"E Set"


Book Reviewer
I've just had this programme pop up after I went to a new ARRSE page. It informed me that I had a Critical Virus and tried to start downloading an .exe file. Windows 7 asked if I wanted to carry on an d - being a suspicious person - clicked no.

Avast never picked anything up, so I'm running a full scan now. Has anyone ever heard of this, and is it a problem with ARRSE?
Yeah, I've just done a full system restore. It knackered my Google Crome. Farking thing. It initiated through ARRSE. Maybe the Admins could query and look into this.
I thought it was some other site I may have been on. Happened to me a couple of times too when clicking on a link on the Arrse top 50. Using Google chrome.


Book Reviewer
its accessing a flaw in the site you're visiting rather than any flaws in your machine per se. legs, you're absolutely right doing what you did - any website comes up with that, give it the big FO.
unless anyone knows different, afaik you can be reasonably confident (as far as you can be regarding these things) if you have Windows Firewall and avast running and fully updated. NEVER click on any installs like you say. another tip after the problems I and a few other users had a while back with the 'antivir pro' exploit is keep an alternative browser (firefox in my case) installed - so if you do get one of these that constantly hijacks your browser, you can get on the net and download the killer program for it and then the malware removers for it.


I too have just got this...also using Google Chrome, full virus and malware scans in operation.


Book Reviewer
Not good knowing the ARRSE is the means by which my computer is being attacked!

Yes - I'm also a Chrome user!
I use chrome and haven't had this happen.

Similar experience earlier today on ARRSE ... stopped download ... terminated Internet session and ran McAfee and Malwarebytes ... nothing found . Next time I will try and capture a screen print .
I had it happen on Firefox. A predominantly white page with graphics on it. I just thought it was an advert so closed the tab and carried on assuming that my Norton 360 would have picked any bad up.
I used to have a free programme, think it was Swedish, that scanned for adware and spyware, does anyone recognise it and know what it was called? Might install it again.


Didn't spot this thread, but I had this yesterday and on Thursday I think. Big red screen trapped by IOBit 360 because Avast, MSE, Malware Bytes didn't get it. Spent last night restoring the PC , thought it was me, mind you might have been me.

Bad CO

It sounds to me like you've all been infected with the Fake/Rogue E-Set Antivirus 2011 malware or a variant.

Scareware like E-Set Antivirus 2011 are commonly installed when users are redirected to fake online scanner pages or fake ‘video codec required’ pages distributed through out the Web by cyber criminals using blackhat SEO techniques, Spam and Malicious flash advertisements.

Whilst it is possible that this happened via ARRSE being compromised I think it unlikely. Certainly Google and McAffee give us a clean bill of health although I know these aren't 100% guaranteed. It is worth making the point that just because a pop up occurred whilst your were browsing on ARRSE or opening a new window doesn't mean that it was caused by ARRSE. My assessment is that your computer is already infected and this is the scareware trying to persuade you to install more stuff .....

Bad CO

If people are having this problem though, pse continue to report with as much detail as possible. If there is a problem then we need to track it down asap!!


War Hero
If people are having this problem though, pse continue to report with as much detail as possible. If there is a problem then we need to track it down asap!!

As requested:

Had this last night (Sat) and as I do if this ever happens I shut the machine down to kill any chance of anything being downloaded. Just came back on this moring to see if ii had tried to bite anyone else.......

By the way it may not be something on ARRSE but this is the second time in the last week both while visiting here.

I just had it on chrome via the last 50 page. I actually have a genuine (semi genuine that is) version of NOD eset so it's a bit annoying haha. I came up with something trying to download something but it was doing it rather fast so didn't have time to scrutinize it and closed the window.

First thing was white page and popup box in the middle saying my machine was infected and the only option was cross the box off or click ok, then it went to the download page. It looked something similar the the "control panel" box. I'm on shitty vista.

Nothing has come up on my internet threat thing. Perhaps it's a prank made to look like a real virus?


Good CO / Bad Co, This has happened again to me on a different computer,running a different security package,than the one I was in touch with you about. Again by clicking on a forum link to go to a different page.

Good CO

This obviously concerns me but, every check I have done shows us as clean. I have rerun all the tests from the Lizamoon post:

AVG: 30-day site report for:arrse.co.uk Currently Safe

McAfee: arrse.co.uk We tested this site and didn't find any significant problems.

Norton: arrse.co.uk
Norton Safe Web found no issues with this site.
•Computer Threats:
•Identity Threats:
•Annoyance factors:

Google: What is the current listing status for ARRSE - The Army Rumour Service (ARRSE)
This site is not currently listed as suspicious.

LinkScanner, specifically on the BAS URL: LinkScanner® Online did not find any exploits.

The thing that makes this surprising is that despite everyone running an antivirus program, up to date I assume, that no reports of ARRSE causing this have made it to Norton, McAfee, AVG etc. Any incidents of malware like this found on ARRSE should be reported back to the parent system and the tests above would show at least one incident of malware on ARRSE.

The other oddity is that Bad CO, Sapiency and I have spent even more time than normal on ARRSE this last week because of server problems. We all use different systems. My Laptop is Linux and has no anti-virus protection, my desktop is Windows Vista with PrevX, my phone uses Dolphin. Bad CO uses one Windows 7 machine and one Vista. Sapiency uses at least one XP machine and one Linux. None of us have had anything at all.

The reports in this thread are from regular ARRSE users who spend a lot of time on the site and I would guess that there is a good chance that you will be on the site when something that has infected your machines causes problems.

Have any of you run a full virus scan with an up-to-date scanner? Any results?


Book Reviewer
I ran a full scan straight after the initial 'oddness', nothing found.
I had issues having visited Arrse with Avast flagging a malicious URL ( I think). This happened 3 or 4 times when returning to Arrse. It was the night that Arrse was experiencing issues with Last 50 etc. I ran anti-virus but nothing found. It hasn't happened since

New Posts

Latest Threads