Some info;
Cycles through shock images, attempts to send emails with ActiveX etc.
It starts out by resizing your browser to somewhere around 10% of your screen area. A mans voice then starts to shout "Hey everybody, I'm looking at gay porno!" while this is happening, your browser window starts displaying shock images while bouncing around on your screen like a jackhammer on crack, and a fuckload of email clients open, attempting to spam people, I’m guessing the people on your contact list, with the message "Join the revolution –link to nimp-"
Just to be safe, before visiting RTK forums for a while, until the fucktard stops hacking, install NoScript for Firefox, or disable Redirections, disable Javascript and block *.on.nimp.org*.
Knowledge is power..
from the CNET Security Spyware and Virus' forums
| QUOTE |
| Thought
I'd add my little bit in. Do NOT visit the site above unless you are
using elevated security measures, namely high-level internet zone
settings in internet explorer. The fragment that comes before "on" can
be anything, such as: test.on.nimp.org badsite.on.nimp.org etc.on.nimp.org and it will still activate. Add *.on.nimp.org to your blocked list and you will be all set. If you really must know what the site does, it tries to hijack your browser and violently shakes it round the screen, while displaying popups of obscene images and playing horrible sounds. I use an elevated security on my general internet zone in IE to prevent unknown exploits, or at least most, such as this nasty from bugging my computer. If you can, I'd look into that. |
tl;dr?
Basically, a trolling 4chan group called GNAA created a malicious code called Last Measure that exploits Javascript to display goatse and other sick images while fucking up your browser.
