Wow This Is DISTURBING

Having issues with your magicJack? Post here, and we'll try to help you out!

Moderators: Pilot, Bill Smith

Post Reply
User avatar
Jacksondale
MagicJack Expert
Posts: 84
Joined: Tue Jan 22, 2008 11:02 pm

Wow This Is DISTURBING

Post by Jacksondale »

Magicjack is apparently trying to infect my computer with a virus!!! I rebooted my computer earlier because it got really sluggish and left it at login for a while. When I came in and logged on my antivirus software (I use EZ Antivirus from CA Associates) popped up with a virus detection. The file name is "Win32/Loodok!generic.2". Located in Documents and Settings\My user account\locals~1 and it shows as a system dll. A Google search shows no info on this particular file. I rebooted the MJ and this alert continues to pop up. This is more than disturbing this is downright sinister. Any thought from the community on this and has anyone had this happen besides me?

Edit:
I still have the alert up on my desktop. It was showing 6 instances of this file. Double clicking the MJ icon added 10 more and now I am showing 16 files. Also a popup came up saying that there was an error starting my MJ plese call yada yada yada. Hit the retry button same result.
Last edited by Jacksondale on Mon Apr 21, 2008 11:12 pm, edited 1 time in total.
AlaninKY
Dan isn't smart enough to hire me
Posts: 270
Joined: Mon Nov 12, 2007 3:59 pm
Location: Louisville, KY USA
Contact:

Post by AlaninKY »

I use the free version of AVG and none of the 3 computers I have with a magicJack has a virus. I loaded a magicJack on a computer my Father has at his home yesterday; he also uses the free version of AVG and has no virus.
LikeMagic
Dan Should Pay Me
Posts: 613
Joined: Tue Jan 01, 2008 9:11 pm
Location: LikeMagic Pacific NW

Post by LikeMagic »

Why do you think it is caused/infected by MJ?
User avatar
Jacksondale
MagicJack Expert
Posts: 84
Joined: Tue Jan 22, 2008 11:02 pm

Post by Jacksondale »

Because the alert comes up when I try to start the MJ software. And whatever it is seems to not be letting me start my MJ anymore. My antivirus has deleted all instances of the file but if I retry to start then they opo right back up again. Sure its possible to get a virus elsewhere but one that only shows when I try to start the magicjack. Hard for my imagination to get right with a virus that is only showing up when MJ is called up. Once again Google shows no info on this. I'm going to try a sysem restore and see if that changes any thing. I'll report back Oh and an earlier popup said something about "upgrade failed" I didn't look at it very close.
gooney
Dan isn't smart enough to hire me
Posts: 382
Joined: Sat Feb 09, 2008 5:38 pm
Location: Salt Lake City, Utah

Re: Wow This Is DISTURBING

Post by gooney »

Jacksondale wrote:Magicjack is apparently trying to infect my computer with a virus!!! I rebooted my computer earlier because it got really sluggish and left it at login for a while. When I came in and logged on my antivirus software (I use EZ Antivirus from CA Associates) popped up with a virus detection. The file name is "Win32/Loodok!generic.2". Located in Documents and Settings\My user account\locals~1 and it shows as a system dll. A Google search shows no info on this particular file. I rebooted the MJ and this alert continues to pop up. This is more than disturbing this is downright sinister. Any thought from the community on this and has anyone had this happen besides me?

Edit:
I still have the alert up on my desktop. It was showing 6 instances of this file. Double clicking the MJ icon added 10 more and now I am showing 16 files. Also a popup came up saying that there was an error starting my MJ plese call yada yada yada. Hit the retry button same result.
When you keep your pc connected to the internet 24/7 for MJ, make sure you have a good firewall/antivirus program running... It's not MJ's fault you visit sites youre not supposed to visit muahahahaha, oh and try not to be a pirate.
Chat with me LIVE!!! :arrow:
Image
gooney - Salt lake City, UT (801)
Don't mind me grammar cuzz it sukks!!
User avatar
Jacksondale
MagicJack Expert
Posts: 84
Joined: Tue Jan 22, 2008 11:02 pm

Post by Jacksondale »

Ok just ran a system restore and upon reboot same thing. 5 files, I'm gonna try running msconfig and stopping MJ from auto starting and see if they pop back up on reboot. Like I say this wouldn't be the first time that some innocent file was reported to be a virus and actually wasn't. Oh and my computer has basically run 24/7 for years, long before a had a MJ and its not like I've never had a virus or gotten some spyware on it but this is acting really strange.
User avatar
Jacksondale
MagicJack Expert
Posts: 84
Joined: Tue Jan 22, 2008 11:02 pm

Post by Jacksondale »

Ok I disabled the MJ service from starting and rebooted. Nothing from my antivirus. Whatever it is virus or no the MJ is causing this. Man I hate to have to tech chat as that will probably be a waste of time. Think I'll email Dan and see if he can shed some light on whats happening here.
User avatar
Jacksondale
MagicJack Expert
Posts: 84
Joined: Tue Jan 22, 2008 11:02 pm

Post by Jacksondale »

