i received a notice to upgrade firefox with this address in the url: http://firefoxfest.co.cc/#redirect. When i downloaded it, firefox didn't upgrade and the downloaded file disappeared. is this a legitimate firefox update url?
I received a new tab saying: You're now running Firefox 3.6.7. (I checked afterward and I'm running 3.6.8)
For security reasons, we recommend downloading the latest and greatest version. This is the url of the page: hxxp://firefoxfest.co.cc/#redirect. I clicked on the update button and downloaded the file. I ran the file but nothing happened like it usually does that firefox needed to restart and when i looked for the file that I downloaded, it was gone from the folder I downloaded it to. I haven't noticed this happening in past updates. I am wondering if this is a bogus message and by downloading that file, I now have a trojan on my computer or something. Kaspersky 2010 didn't register any virus but then I notice it had been turned off somehow.
Modified by cor-el
All Replies (4)
Sorry, but that sounds very bad. Did it look like this one? http://www.f-secure.com/weblog/archives/00001997.html
If Kaspersky is not working, or even if it is, try these tools:
HouseCall : http://housecall.trendmicro.com/
Malwarebytes Anti-malware : http://www.malwarebytes.org/mbam.php
SUPERAntiSpyware : http://www.superantispyware.com/
Fingers crossed that you can clean out whatever you ran.
I also had the same. Was talking on the phone, did not pay much attention and to be honest the page is really well manufactured, so entered admin password and boom. In few sec java started and triggered my suspect, so I checked the processes running and did see a lot of executables. I understood immediately what happened (felt a fool), switched off wireless and made a clean install. In all this my super updated symantec endpoint protection did not detect anything. And no way to clean the system as the virus disabled somehow the antivirus.
Do another virus/spywares scan with Windows Safe Mode. Usually, it can detect virus that were not able to detect or delete in Windows Normal Mode.
Yes, Malware Bytes works in safe mode. It is best to go into safe mode with networking so you can update to the latest database version prior to scan. It can also be installed in safe mode as well. I use it quite often to resolve virus/malware issues for customers.