Question

Тази тема беше архивирана. Моля, задайте нов въпрос ако имате нужда от помощ.

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

6 отговора
1 има този проблем
1 изглед
Последен отговор от FredMcD

преди 9 години

18.11.14 г., 0:52 ч.

I did a search for "Translate" I clicked on this URL http://mytranslatetool[.]com/translate/lp/ublp2.php?t202id=110878&c1=translation&c2=translate&c3=ublp2&c4=ff&t202kw=&ubn=ff&kw=&aid=

And inadvertently clicked install. Nothing happened and now FF is crashing a lot!!!!

A popup displayed indicating that my FF is out of date. (realizing now it isn't) Is this a virus or malware?

Here's the HTML:

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Please Update Firefox</title>
<script language="JavaScript" type="text/javascript"> cbr202=Math.random()*10000000000000000;document.write('<scr'+'ipt language="JavaScript" src="http://net-secure[.]info/trk/static/landing.php?lpip=67602&202cb='+cbr202+'" type="text/javascript"></scr' + 'ipt>'); </script>
<link href='http://fonts.googleapis[.]com/css?family=Open+Sans' rel='stylesheet' type='text/css'>
<script src="http://ajax.googleapis[.]com/ajax/libs/jqueryui/1.8/jquery-ui.min.js" type="text/javascript"></script>
<script src="https://ajax.googleapis[.]com/ajax/libs/jquery/1.7.2/jquery.min.js" type="text/javascript"></script>
 
<script type="text/javascript">
        $(document).ready(function () {
                       var count = 1;
            var countdown = setInterval(function() {
               count--;
                if (count <= 0) {
                                      clearInterval(countdown);
                                      $('#fade, #fade2').css({'filter' : 'alpha(opacity=80)'}).fadeIn();
                                      $('#pop').fadeIn();
                                      $('#pop').animate({ 'bottom' : "0px"}, 400);
                                      return false;
                               }
                       }, 3000);
                      
        });
</script>
<script type="text/javascript">
var currentTime = new Date()
var month = currentTime.getMonth() + 1
var day = currentTime.getDate()
var year = currentTime.getFullYear()
var hour = currentTime.getHours()
var minute = currentTime.getMinutes()
 
function formatAMPM(date) {
  var hours = date.getHours();
  var minutes = date.getMinutes();
  var ampm = hours >= 12 ? 'pm' : 'am';
  hours = hours % 12;
  hours = hours ? hours : 12; // the hour '0' should be '12'
  minutes = minutes < 10 ? '0'+minutes : minutes;
  var strTime = hours + ':' + minutes + ' ' + ampm;
  return strTime;
}
function hah() {
        window.location = "http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__";
}
</script>
<style type="text/css">
html, body{
        margin:0;
        background:url(../img/gg_translate.png) no-repeat left top;
}
#fade{
        background: url(../img/overlay.png) repeat;
        width:100%;
        height:100%;
        position:fixed;
        top:0;
        left:0;
        z-index:99;
        display:none;
}
#fade2{
        background: rgba(0,0,0,.8);
        width:100%;
        height:100%;
        position:fixed;
        top:0;
        left:0;
        z-index:100;
        display:none;
}
#pop{
        width: 500px;
        height: 230px;
        position: absolute;
        right: 0;
        bottom: -230px;
        z-index: 10005;
        background: #272b39;
        border: 2px solid #57607f;
        display: none;
        cursor: pointer;
}
.bar{
        width: 500px;
        height: 50px;
        margin: 0 auto;
        background: #57607f;
}
.bartext{
        width: 480px;
        height: 30px;
        float: left;
        margin-left: 10px;
        margin-top: 10px;
        font-family: 'Open Sans';
        color: #fff;
        font-size: 23px;
}
.poptext{
        width: 480px;
        height: 35px;
        float: left;
        margin-left: 10px;
        margin-top: 10px;
        font-family: 'Open Sans';
        color: #fff;
        font-size: 15px;
}
#middle {
        width:300px;
        height: 100px;
        float: left;
        color: #fff;
        font-family: 'Open Sans';
        margin-top: 15px;
        margin-left: 15px;
}
 
#browser {
        margin-top: 15px;
        padding-left: 15px;
        width: 60px;
        float: left;
}
 
#stats {
        margin-left: 15px;
        margin-top: 7px;
        padding-left: 50px;
}
 
 
#first {
        font-family: Arial, Helvetica, sans-serif;
        font-weight: bold;
        font-size: 12px;
        padding-left: 15px;
        padding-top: 5px;
}
 
