Home Forums Hunting & Shooting Hunter's Campfire Bug Took Over My Computer

I searched for Amazon last night, and the computer went haywire. The screen was filled with this. A loud buzzer was going off.
I couldn't make it go away. I figured this was a scam.
I did call the number, of course some Indian guy answered, couldn't understand what he was saying. I hung up.

The computer was frozen up. It took me a half hour, I kept turning the computer on and off. Finally a few of my old settings were displayed. I kept punching up my old web sites, and finally got back online. All this crap then went away.

I guess the Hadjis hacked in to where if you did a google search for Amazon they would take your computer over.

Run malware bytes it put something on your drive.

Malware for sure. Lucky it wasn't ransomware.

Your best plan would be to go back to a setpoint made days before this happened, then run several passes of malware removal tools (both from MSoft and third party like Malwarebytes). Once you're clean, make another setpoint. Do NOT do a system backup before you get all this done or you'll simply be saving the malware for future use!

What Rocky said. Perform a System Restore to a point prior to the bug.

Best bet is to not click anything, just pull the plug.
Then plug it in and reboot.
Do not let it reopen anything

This.

Or buy some real system protection, like ESET.

That's a common attack, it takes over your browser, not your computer. It fills the screen with nonsense and pops up a window. That window won't let you close your browser until you close the pop up window. When you do that it pops up another window faster than you can close your browser - endless loop. It's all done with a java script.

Easiest way out of it is to open Task Manager, go to Processes and kill the browser process, And yes you can restart your computer without loosing anything except your browser session. Google how to open Task Manager for your version of Windows. For 7 easiest way is press Ctrl-Alt-Delete and start Task Manager come up as an option. You can also right click on an empty spot on the task bar and a little menu will pop up with the option. (pressing alt-tab will get you to another window where you can reach task bar, if you have another window open)

They tell me that if you call the number the guy gives you instructions to make your computer remotely accessible. Then he reaps all your data and you're totally screwed. Could also install something like a keystroke reader that collects everything you type and phone it home. So you don't want to do that.

NOT recommended. You can corrupt hard drive files that way. The OS should repair itself and it USUALLY does but you lose data. CTRL-Alt-Del for a safe shutdown or restart.

Flogging is too good for the scum that does this crap.

Do OSs still have safe mode?

Exactly, except that recent versions of Windows use Ctrl-Shift-Esc to open Task Manager. Kill the browser, then restart it and be prepared to kill it again with the upper-right 'X' if your browser restores the previous session if it shut down abnormally.

After that, you can run Malwarebytes, restart the machine, or anything that melts your butter, but killing that browser session ends your problem.

Your first mistake was to call the number on the screen, NEVER call any number on the screen or in emails unless you absolutely certain who you are calling.

Windoze still has safe mode.

Goggling the phone number shown has it in Lago Lago, Nigeria.

Simon could be a millionaire!

That malware takes over my phone every so often. Drives me batshit! Only way I found to stop it is shut down the phone. Usually pops up when I am on gunbroker and bump a popup.

I get the same thing but it's only when I'm on 24hrCF. I have Malwarebytes and it doesn't find anything.

Never had much luck with Malwarebytes, or for that matter, Norton, Avast, McCafee, etc. Largely trouble free computing came with Linux.

24hr CampFire has been my worst spot for this sort of thing coming up of the sites I frequent. Some times of the day are worse than others, Sorry to say this looks like a very organized effort driven from foreign soil. If there is a way for us to retaliate and shut this down I am all ears. As things stand I have been frequenting The fire a lot less due ti tis chit. Unless I am mistaken the driving force is to one degree or another achieving their goals. If i was to point fingers Peoples Republic of china & Russian Organizations fall high on my list of probable originators. GRR