son clicked on an image in the Google Images page and POOF "Security Shield Anti Virus" is on our machine. It was a nasty one. Told me our machine was all infected. Jammed Task Manager. Wouldn't let me run programs, telling me they were all infected. It kept trying to sell me a "subscription" to their "anti virus" application. Very, very nasty.

I re-imaged the disk to a week previous with back-up equipment (which I normally keep disconnected from the system). All seemed well.

About a day later, my wife was on the machine and clicked a totally different image on Google Images (to her credit, at the time, she didn't realize the earlier problem started at Google Images). POOF what appears to be "Security Shield" starts all over. She tried to close the window, no luck. So she quick shut down the computer.

Since then the computer seems to be operating normally. Is it possible shutting down the computer right away aborted the malware download? I hope so, I don't want to have to re-re-image the disk.

Anybody have any thoughts on this?

 

[mareakin]

It's not Google Image,

it's the site *below* Google Image

in fact, if anything: Google Image actually has a mechanism that PROTECTS you from the underlyying website that host the pic

 

[Chris Meutsch]

I've had that happen to me, not through Google though. Download Malwarebytes software, and if needed, run it in Safe Mode in Windows. It will clean you up.

 

[pbm]

I had something similar happen last year and had to have a professional fix my computer.

I do believe that most of the viruses, trojans, worms etc...originate with the companies selling the software to fix them....

 

[Deltona_Dave]

Combo Fix from Bleeping Computer will get rid of it.

Dave

 

[river_rat]

You know I got that same security warning virus thing from clicking on the spec page link at the Cam2 motor oil website a few weeks ago. It's everywhere.

I just did the "restore to an earlier back-up point" deal to get rid of it.

 

[wavinwayne]

I picked up something nasty from Google a couple weeks ago while searching for Christmas wallpaper pics. It was a trojan, IIRC. MSE alerted me to the problem and cleaned it for me.

 

[LoneRanger]

If we could get the Death Penalty for the authors/perpetrators of these extortion style viruses, maybe the frequency of them in the wild might decrease...

 

[Rick in PA]

Originally Posted By: wavinwayne
I picked up something nasty from Google a couple weeks ago while searching for Christmas wallpaper pics. It was a trojan, IIRC. MSE alerted me to the problem and cleaned it for me.


The nasty thing about this "Security Shield" is that it slipped under my Verizon (Mcaffee) anti-virus software. I even did a scan before I re-imaged the disk and the anti-virus software didn't find a thing.

I was surprised that Google didn't vet the sites offering images more carefully.

 

[BobFout]

Most of you using Internet Explorer?

 

[river_rat]

^^^ I am, yeah.

 

[Rick in PA]

Originally Posted By: BobFout
Most of you using Internet Explorer?


That was the web browser. I have Firefox and Opera, I could try clicking on the image in them... but I don't think I'm going to.

 

[wavinwayne]

Originally Posted By: BobFout
Most of you using Internet Explorer?


I was using Chrome.

 

[Rick in PA]

Just a quick wrap-up. The computer is still operating properly, showing no sign of infection, after a day. I honestly think the quick shut-down aborted a malicious download. I suspect what my wife saw was an effort "to knock the user off balance", paralyzing them in fear, so that the computer would be allowed to complete the malicious download.

I showed everyone in the family how to turn the DSL modem off and instructed them to turn the modem off at the first sign of virus-like problems. This seems to be the best way to assure a complete and instantaneous disconnection from the internet. Then they are to turn the computer off, and call dad. We'll see how it goes.

 

[crinkles]

ESET samrt security 4 has blocked two attempted malware forced downloads when looking at images in search. also happended with Bing. these are the two first blocks in about a year that we've had. strange!