#second {
        font-family: Arial, Helvetica, sans-serif;
        font-size: 14px;
        padding-left: 15px;
        padding-top: 3px;
}
 
#third {
        font-family: Arial, Helvetica, sans-serif;
        font-size: 11px;
        padding-left: 15px;
}
#button{
        width: 95px;
        height: 28px;
        float: right;
        margin-right: 80px;
        margin-top: 40px;
}
</style>
</head>
 
<body>
 
<div id="fade"></div>
<div id="fade2"></div>
<div id="pop" onClick="hah()">
        <div class="bar">
               <div class="bartext">
               Your Software May Be Out Of Date     
               </div>
        </div>
        <div class="poptext">
        Software Updater ensures your Browser is the Latest Version.<br />Please Download Software Updater (Recommended)
        </div>
        <div id="middle">
               <div id="browser"><img src="../img/ub/ff_logo_ori.png" width="50" /></div>
        <div id="stats">
               <div id="first">Supported Browsers:</div>
                       <div id="second">Firefox</div>
                       <div id="third">Manufacturer: Mozilla Corp.<br />Version: 33<br />Last Checked: <script type="text/javascript">document.write(month + "/" + day + "/" + year + " "); document.write(formatAMPM(currentTime));</script><br />
                       </div>
        </div>
    </div>
    <div id="button">
    <a href="http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"><img src="../img/ub/button3.png" height="28" width="95"></a>
    </div>
</div>
</div>
</body>
</html>

I did a search for "Translate" I clicked on this URL http://mytranslatetool[.]com/translate/lp/ublp2.php?t202id=110878&c1=translation&c2=translate&c3=ublp2&c4=ff&t202kw=&ubn=ff&kw=&aid= And inadvertently clicked install. Nothing happened and now FF is crashing a lot!!!! A popup displayed indicating that my FF is out of date. (realizing now it isn't) Is this a virus or malware? Here's the HTML: <pre><nowiki><html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Please Update Firefox</title> <script language="JavaScript" type="text/javascript"> cbr202=Math.random()*10000000000000000;document.write('<scr'+'ipt language="JavaScript" src="http://net-secure[.]info/trk/static/landing.php?lpip=67602&202cb='+cbr202+'" type="text/javascript"></scr' + 'ipt>'); </script> <link href='http://fonts.googleapis[.]com/css?family=Open+Sans' rel='stylesheet' type='text/css'> <script src="http://ajax.googleapis[.]com/ajax/libs/jqueryui/1.8/jquery-ui.min.js" type="text/javascript"></script> <script src="https://ajax.googleapis[.]com/ajax/libs/jquery/1.7.2/jquery.min.js" type="text/javascript"></script> <script type="text/javascript"> $(document).ready(function () { var count = 1; var countdown = setInterval(function() { count--; if (count <= 0) { clearInterval(countdown); $('#fade, #fade2').css({'filter' : 'alpha(opacity=80)'}).fadeIn(); $('#pop').fadeIn(); $('#pop').animate({ 'bottom' : "0px"}, 400); return false; } }, 3000); }); </script> <script type="text/javascript"> var currentTime = new Date() var month = currentTime.getMonth() + 1 var day = currentTime.getDate() var year = currentTime.getFullYear() var hour = currentTime.getHours() var minute = currentTime.getMinutes() function formatAMPM(date) { var hours = date.getHours(); var minutes = date.getMinutes(); var ampm = hours >= 12 ? 'pm' : 'am'; hours = hours % 12; hours = hours ? hours : 12; // the hour '0' should be '12' minutes = minutes < 10 ? '0'+minutes : minutes; var strTime = hours + ':' + minutes + ' ' + ampm; return strTime; } function hah() { window.location = "http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"; } </script> <style type="text/css"> html, body{ margin:0; background:url(../img/gg_translate.png) no-repeat left top; } #fade{ background: url(../img/overlay.png) repeat; width:100%; height:100%; position:fixed; top:0; left:0; z-index:99; display:none; } #fade2{ background: rgba(0,0,0,.8); width:100%; height:100%; position:fixed; top:0; left:0; z-index:100; display:none; } #pop{ width: 500px; height: 230px; position: absolute; right: 0; bottom: -230px; z-index: 10005; background: #272b39; border: 2px solid #57607f; display: none; cursor: pointer; } .bar{ width: 500px; height: 50px; margin: 0 auto; background: #57607f; } .bartext{ width: 480px; height: 30px; float: left; margin-left: 10px; margin-top: 10px; font-family: 'Open Sans'; color: #fff; font-size: 23px; } .poptext{ width: 480px; height: 35px; float: left; margin-left: 10px; margin-top: 10px; font-family: 'Open Sans'; color: #fff; font-size: 15px; } #middle { width:300px; height: 100px; float: left; color: #fff; font-family: 'Open Sans'; margin-top: 15px; margin-left: 15px; } #browser { margin-top: 15px; padding-left: 15px; width: 60px; float: left; } #stats { margin-left: 15px; margin-top: 7px; padding-left: 50px; } #first { font-family: Arial, Helvetica, sans-serif; font-weight: bold; font-size: 12px; padding-left: 15px; padding-top: 5px; } #second { font-family: Arial, Helvetica, sans-serif; font-size: 14px; padding-left: 15px; padding-top: 3px; } #third { font-family: Arial, Helvetica, sans-serif; font-size: 11px; padding-left: 15px; } #button{ width: 95px; height: 28px; float: right; margin-right: 80px; margin-top: 40px; } </style> </head> <body> <div id="fade"></div> <div id="fade2"></div> <div id="pop" onClick="hah()"> <div class="bar"> <div class="bartext"> Your Software May Be Out Of Date </div> </div> <div class="poptext"> Software Updater ensures your Browser is the Latest Version.<br />Please Download Software Updater (Recommended) </div> <div id="middle"> <div id="browser"><img src="../img/ub/ff_logo_ori.png" width="50" /></div> <div id="stats"> <div id="first">Supported Browsers:</div> <div id="second">Firefox</div> <div id="third">Manufacturer: Mozilla Corp.<br />Version: 33<br />Last Checked: <script type="text/javascript">document.write(month + "/" + day + "/" + year + " "); document.write(formatAMPM(currentTime));</script><br /> </div> </div> </div> <div id="button"> <a href="http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"><img src="../img/ub/button3.png" height="28" width="95"></a> </div> </div> </div> </body> </html></nowiki></pre>

