Question

A témacsoportot lezárták és archiválták. Tegyen fel új kérdést, ha segítségre van szüksége.

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

6 válasz
1 embernek van ilyen problémája
5 megtekintés
Utolsó üzenet ettől: FredMcD

10 éve

2014. 11. 18. 0:52

I did a search for "Translate" I clicked on this URL http://mytranslatetool[.]com/translate/lp/ublp2.php?t202id=110878&c1=translation&c2=translate&c3=ublp2&c4=ff&t202kw=&ubn=ff&kw=&aid=

And inadvertently clicked install. Nothing happened and now FF is crashing a lot!!!!

A popup displayed indicating that my FF is out of date. (realizing now it isn't) Is this a virus or malware?

Here's the HTML:

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Please Update Firefox</title>
<script language="JavaScript" type="text/javascript"> cbr202=Math.random()*10000000000000000;document.write('<scr'+'ipt language="JavaScript" src="http://net-secure[.]info/trk/static/landing.php?lpip=67602&202cb='+cbr202+'" type="text/javascript"></scr' + 'ipt>'); </script>
<link href='http://fonts.googleapis[.]com/css?family=Open+Sans' rel='stylesheet' type='text/css'>
<script src="http://ajax.googleapis[.]com/ajax/libs/jqueryui/1.8/jquery-ui.min.js" type="text/javascript"></script>
<script src="https://ajax.googleapis[.]com/ajax/libs/jquery/1.7.2/jquery.min.js" type="text/javascript"></script>
 
<script type="text/javascript">
        $(document).ready(function () {
                       var count = 1;
            var countdown = setInterval(function() {
               count--;
                if (count <= 0) {
                                      clearInterval(countdown);
                                      $('#fade, #fade2').css({'filter' : 'alpha(opacity=80)'}).fadeIn();
                                      $('#pop').fadeIn();
                                      $('#pop').animate({ 'bottom' : "0px"}, 400);
                                      return false;
                               }
                       }, 3000);
                      
        });
</script>
<script type="text/javascript">
var currentTime = new Date()
var month = currentTime.getMonth() + 1
var day = currentTime.getDate()
var year = currentTime.getFullYear()
var hour = currentTime.getHours()
var minute = currentTime.getMinutes()
 
function formatAMPM(date) {
  var hours = date.getHours();
  var minutes = date.getMinutes();
  var ampm = hours >= 12 ? 'pm' : 'am';
  hours = hours % 12;
  hours = hours ? hours : 12; // the hour '0' should be '12'
  minutes = minutes < 10 ? '0'+minutes : minutes;
  var strTime = hours + ':' + minutes + ' ' + ampm;
  return strTime;
}
function hah() {
        window.location = "http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__";
}
</script>
<style type="text/css">
html, body{
        margin:0;
        background:url(../img/gg_translate.png) no-repeat left top;
}
#fade{
        background: url(../img/overlay.png) repeat;
        width:100%;
        height:100%;
        position:fixed;
        top:0;
        left:0;
        z-index:99;
        display:none;
}
#fade2{
        background: rgba(0,0,0,.8);
        width:100%;
        height:100%;
        position:fixed;
        top:0;
        left:0;
        z-index:100;
        display:none;
}
#pop{
        width: 500px;
        height: 230px;
        position: absolute;
        right: 0;
        bottom: -230px;
        z-index: 10005;
        background: #272b39;
        border: 2px solid #57607f;
        display: none;
        cursor: pointer;
}
.bar{
        width: 500px;
        height: 50px;
        margin: 0 auto;
        background: #57607f;
}
.bartext{
        width: 480px;
        height: 30px;
        float: left;
        margin-left: 10px;
        margin-top: 10px;
        font-family: 'Open Sans';
        color: #fff;
        font-size: 23px;
}
.poptext{
        width: 480px;
        height: 35px;
        float: left;
        margin-left: 10px;
        margin-top: 10px;
        font-family: 'Open Sans';
        color: #fff;
        font-size: 15px;
}
#middle {
        width:300px;
        height: 100px;
        float: left;
        color: #fff;
        font-family: 'Open Sans';
        margin-top: 15px;
        margin-left: 15px;
}
 
#browser {
        margin-top: 15px;
        padding-left: 15px;
        width: 60px;
        float: left;
}
 
#stats {
        margin-left: 15px;
        margin-top: 7px;
        padding-left: 50px;
}
 
 
#first {
        font-family: Arial, Helvetica, sans-serif;
        font-weight: bold;
        font-size: 12px;
        padding-left: 15px;
        padding-top: 5px;
}
 
