為了改善您的使用體驗,本網站正在進行維護,部分功能暫時無法使用。若本站的文件無法解決您的問題,想要向社群發問的話,請到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 發問,我們的社群成員將很快會回覆您的疑問。

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

I received a HIGH RISK warning from Norton 360 (V-4) that I'd been attacked by www.qurastiny.com (188.72.198.192.80) which it linked to /DEVICE/HARDDISKVOUME1/PROGRAM FILES (X86)/MOZILLA FIREFOX/FIREFOX.EXE is this a problem?

  • 4 回覆
  • 11 有這個問題
  • 6 次檢視
  • 最近回覆由 GBA09

more options

Reflagged issue from Norton 360 aimed at Firefox, no other obvious issues other than 'attack' charge by my anti-virus.

Reflagged issue from Norton 360 aimed at Firefox, no other obvious issues other than 'attack' charge by my anti-virus.

被選擇的解決方法

My best guess is that you visited a web site that contained a script or Flash video that tried to push software from the qurastiny(dot)com domain. It sounds as though Norton blocked it, so that's good news. Being irritated by "I blocked it" messages might not be the most useful setup, but if you prefer to know about it in real time rather than just viewing your Norton logs occasionally, you could keep it for now.

If you don't mind investing time to be more secure, I suggest checking out the NoScript extension. Because it blocks scripts by default, when you visit a new site you often have to allow 1, 2, or 3 domains before everything works. There definitely is some cost there. But it probably would block this attack because that site's scripts would never be retrieved and executed in the first place.

從原來的回覆中察看解決方案 👍 0

所有回覆 (4)

more options

I'm not sure how to interpret that. Either Norton blocked a site Firefox tried to access, or that site infected Firefox?

I suggest closing the browser and running a scan to see whether Norton finds any problems. You can supplement your regular security software with these two highly regarded scanners:

Malwarebytes Anti-malware : http://www.malwarebytes.org/mbam.php

SUPERAntiSpyware : http://www.superantispyware.com/

由 jscher2000 - Support Volunteer 於 修改

more options

Hmm, I downloaded and ran both programs but all the SUPER AntiSpyware found were a few tracking cookies Norton & Ad-Aware missed.

Still not sure what's going on. Norton gives small 'alerts' on C:\PROGRAM FILES (X86)\LAVASOFT\AD-AWARE\AAWSERVICE.EXE targeting Norton's engine with an 'access process data' it blocked. These are obviously AdAware being nosy and doing its job while annoying Norton. The BIG ONE (twice now) 'Web Attack: Malicious Toolkit Website 8' attacking computer (xxxxx), attacker URL www.qurastiny.com/12974192/3659 Destination Address: GREGG-PC (xxx) traffic description was TCP.WWW-http So far nothing seems to have gotten past Norton but I'm getting concerned. I left the exact computer numbers out on purpose, obviously.

This one has shown twice now today, no idea why. I know Norton can get a bit 'flaky' now and then but this is unexpected.

more options

選擇的解決方法

My best guess is that you visited a web site that contained a script or Flash video that tried to push software from the qurastiny(dot)com domain. It sounds as though Norton blocked it, so that's good news. Being irritated by "I blocked it" messages might not be the most useful setup, but if you prefer to know about it in real time rather than just viewing your Norton logs occasionally, you could keep it for now.

If you don't mind investing time to be more secure, I suggest checking out the NoScript extension. Because it blocks scripts by default, when you visit a new site you often have to allow 1, 2, or 3 domains before everything works. There definitely is some cost there. But it probably would block this attack because that site's scripts would never be retrieved and executed in the first place.

more options

Thanks again!!

I did more checking and discovered something interesting and embarrassing. A defective Garman navigator was hooked up & charging on the system via the USB. On a guess I disconnected it and re-ran all the scanning software after a reboot.

While I'm still getting lots of small 'something is trying to do something' alerts the BIG one is not there anymore. Was it the Garman charging up?? Maybe, maybe not. BUT it's a lesson to me on checking what's attached to the computer before crying wolf!

Thank you for your help, the suggestions were useful and have provided me with MUCH better tools than I had before, and also provided me with a rather useful lesson in life; 'look before you leap'.

Many thanks for everything! God willing I won't be having such embarrassing goofs again for a little while. I do wonder why the alert pointed at Firefox though, very puzzling.

Gregg