Променено на 18 ноември 2014 г., 23:37:05 ч. -0800 от cor-el

Answer 1 · 2014-11-18 00:52:26

philipp

Moderator

18.11.14 г., 0:55 ч.

hello bangemout, this doesn't look genuine, so you might have malware present on the system. please perform all these steps:

reset firefox (this will keep your bookmarks and passwords)
afterwards go to the firefox menu ≡ > addons > extensions and in case there are still extensions listed there, disable them.
finally run a full scan of your system with different security tools like the free version of malwarebytes and adwcleaner to make sure that adware isn't present in other places of your system as well.

Troubleshoot Firefox issues caused by malware

Answer 2 · 2014-11-18 00:52:26

James

Top 25 Contributor
Moderator

18.11.14 г., 2:44 ч.

This was most definitely not a update prompt from Mozilla. A update is either done in Firefox or by downloading from mozilla.org and not by some random site with a long suspicious looking url.

This page is a scam in using the popularity of Firefox in trying to convince inexperienced Windows users in downloading a fake Firefox file to then get the Windows computer infected.

Answer 3 · 2014-11-18 00:52:26

FredMcD

18.11.14 г., 8:33 ч.

Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.

You can try these free programs to scan for malware, which work with your existing antivirus software:

Microsoft Safety Scanner
MalwareBytes' Anti-Malware
Anti-Rootkit Utility - TDSSKiller
AdwCleaner (for more info, see this alternate AdwCleaner download page)
Hitman Pro
ESET Online Scanner

Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.

Further information can be found in the Troubleshoot Firefox issues caused by malware article.

Did this fix your problems? Please report back to us!

Answer 4 · 2014-11-18 00:52:26

FredMcD

18.11.14 г., 8:34 ч.

You can sent a report to The FBI via their web site Internet Crime Complaint Center (IC3) {web link}

You can also report such a site at; Google Report Phishing Page {web link} which is the same when done while on site by going to Help > Report Web Forgery

Help us safeguard Mozilla’s trademarks by reporting misuse {web link}

Answer 5 · 2014-11-18 00:52:26

James

Top 25 Contributor
Moderator

18.11.14 г., 17:37 ч.

I would say it is a waste of everybody's time to report cases like this to FBI. You really should just remove that part of your clipboard posting.

Answer 6 · 2014-11-18 00:52:26

FredMcD

18.11.14 г., 23:37 ч.

Who knows, one of these could resort in something good.

Търсене в помощните статии

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

Всички отговори (6)

Explore by product

Explore by topic

Преглежд по продукти

Browse all forum threads by topic

Get help with

Търсене в помощните статии

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

Всички отговори (6)