media tickets?

Discussion in 'SpywareBlaster & Other Forum' started by shortstuff, Jun 22, 2004.

Thread Status:
Not open for further replies.
  1. shortstuff

    shortstuff Registered Member

    Joined:
    Jun 13, 2004
    Posts:
    6
    Location:
    Canada
    Hello. I came here because I figured someone here might know the answer. Does anyone know anything about this new hijacker called media tickets? I went to www dot theringpost dot com yesterday and clicked on a column called the low blow, and bang! A security warning came up and told me that, to view content on this site, I must install media tickets. Yeah, right, whatever. I said no, and a IE dialog came up screaming that I must install it to view content on the site and all there was was an ok button. I clicked it, and deja vu, there's the security warning back again. I just closed the window at this point, eeewww. But I have spyware blaster. Are they planning on protecting against this little goody. Is it new? I search for it on google, and I can only find one reference to it on a net integration forum, and it refers to messenger popups. This must be brand new!

    Hope someone can shed some light on this mystery. As far as I can tell, I was not hijacked by media tickets, thank god.
     
    Last edited by a moderator: Jun 22, 2004
  2. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Hey shortstuff,

    I have removed the direct in-line capability of the link you posted. There is indeed a .js file that will install MediaTickets ActiveX component as part of the html code and due to the malware nature of MediaTickets and it's possible affiliation to PurityScan adware....it's best not to have more victims than we already have.
     
  3. shortstuff

    shortstuff Registered Member

    Joined:
    Jun 13, 2004
    Posts:
    6
    Location:
    Canada
    Hi. I apologize. I guess the thing didn't come up when I went to the main page, so I didn't realize that it was right in the code. Note to self: write steaming email to webmaster.
     
  4. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    No need to appologize....We simply like to err on the side of caution when the possibility of further infection exists.

    BTW....have you scanned with any of the Adware\Spyware programs in case it snuck something onto your PC ?
     
  5. pamhanna

    pamhanna Guest

    You guys are way over my head. We're getting a website h4ck3rz.freehomepage.com/pwned.html that pops up about every minute and it asks for a media tickets install and viewer authorization using a mediatickets installer.cab. There's a dos window that pops up about 30 seconds before the website.
    I've run Ad aware Adware remover that found and removed some 70 files but it didn't slow this puppy down.
    Any help would be apprieciated
     
  6. shortstuff

    shortstuff Registered Member

    Joined:
    Jun 13, 2004
    Posts:
    6
    Location:
    Canada
    Go pick up a copy of hijack this. Run it and save the log. Can guests post hijack this logs? I can't remember. If guests can't send the log, register and send it in. That way we can team up to help you. Out of curiosity, what does the dos window say?
     
  7. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Nope ;)

    Sound advice - post over on our "adware..." etc. forum - not over here.

    regards.

    paul
     
  8. gbhome

    gbhome Guest

    Hey,

    My browser keeps getting hijacked by this site:
    hxxp: // www. unixshellz .info / antitrust

    If my browser is idol for more than 30 secs I get redirected to this site and if my browser is closed it'll open to this page. Have run Spybot and Spyblaster and put the site in the Restricted Zone but still can't stop the little bugger. I know Spyblaster has some protection for Mediatickets, but it's not stopping this! Help!
     
    Last edited by a moderator: Jul 9, 2004
  9. snapdragin

    snapdragin Administrator

    Joined:
    Feb 16, 2002
    Posts:
    8,415
    Location:
    Southern Ont., Canada
  10. Have you tried the uninstaller from the very same site that distributes the "MediaticketsInstaller.cab?" (mediatickets.net)
    Try this: http://www.mt-download.com/mt-uninstaller.exe and see if it does the trick. If it does work, please email me at Strider7Sfga@Yahoo.com so I can post this possible sollution to other boards.
    Best of Luck to you in removing this damned browser hijacker.
     
  11. Veteran

    Veteran Guest

    That MT-uninstall seems to have worked for me. thanks
     
Thread Status:
Not open for further replies.