Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

A Popup Has Arrived


  • Please log in to reply
7 replies to this topic

#1 Turi

Turi

  • Members
  • 316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:NIreland
  • Local time:01:54 AM

Posted 14 May 2008 - 12:53 PM

I just went to use my mum's PC whilst she's busy, and I saw that she was using FF (halleluiah)

However there was a popup.. which I thought was odd for ol' FF

This is what was in the add bar: URL REMOVED TO PREVENT INFECTING OTHERS

And it says "If automated download does't start please Click Here or select "Run" or "Open" when promted."
And thats all, with a pic of a globe and some coloured arrows coming out of it.

I'm really not sure. When I try to close it, I am asked if I want to navigate away from the page. It tells me a Virus Signature has been detected which could cause erratic behaviour etc. And says click "ok" to continue "Cancel" to go back, which takes me back to the page. As soon as I try to exit FF asks me if I want to save the file AtnvrsInstall.exe which is from URL REMOVED TO PREVENT INFECTING OTHERS

I don't want to install but it doesn't want to let me navigate away.
I'm worried that if Mum had seen it should would have just clicked to save it :/ I thought FF prevented such things?

Welp

Edited by usasma, 14 May 2008 - 07:27 PM.
Removed link(s)

Crazyness comes to those who wait

BC AdBot (Login to Remove)

 


#2 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:12:54 AM

Posted 14 May 2008 - 02:02 PM

I'm goona ask ;to start with to see if she is properly 'protected'

what is her antivirus protection and other protection programs and when were they all last fully updated and run on full system scans?plus the windows version on there?

#3 raw

raw

    Bleeping Hacker


  • Members
  • 2,577 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Texas
  • Local time:07:54 PM

Posted 14 May 2008 - 07:35 PM

Press CTRL-ALT-DEL to bring up Task Manager.
Kill the Firefox process.
Restart Firefox - Choose New Session
Firefox menu bar click Tools - Options
Click Privacy tab - Clear Private data
Do virus scan.

rawsig.png

 rawcreations.net          @raw_creations


Current systems: WHAT OS, BackTrack-raw, PCLinuxOS, Peppermint OS 6, Kali Linux

and a custom Linux From Scratch server hosting a bunch of top secret stuff.


#4 Turi

Turi
  • Topic Starter

  • Members
  • 316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:NIreland
  • Local time:01:54 AM

Posted 16 May 2008 - 01:54 PM

I've done a few virus scans and its picked up one or two nasties.
Windows XP SP1, Norton Anti-V
Crazyness comes to those who wait

#5 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:12:54 AM

Posted 16 May 2008 - 02:16 PM

can you please run an on line scan with trend

http://housecall.trendmicro.com/uk/
the first attemp may take a wee while while it loads the program and runs the scan

let us know what nasties it finds

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,323 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:54 PM

Posted 16 May 2008 - 02:41 PM

Moving this to the Am I Infected forum.
Why haven't you installed SP2?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 Turi

Turi
  • Topic Starter

  • Members
  • 316 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:NIreland
  • Local time:01:54 AM

Posted 17 May 2008 - 12:10 PM

I think it is (:thumbsup: I was rushing when I was typing, I was never any good at typing numbers!
I shall do that next time I am on her PC. Thankyou.
So... how should I prevent this happening in the future to my muzzer in the future, my Bleepinglings?
Crazyness comes to those who wait

#8 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:08:54 PM

Posted 17 May 2008 - 02:10 PM

Until your mum learns proper computer security it would be better to create another admin account and change her's to limited user

that's the safest way to protect her from herself, the best AV in the world doesn't do any good when the admin controlling the computer says go ahead and install that malware

install the noscript addon for firefox and teach her how to use it
Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users