Ok I restarted the service and immediately got the popups so I unplugged my MJ and rebooted then plugged it back up. Alert popups again with same alert but this time the startup box came up. So then I got the infamous " warning you must plug MJ into USB port" message. Ran Magic Fix and the "if you're not fixed click here update. Startup box says lucky you upgrading now but once again the "plug into usb port thing. Right now I have a Jack that worked fine for several months and in the course of a day suddenly won't work at all. I may try disabling my antivirus and starting again and hope that these files are just being wrongly indentified. Thats taking a chance but I guess I've reinstalled Windows B4 LOL
User avatar
Jacksondale
MagicJack Expert
Posts: 84
Joined: Tue Jan 22, 2008 11:02 pm

Post by Jacksondale »

OK last post on this subject. Apparently these files are not actually a virus but seem to be required for the MJ to start. I have snoozed my antivirus for 10 minutes and restarted the Jack. Viola, MJ starts just fine. I just made a call and it worked just fine. So whatever they are they don't sit well with my antivirus software (which by the way I get free from my ISP (Road Runner) and AVG's free antivirus isn't an option as I had that on my laptop but it took forever for my Laptop to boot because of the AVG software needing to update upon every startup. I swear MJ is going to keep updating me right back to Yahoo voiceas this constant state of upheaval with the service is starting to wear thin. Now as I'm typing this I checked my av software which I snoozed for 10 minutes.It has come back online and the MJ is still working. So go figure. Sorry for the constant post on this but hopefully it may help if someone runs into the same problem.
MagicPhoneMan
MagicJack Contributor
Posts: 51
Joined: Tue Apr 15, 2008 8:05 pm
Location: San Diego

Post by MagicPhoneMan »

false alarms from anti-virus is not a good sign. You need to get a better program. I use Nod32 and never been infected
gooney
Dan isn't smart enough to hire me
Posts: 382
Joined: Sat Feb 09, 2008 5:38 pm
Location: Salt Lake City, Utah

Post by gooney »

He has trojan(s) i bet, it is no false alram... Go here :arrow: http://housecall.trendmicro.com/ and full scan your pc with MJ unplugged... print screen the result and post it.
Chat with me LIVE!!! :arrow:
Image
gooney - Salt lake City, UT (801)
Don't mind me grammar cuzz it sukks!!
User avatar
Jacksondale
MagicJack Expert
Posts: 84
Joined: Tue Jan 22, 2008 11:02 pm

Post by Jacksondale »

Nothing to do with trojans Gooney, I just have an older version of the antivirus software that Roadrunner offers. If I did a screen capture with Camstudio you would see that this is Magicjack specific. After I got the jack to respond at all it didn't recognize my having it plugged into my USB ports, an error I have never had before. When I disconnected the MJ and snoozed my AV software the MJ booted with no problem and is working fine now. Even after the AV software woke back up there were no alerts anymore and the MJ worked as always. These files were similar to some that I found in Windows concerning the MJ (similar filenames.). Also these files were listed as TMP files that are no longer there after the Jack boots (which is why I get no popups after the jack has booted, they are removed). I could probably download a different AV and remove my present AV and have no detection problems at all. I hope to be upgrading to a newer version of this same software soon as it has been a good AV solution for me and its free so that I REALLY like... :D However it wasn't pleasant to see those files pop up as a virus on my screen. Seems to have been the result of an upgrade I got yesterday.
gooney
Dan isn't smart enough to hire me
Posts: 382
Joined: Sat Feb 09, 2008 5:38 pm
Location: Salt Lake City, Utah

Post by gooney »

Jacksondale wrote:Nothing to do with trojans Gooney, I just have an older version of the antivirus software that Roadrunner offers. If I did a screen capture with Camstudio you would see that this is Magicjack specific. After I got the jack to respond at all it didn't recognize my having it plugged into my USB ports, an error I have never had before. When I disconnected the MJ and snoozed my AV software the MJ booted with no problem and is working fine now. Even after the AV software woke back up there were no alerts anymore and the MJ worked as always. These files were similar to some that I found in Windows concerning the MJ (similar filenames.). Also these files were listed as TMP files that are no longer there after the Jack boots (which is why I get no popups after the jack has booted, they are removed). I could probably download a different AV and remove my present AV and have no detection problems at all. I hope to be upgrading to a newer version of this same software soon as it has been a good AV solution for me and its free so that I REALLY like... :D However it wasn't pleasant to see those files pop up as a virus on my screen. Seems to have been the result of an upgrade I got yesterday.
Are you on vista or xp? http://housecall.trendmicro.com/ and print screen the result (hit "Print Screen" key on your keyboard, open paint and paste) save file on your pc and upload to a free image hosting like imageshack.com so i can see... you dont have to if you dont want to... just trying to help. The free trendmicro online scan will detect many viruses, malware, etc that many other AV's dont detect.
Chat with me LIVE!!! :arrow:
Image
gooney - Salt lake City, UT (801)
Don't mind me grammar cuzz it sukks!!
User avatar
Jacksondale
MagicJack Expert
Posts: 84
Joined: Tue Jan 22, 2008 11:02 pm

Post by Jacksondale »

Not That I mind running a scan but I ran one today (just on my c: drive (I have 4 and scanning takes forever). Found a few java exploits in my Java control panel cache but nothing having anything to do with with this particular virus. Found this forum post Dynamoo's Blog which states that this is a "false positive" detected by AV software from CA Associates.
AMDZen
MagicJack Newbie
Posts: 4
Joined: Wed Apr 23, 2008 10:07 am

Post by AMDZen »

I'm sure its because you're AV software is giving you false positives. Try some real software, as someone else suggested NOD32 I concur with that. If you want a free AV, AVG or something is at least better then what you're using
Post Reply