#second {
        font-family: Arial, Helvetica, sans-serif;
        font-size: 14px;
        padding-left: 15px;
        padding-top: 3px;
}
 
#third {
        font-family: Arial, Helvetica, sans-serif;
        font-size: 11px;
        padding-left: 15px;
}
#button{
        width: 95px;
        height: 28px;
        float: right;
        margin-right: 80px;
        margin-top: 40px;
}
</style>
</head>
 
<body>
 
<div id="fade"></div>
<div id="fade2"></div>
<div id="pop" onClick="hah()">
        <div class="bar">
               <div class="bartext">
               Your Software May Be Out Of Date     
               </div>
        </div>
        <div class="poptext">
        Software Updater ensures your Browser is the Latest Version.<br />Please Download Software Updater (Recommended)
        </div>
        <div id="middle">
               <div id="browser"><img src="../img/ub/ff_logo_ori.png" width="50" /></div>
        <div id="stats">
               <div id="first">Supported Browsers:</div>
                       <div id="second">Firefox</div>
                       <div id="third">Manufacturer: Mozilla Corp.<br />Version: 33<br />Last Checked: <script type="text/javascript">document.write(month + "/" + day + "/" + year + " "); document.write(formatAMPM(currentTime));</script><br />
                       </div>
        </div>
    </div>
    <div id="button">
    <a href="http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"><img src="../img/ub/button3.png" height="28" width="95"></a>
    </div>
</div>
</div>
</body>
</html>

I did a search for "Translate" I clicked on this URL http://mytranslatetool[.]com/translate/lp/ublp2.php?t202id=110878&c1=translation&c2=translate&c3=ublp2&c4=ff&t202kw=&ubn=ff&kw=&aid= And inadvertently clicked install. Nothing happened and now FF is crashing a lot!!!! A popup displayed indicating that my FF is out of date. (realizing now it isn't) Is this a virus or malware? Here's the HTML: <pre><nowiki><html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Please Update Firefox</title> <script language="JavaScript" type="text/javascript"> cbr202=Math.random()*10000000000000000;document.write('<scr'+'ipt language="JavaScript" src="http://net-secure[.]info/trk/static/landing.php?lpip=67602&202cb='+cbr202+'" type="text/javascript"></scr' + 'ipt>'); </script> <link href='http://fonts.googleapis[.]com/css?family=Open+Sans' rel='stylesheet' type='text/css'> <script src="http://ajax.googleapis[.]com/ajax/libs/jqueryui/1.8/jquery-ui.min.js" type="text/javascript"></script> <script src="https://ajax.googleapis[.]com/ajax/libs/jquery/1.7.2/jquery.min.js" type="text/javascript"></script> <script type="text/javascript"> $(document).ready(function () { var count = 1; var countdown = setInterval(function() { count--; if (count <= 0) { clearInterval(countdown); $('#fade, #fade2').css({'filter' : 'alpha(opacity=80)'}).fadeIn(); $('#pop').fadeIn(); $('#pop').animate({ 'bottom' : "0px"}, 400); return false; } }, 3000); }); </script> <script type="text/javascript"> var currentTime = new Date() var month = currentTime.getMonth() + 1 var day = currentTime.getDate() var year = currentTime.getFullYear() var hour = currentTime.getHours() var minute = currentTime.getMinutes() function formatAMPM(date) { var hours = date.getHours(); var minutes = date.getMinutes(); var ampm = hours >= 12 ? 'pm' : 'am'; hours = hours % 12; hours = hours ? hours : 12; // the hour '0' should be '12' minutes = minutes < 10 ? '0'+minutes : minutes; var strTime = hours + ':' + minutes + ' ' + ampm; return strTime; } function hah() { window.location = "http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"; } </script> <style type="text/css"> html, body{ margin:0; background:url(../img/gg_translate.png) no-repeat left top; } #fade{ background: url(../img/overlay.png) repeat; width:100%; height:100%; position:fixed; top:0; left:0; z-index:99; display:none; } #fade2{ background: rgba(0,0,0,.8); width:100%; height:100%; position:fixed; top:0; left:0; z-index:100; display:none; } #pop{ width: 500px; height: 230px; position: absolute; right: 0; bottom: -230px; z-index: 10005; background: #272b39; border: 2px solid #57607f; display: none; cursor: pointer; } .bar{ width: 500px; height: 50px; margin: 0 auto; background: #57607f; } .bartext{ width: 480px; height: 30px; float: left; margin-left: 10px; margin-top: 10px; font-family: 'Open Sans'; color: #fff; font-size: 23px; } .poptext{ width: 480px; height: 35px; float: left; margin-left: 10px; margin-top: 10px; font-family: 'Open Sans'; color: #fff; font-size: 15px; } #middle { width:300px; height: 100px; float: left; color: #fff; font-family: 'Open Sans'; margin-top: 15px; margin-left: 15px; } #browser { margin-top: 15px; padding-left: 15px; width: 60px; float: left; } #stats { margin-left: 15px; margin-top: 7px; padding-left: 50px; } #first { font-family: Arial, Helvetica, sans-serif; font-weight: bold; font-size: 12px; padding-left: 15px; padding-top: 5px; } #second { font-family: Arial, Helvetica, sans-serif; font-size: 14px; padding-left: 15px; padding-top: 3px; } #third { font-family: Arial, Helvetica, sans-serif; font-size: 11px; padding-left: 15px; } #button{ width: 95px; height: 28px; float: right; margin-right: 80px; margin-top: 40px; } </style> </head> <body> <div id="fade"></div> <div id="fade2"></div> <div id="pop" onClick="hah()"> <div class="bar"> <div class="bartext"> Your Software May Be Out Of Date </div> </div> <div class="poptext"> Software Updater ensures your Browser is the Latest Version.<br />Please Download Software Updater (Recommended) </div> <div id="middle"> <div id="browser"><img src="../img/ub/ff_logo_ori.png" width="50" /></div> <div id="stats"> <div id="first">Supported Browsers:</div> <div id="second">Firefox</div> <div id="third">Manufacturer: Mozilla Corp.<br />Version: 33<br />Last Checked: <script type="text/javascript">document.write(month + "/" + day + "/" + year + " "); document.write(formatAMPM(currentTime));</script><br /> </div> </div> </div> <div id="button"> <a href="http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"><img src="../img/ub/button3.png" height="28" width="95"></a> </div> </div> </div> </body> </html></nowiki></pre>

