Question

Ova tema je arhivirana. Postavi novo pitanje ako trebaš pomoć.

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

6 odgovora
1 ima ovaj problem
5 prikaza
Posljednji odgovor od FredMcD

prije 10 godina

18. 11. 2014. 00:52

I did a search for "Translate" I clicked on this URL http://mytranslatetool[.]com/translate/lp/ublp2.php?t202id=110878&c1=translation&c2=translate&c3=ublp2&c4=ff&t202kw=&ubn=ff&kw=&aid=

And inadvertently clicked install. Nothing happened and now FF is crashing a lot!!!!

A popup displayed indicating that my FF is out of date. (realizing now it isn't) Is this a virus or malware?

Here's the HTML:

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Please Update Firefox</title>
<script language="JavaScript" type="text/javascript"> cbr202=Math.random()*10000000000000000;document.write('<scr'+'ipt language="JavaScript" src="http://net-secure[.]info/trk/static/landing.php?lpip=67602&202cb='+cbr202+'" type="text/javascript"></scr' + 'ipt>'); </script>
<link href='http://fonts.googleapis[.]com/css?family=Open+Sans' rel='stylesheet' type='text/css'>
<script src="http://ajax.googleapis[.]com/ajax/libs/jqueryui/1.8/jquery-ui.min.js" type="text/javascript"></script>
<script src="https://ajax.googleapis[.]com/ajax/libs/jquery/1.7.2/jquery.min.js" type="text/javascript"></script>
 
<script type="text/javascript">
        $(document).ready(function () {
                       var count = 1;
            var countdown = setInterval(function() {
               count--;
                if (count <= 0) {
                                      clearInterval(countdown);
                                      $('#fade, #fade2').css({'filter' : 'alpha(opacity=80)'}).fadeIn();
                                      $('#pop').fadeIn();
                                      $('#pop').animate({ 'bottom' : "0px"}, 400);
                                      return false;
                               }
                       }, 3000);
                      
        });
</script>
<script type="text/javascript">
var currentTime = new Date()
var month = currentTime.getMonth() + 1
var day = currentTime.getDate()
var year = currentTime.getFullYear()
var hour = currentTime.getHours()
var minute = currentTime.getMinutes()
 
function formatAMPM(date) {
  var hours = date.getHours();
  var minutes = date.getMinutes();
  var ampm = hours >= 12 ? 'pm' : 'am';
  hours = hours % 12;
  hours = hours ? hours : 12; // the hour '0' should be '12'
  minutes = minutes < 10 ? '0'+minutes : minutes;
  var strTime = hours + ':' + minutes + ' ' + ampm;
  return strTime;
}
function hah() {
        window.location = "http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__";
}
</script>
<style type="text/css">
html, body{
        margin:0;
        background:url(../img/gg_translate.png) no-repeat left top;
}
#fade{
        background: url(../img/overlay.png) repeat;
        width:100%;
        height:100%;
        position:fixed;
        top:0;
        left:0;
        z-index:99;
        display:none;
}
#fade2{
        background: rgba(0,0,0,.8);
        width:100%;
        height:100%;
        position:fixed;
        top:0;
        left:0;
        z-index:100;
        display:none;
}
#pop{
        width: 500px;
        height: 230px;
        position: absolute;
        right: 0;
        bottom: -230px;
        z-index: 10005;
        background: #272b39;
        border: 2px solid #57607f;
        display: none;
        cursor: pointer;
}
.bar{
        width: 500px;
        height: 50px;
        margin: 0 auto;
        background: #57607f;
}
.bartext{
        width: 480px;
        height: 30px;
        float: left;
        margin-left: 10px;
        margin-top: 10px;
        font-family: 'Open Sans';
        color: #fff;
        font-size: 23px;
}
.poptext{
        width: 480px;
        height: 35px;
        float: left;
        margin-left: 10px;
        margin-top: 10px;
        font-family: 'Open Sans';
        color: #fff;
        font-size: 15px;
}
#middle {
        width:300px;
        height: 100px;
        float: left;
        color: #fff;
        font-family: 'Open Sans';
        margin-top: 15px;
        margin-left: 15px;
}
 
#browser {
        margin-top: 15px;
        padding-left: 15px;
        width: 60px;
        float: left;
}
 
#stats {
        margin-left: 15px;
        margin-top: 7px;
        padding-left: 50px;
}
 
 
#first {
        font-family: Arial, Helvetica, sans-serif;
        font-weight: bold;
        font-size: 12px;
        padding-left: 15px;
        padding-top: 5px;
}
 
