Welcome Guest ( Log In | Click here to Register a free account now! )
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.When posting your problem, do not run and post a ComboFix logs. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.
To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.
![]() ![]() |
May 14 2008, 12:53 PM
Post
#1
|
|
![]() Forum Regular ![]() ![]() ![]() Group: Members Posts: 316 Joined: 19-March 07 From: NIreland Member No.: 118,496 |
However there was a popup.. which I thought was odd for ol' FF This is what was in the add bar: URL REMOVED TO PREVENT INFECTING OTHERS And it says "If automated download does't start please Click Here or select "Run" or "Open" when promted." And thats all, with a pic of a globe and some coloured arrows coming out of it. I'm really not sure. When I try to close it, I am asked if I want to navigate away from the page. It tells me a Virus Signature has been detected which could cause erratic behaviour etc. And says click "ok" to continue "Cancel" to go back, which takes me back to the page. As soon as I try to exit FF asks me if I want to save the file AtnvrsInstall.exe which is from URL REMOVED TO PREVENT INFECTING OTHERS I don't want to install but it doesn't want to let me navigate away. I'm worried that if Mum had seen it should would have just clicked to save it :/ I thought FF prevented such things? Welp This post has been edited by usasma: May 14 2008, 07:27 PM
Reason for edit: Removed link(s)
-------------------- Crazyness comes to those who wait
|
|
|
|
May 14 2008, 02:02 PM
Post
#2
|
|
|
a forum member ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 1,616 Joined: 27-August 07 Member No.: 153,171 |
I'm goona ask ;to start with to see if she is properly 'protected'
what is her antivirus protection and other protection programs and when were they all last fully updated and run on full system scans?plus the windows version on there? |
|
|
|
May 14 2008, 07:35 PM
Post
#3
|
|
![]() Bleeping Hacker ![]() ![]() ![]() ![]() ![]() ![]() Group: BC Advisor Posts: 1,728 Joined: 14-April 04 From: Texas Member No.: 151 |
Press CTRL-ALT-DEL to bring up Task Manager.
Kill the Firefox process. Restart Firefox - Choose New Session Firefox menu bar click Tools - Options Click Privacy tab - Clear Private data Do virus scan. -------------------- |
|
|
|
May 16 2008, 01:54 PM
Post
#4
|
|
![]() Forum Regular ![]() ![]() ![]() Group: Members Posts: 316 Joined: 19-March 07 From: NIreland Member No.: 118,496 |
I've done a few virus scans and its picked up one or two nasties.
Windows XP SP1, Norton Anti-V -------------------- Crazyness comes to those who wait
|
|
|
|
May 16 2008, 02:16 PM
Post
#5
|
|
|
a forum member ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 1,616 Joined: 27-August 07 Member No.: 153,171 |
can you please run an on line scan with trend
http://housecall.trendmicro.com/uk/ the first attemp may take a wee while while it loads the program and runs the scan let us know what nasties it finds |
|
|
|
May 16 2008, 02:41 PM
Post
#6
|
|
![]() To INSANITY and BEYOND !! ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderator Posts: 7,016 Joined: 10-September 04 From: NJ USA Member No.: 2,608 |
Moving this to the Am I Infected forum.
Why haven't you installed SP2? -------------------- Can you spare some PC cycles to help FIND A CURE .. BC FOLDING TEAM Click me /info..
ThoughtVent a goodplace to discuss.<<>>>Staying Updated Calendar of Updates. For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear.... |
|
|
|
May 17 2008, 12:10 PM
Post
#7
|
|
![]() Forum Regular ![]() ![]() ![]() Group: Members Posts: 316 Joined: 19-March 07 From: NIreland Member No.: 118,496 |
I think it is (
I shall do that next time I am on her PC. Thankyou. So... how should I prevent this happening in the future to my muzzer in the future, my Bleepinglings? -------------------- Crazyness comes to those who wait
|
|
|
|
May 17 2008, 02:10 PM
Post
#8
|
|
![]() Visiting Alien ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 3,942 Joined: 20-May 07 From: millenium falcon Member No.: 131,963 |
Until your mum learns proper computer security it would be better to create another admin account and change her's to limited user
that's the safest way to protect her from herself, the best AV in the world doesn't do any good when the admin controlling the computer says go ahead and install that malware install the noscript addon for firefox and teach her how to use it -------------------- |
|
|
|
![]() ![]() |
| Lo-Fi Version | Time is now: 5th July 2008 - 05:56 PM |