Módosította: cor-el, 2014. november 18. 23:37:05 -0800

Answer 1 · 2014-11-18 00:52:26

philipp

Moderator

2014. 11. 18. 0:55

hello bangemout, this doesn't look genuine, so you might have malware present on the system. please perform all these steps:

reset firefox (this will keep your bookmarks and passwords)
afterwards go to the firefox menu ≡ > addons > extensions and in case there are still extensions listed there, disable them.
finally run a full scan of your system with different security tools like the free version of malwarebytes and adwcleaner to make sure that adware isn't present in other places of your system as well.

Troubleshoot Firefox issues caused by malware

Answer 2 · 2014-11-18 00:52:26

James

Moderator
Top 10 Contributor

2014. 11. 18. 2:44

This was most definitely not a update prompt from Mozilla. A update is either done in Firefox or by downloading from mozilla.org and not by some random site with a long suspicious looking url.

This page is a scam in using the popularity of Firefox in trying to convince inexperienced Windows users in downloading a fake Firefox file to then get the Windows computer infected.

Answer 3 · 2014-11-18 00:52:26

FredMcD

2014. 11. 18. 8:33

Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.

You can try these free programs to scan for malware, which work with your existing antivirus software:

Microsoft Safety Scanner
MalwareBytes' Anti-Malware
Anti-Rootkit Utility - TDSSKiller
AdwCleaner (for more info, see this alternate AdwCleaner download page)
Hitman Pro
ESET Online Scanner

Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.

Further information can be found in the Troubleshoot Firefox issues caused by malware article.

Did this fix your problems? Please report back to us!

Answer 4 · 2014-11-18 00:52:26

FredMcD

2014. 11. 18. 8:34

You can sent a report to The FBI via their web site Internet Crime Complaint Center (IC3) {web link}

You can also report such a site at; Google Report Phishing Page {web link} which is the same when done while on site by going to Help > Report Web Forgery

Help us safeguard Mozilla’s trademarks by reporting misuse {web link}

Answer 5 · 2014-11-18 00:52:26

James

Moderator
Top 10 Contributor

2014. 11. 18. 17:37

I would say it is a waste of everybody's time to report cases like this to FBI. You really should just remove that part of your clipboard posting.

Answer 6 · 2014-11-18 00:52:26

FredMcD

2014. 11. 18. 23:37

Who knows, one of these could resort in something good.

Támogatás keresése

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

Összes válasz (6)

Felfedezés termékek szerint

Felfedezés témák szerint

Tallózás termék szerint

Összes fórumszál tallózása téma szerint

Kapjon segítséget ezzel kapcsolatban

Támogatás keresése

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

Összes válasz (6)