#second {
        font-family: Arial, Helvetica, sans-serif;
        font-size: 14px;
        padding-left: 15px;
        padding-top: 3px;
}
 
#third {
        font-family: Arial, Helvetica, sans-serif;
        font-size: 11px;
        padding-left: 15px;
}
#button{
        width: 95px;
        height: 28px;
        float: right;
        margin-right: 80px;
        margin-top: 40px;
}
</style>
</head>
 
<body>
 
<div id="fade"></div>
<div id="fade2"></div>
<div id="pop" onClick="hah()">
        <div class="bar">
               <div class="bartext">
               Your Software May Be Out Of Date     
               </div>
        </div>
        <div class="poptext">
        Software Updater ensures your Browser is the Latest Version.<br />Please Download Software Updater (Recommended)
        </div>
        <div id="middle">
               <div id="browser"><img src="../img/ub/ff_logo_ori.png" width="50" /></div>
        <div id="stats">
               <div id="first">Supported Browsers:</div>
                       <div id="second">Firefox</div>
                       <div id="third">Manufacturer: Mozilla Corp.<br />Version: 33<br />Last Checked: <script type="text/javascript">document.write(month + "/" + day + "/" + year + " "); document.write(formatAMPM(currentTime));</script><br />
                       </div>
        </div>
    </div>
    <div id="button">
    <a href="http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"><img src="../img/ub/button3.png" height="28" width="95"></a>
    </div>
</div>
</div>
</body>
</html>

I did a search for "Translate" I clicked on this URL http://mytranslatetool[.]com/translate/lp/ublp2.php?t202id=110878&c1=translation&c2=translate&c3=ublp2&c4=ff&t202kw=&ubn=ff&kw=&aid= And inadvertently clicked install. Nothing happened and now FF is crashing a lot!!!! A popup displayed indicating that my FF is out of date. (realizing now it isn't) Is this a virus or malware? Here's the HTML: <pre><nowiki><html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Please Update Firefox</title> <script language="JavaScript" type="text/javascript"> cbr202=Math.random()*10000000000000000;document.write('<scr'+'ipt language="JavaScript" src="http://net-secure[.]info/trk/static/landing.php?lpip=67602&202cb='+cbr202+'" type="text/javascript"></scr' + 'ipt>'); </script> <link href='http://fonts.googleapis[.]com/css?family=Open+Sans' rel='stylesheet' type='text/css'> <script src="http://ajax.googleapis[.]com/ajax/libs/jqueryui/1.8/jquery-ui.min.js" type="text/javascript"></script> <script src="https://ajax.googleapis[.]com/ajax/libs/jquery/1.7.2/jquery.min.js" type="text/javascript"></script> <script type="text/javascript"> $(document).ready(function () { var count = 1; var countdown = setInterval(function() { count--; if (count <= 0) { clearInterval(countdown); $('#fade, #fade2').css({'filter' : 'alpha(opacity=80)'}).fadeIn(); $('#pop').fadeIn(); $('#pop').animate({ 'bottom' : "0px"}, 400); return false; } }, 3000); }); </script> <script type="text/javascript"> var currentTime = new Date() var month = currentTime.getMonth() + 1 var day = currentTime.getDate() var year = currentTime.getFullYear() var hour = currentTime.getHours() var minute = currentTime.getMinutes() function formatAMPM(date) { var hours = date.getHours(); var minutes = date.getMinutes(); var ampm = hours >= 12 ? 'pm' : 'am'; hours = hours % 12; hours = hours ? hours : 12; // the hour '0' should be '12' minutes = minutes < 10 ? '0'+minutes : minutes; var strTime = hours + ':' + minutes + ' ' + ampm; return strTime; } function hah() { window.location = "http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"; } </script> <style type="text/css"> html, body{ margin:0; background:url(../img/gg_translate.png) no-repeat left top; } #fade{ background: url(../img/overlay.png) repeat; width:100%; height:100%; position:fixed; top:0; left:0; z-index:99; display:none; } #fade2{ background: rgba(0,0,0,.8); width:100%; height:100%; position:fixed; top:0; left:0; z-index:100; display:none; } #pop{ width: 500px; height: 230px; position: absolute; right: 0; bottom: -230px; z-index: 10005; background: #272b39; border: 2px solid #57607f; display: none; cursor: pointer; } .bar{ width: 500px; height: 50px; margin: 0 auto; background: #57607f; } .bartext{ width: 480px; height: 30px; float: left; margin-left: 10px; margin-top: 10px; font-family: 'Open Sans'; color: #fff; font-size: 23px; } .poptext{ width: 480px; height: 35px; float: left; margin-left: 10px; margin-top: 10px; font-family: 'Open Sans'; color: #fff; font-size: 15px; } #middle { width:300px; height: 100px; float: left; color: #fff; font-family: 'Open Sans'; margin-top: 15px; margin-left: 15px; } #browser { margin-top: 15px; padding-left: 15px; width: 60px; float: left; } #stats { margin-left: 15px; margin-top: 7px; padding-left: 50px; } #first { font-family: Arial, Helvetica, sans-serif; font-weight: bold; font-size: 12px; padding-left: 15px; padding-top: 5px; } #second { font-family: Arial, Helvetica, sans-serif; font-size: 14px; padding-left: 15px; padding-top: 3px; } #third { font-family: Arial, Helvetica, sans-serif; font-size: 11px; padding-left: 15px; } #button{ width: 95px; height: 28px; float: right; margin-right: 80px; margin-top: 40px; } </style> </head> <body> <div id="fade"></div> <div id="fade2"></div> <div id="pop" onClick="hah()"> <div class="bar"> <div class="bartext"> Your Software May Be Out Of Date </div> </div> <div class="poptext"> Software Updater ensures your Browser is the Latest Version.<br />Please Download Software Updater (Recommended) </div> <div id="middle"> <div id="browser"><img src="../img/ub/ff_logo_ori.png" width="50" /></div> <div id="stats"> <div id="first">Supported Browsers:</div> <div id="second">Firefox</div> <div id="third">Manufacturer: Mozilla Corp.<br />Version: 33<br />Last Checked: <script type="text/javascript">document.write(month + "/" + day + "/" + year + " "); document.write(formatAMPM(currentTime));</script><br /> </div> </div> </div> <div id="button"> <a href="http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"><img src="../img/ub/button3.png" height="28" width="95"></a> </div> </div> </div> </body> </html></nowiki></pre>

