forums Computer Tutorials Computer Help and Spyware Removal File DatabaseUninstall Database Windows Startup Programs Database Computer Resources Computer Glossary Forums Computer Help and Spyware Removal
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

> 

When posting your problem, do not run and post a ComboFix logs. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

 
Reply to this topicStart new topic
> A Popup Has Arrived, I'm not sure if its real...well I'm sure its not but I don'
Turi
post May 14 2008, 12:53 PM
Post #1


Forum Regular
***

Group: Members
Posts: 316
Joined: 19-March 07
From: NIreland
Member No.: 118,496



I just went to use my mum's PC whilst she's busy, and I saw that she was using FF (halleluiah)

However there was a popup.. which I thought was odd for ol' FF

This is what was in the add bar: URL REMOVED TO PREVENT INFECTING OTHERS

And it says "If automated download does't start please Click Here or select "Run" or "Open" when promted."
And thats all, with a pic of a globe and some coloured arrows coming out of it.

I'm really not sure. When I try to close it, I am asked if I want to navigate away from the page. It tells me a Virus Signature has been detected which could cause erratic behaviour etc. And says click "ok" to continue "Cancel" to go back, which takes me back to the page. As soon as I try to exit FF asks me if I want to save the file AtnvrsInstall.exe which is from URL REMOVED TO PREVENT INFECTING OTHERS

I don't want to install but it doesn't want to let me navigate away.
I'm worried that if Mum had seen it should would have just clicked to save it :/ I thought FF prevented such things?

Welp

This post has been edited by usasma: May 14 2008, 07:27 PM
Reason for edit: Removed link(s)


--------------------
Crazyness comes to those who wait
Go to the top of the page
 
+Quote Post
ruby1
post May 14 2008, 02:02 PM
Post #2


a forum member
******

Group: Members
Posts: 1,616
Joined: 27-August 07
Member No.: 153,171



I'm goona ask ;to start with to see if she is properly 'protected'

what is her antivirus protection and other protection programs and when were they all last fully updated and run on full system scans?plus the windows version on there?
Go to the top of the page
 
+Quote Post
raw
post May 14 2008, 07:35 PM
Post #3


Bleeping Hacker
******

Group: BC Advisor
Posts: 1,728
Joined: 14-April 04
From: Texas
Member No.: 151



Press CTRL-ALT-DEL to bring up Task Manager.
Kill the Firefox process.
Restart Firefox - Choose New Session
Firefox menu bar click Tools - Options
Click Privacy tab - Clear Private data
Do virus scan.


--------------------
Go to the top of the page
 
+Quote Post
Turi
post May 16 2008, 01:54 PM
Post #4


Forum Regular
***

Group: Members
Posts: 316
Joined: 19-March 07
From: NIreland
Member No.: 118,496



I've done a few virus scans and its picked up one or two nasties.
Windows XP SP1, Norton Anti-V


--------------------
Crazyness comes to those who wait
Go to the top of the page
 
+Quote Post
ruby1
post May 16 2008, 02:16 PM
Post #5


a forum member
******

Group: Members
Posts: 1,616
Joined: 27-August 07
Member No.: 153,171



can you please run an on line scan with trend

http://housecall.trendmicro.com/uk/
the first attemp may take a wee while while it loads the program and runs the scan

let us know what nasties it finds
Go to the top of the page
 
+Quote Post
boopme
post May 16 2008, 02:41 PM
Post #6


To INSANITY and BEYOND !!
******

Group: Moderator
Posts: 7,016
Joined: 10-September 04
From: NJ USA
Member No.: 2,608



Moving this to the Am I Infected forum.
Why haven't you installed SP2?


--------------------
Can you spare some PC cycles to help FIND A CURE .. BC FOLDING TEAM Click me /info..
ThoughtVent a goodplace to discuss.<<>>>Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Go to the top of the page
 
+Quote Post
Turi
post May 17 2008, 12:10 PM
Post #7


Forum Regular
***

Group: Members
Posts: 316
Joined: 19-March 07
From: NIreland
Member No.: 118,496



I think it is (smile.gif I was rushing when I was typing, I was never any good at typing numbers!
I shall do that next time I am on her PC. Thankyou.
So... how should I prevent this happening in the future to my muzzer in the future, my Bleepinglings?


--------------------
Crazyness comes to those who wait
Go to the top of the page
 
+Quote Post
DaChew
post May 17 2008, 02:10 PM
Post #8


Visiting Alien
******

Group: Members
Posts: 3,942
Joined: 20-May 07
From: millenium falcon
Member No.: 131,963



Until your mum learns proper computer security it would be better to create another admin account and change her's to limited user

that's the safest way to protect her from herself, the best AV in the world doesn't do any good when the admin controlling the computer says go ahead and install that malware

install the noscript addon for firefox and teach her how to use it



--------------------
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 5th July 2008 - 05:56 PM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Malware Removal Guides

© 2003-2008 All Rights Reserved Bleeping Computer LLC.