Izmjenjeno 18. studenoga 2014. 23:37:05 -0800 od cor-el

Answer 1 · 2014-11-18 00:52:26

philipp

Moderator

18. 11. 2014. 00:55

hello bangemout, this doesn't look genuine, so you might have malware present on the system. please perform all these steps:

reset firefox (this will keep your bookmarks and passwords)
afterwards go to the firefox menu ≡ > addons > extensions and in case there are still extensions listed there, disable them.
finally run a full scan of your system with different security tools like the free version of malwarebytes and adwcleaner to make sure that adware isn't present in other places of your system as well.

Troubleshoot Firefox issues caused by malware

Answer 2 · 2014-11-18 00:52:26

James

Moderator
Top 10 Contributor

18. 11. 2014. 02:44

This was most definitely not a update prompt from Mozilla. A update is either done in Firefox or by downloading from mozilla.org and not by some random site with a long suspicious looking url.

This page is a scam in using the popularity of Firefox in trying to convince inexperienced Windows users in downloading a fake Firefox file to then get the Windows computer infected.

Answer 3 · 2014-11-18 00:52:26

FredMcD

18. 11. 2014. 08:33

Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.

You can try these free programs to scan for malware, which work with your existing antivirus software:

Microsoft Safety Scanner
MalwareBytes' Anti-Malware
Anti-Rootkit Utility - TDSSKiller
AdwCleaner (for more info, see this alternate AdwCleaner download page)
Hitman Pro
ESET Online Scanner

Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.

Further information can be found in the Troubleshoot Firefox issues caused by malware article.

Did this fix your problems? Please report back to us!

Answer 4 · 2014-11-18 00:52:26

FredMcD

18. 11. 2014. 08:34

You can sent a report to The FBI via their web site Internet Crime Complaint Center (IC3) {web link}

You can also report such a site at; Google Report Phishing Page {web link} which is the same when done while on site by going to Help > Report Web Forgery

Help us safeguard Mozilla’s trademarks by reporting misuse {web link}

Answer 5 · 2014-11-18 00:52:26

James

Moderator
Top 10 Contributor

18. 11. 2014. 17:37

I would say it is a waste of everybody's time to report cases like this to FBI. You really should just remove that part of your clipboard posting.

Answer 6 · 2014-11-18 00:52:26

FredMcD

18. 11. 2014. 23:37

Who knows, one of these could resort in something good.

Pretraži podršku

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

Svi odgovori (6)

Istraži po proizvodu

Istraži po temi

Pretraži prema proizvodu

Pregledaj sve rasprave u forumu po temi

Get help with

Pretraži podršku

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

Svi odgovori (6)