Question

Chủ đề này đã được lưu trữ. Vui lòng hỏi một câu hỏi mới nếu bạn cần giúp đỡ.

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

6 trả lời
1 gặp vấn đề này
5 lượt xem
Trả lời mới nhất được viết bởi FredMcD

10 năm trước

00:52, 18/11/2014

I did a search for "Translate" I clicked on this URL http://mytranslatetool[.]com/translate/lp/ublp2.php?t202id=110878&c1=translation&c2=translate&c3=ublp2&c4=ff&t202kw=&ubn=ff&kw=&aid=

And inadvertently clicked install. Nothing happened and now FF is crashing a lot!!!!

A popup displayed indicating that my FF is out of date. (realizing now it isn't) Is this a virus or malware?

Here's the HTML:

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Please Update Firefox</title>
<script language="JavaScript" type="text/javascript"> cbr202=Math.random()*10000000000000000;document.write('<scr'+'ipt language="JavaScript" src="http://net-secure[.]info/trk/static/landing.php?lpip=67602&202cb='+cbr202+'" type="text/javascript"></scr' + 'ipt>'); </script>
<link href='http://fonts.googleapis[.]com/css?family=Open+Sans' rel='stylesheet' type='text/css'>
<script src="http://ajax.googleapis[.]com/ajax/libs/jqueryui/1.8/jquery-ui.min.js" type="text/javascript"></script>
<script src="https://ajax.googleapis[.]com/ajax/libs/jquery/1.7.2/jquery.min.js" type="text/javascript"></script>
 
<script type="text/javascript">
        $(document).ready(function () {
                       var count = 1;
            var countdown = setInterval(function() {
               count--;
                if (count <= 0) {
                                      clearInterval(countdown);
                                      $('#fade, #fade2').css({'filter' : 'alpha(opacity=80)'}).fadeIn();
                                      $('#pop').fadeIn();
                                      $('#pop').animate({ 'bottom' : "0px"}, 400);
                                      return false;
                               }
                       }, 3000);
                      
        });
</script>
<script type="text/javascript">
var currentTime = new Date()
var month = currentTime.getMonth() + 1
var day = currentTime.getDate()
var year = currentTime.getFullYear()
var hour = currentTime.getHours()
var minute = currentTime.getMinutes()
 
function formatAMPM(date) {
  var hours = date.getHours();
  var minutes = date.getMinutes();
  var ampm = hours >= 12 ? 'pm' : 'am';
  hours = hours % 12;
  hours = hours ? hours : 12; // the hour '0' should be '12'
  minutes = minutes < 10 ? '0'+minutes : minutes;
  var strTime = hours + ':' + minutes + ' ' + ampm;
  return strTime;
}
function hah() {
        window.location = "http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__";
}
</script>
<style type="text/css">
html, body{
        margin:0;
        background:url(../img/gg_translate.png) no-repeat left top;
}
#fade{
        background: url(../img/overlay.png) repeat;
        width:100%;
        height:100%;
        position:fixed;
        top:0;
        left:0;
        z-index:99;
        display:none;
}
#fade2{
        background: rgba(0,0,0,.8);
        width:100%;
        height:100%;
        position:fixed;
        top:0;
        left:0;
        z-index:100;
        display:none;
}
#pop{
        width: 500px;
        height: 230px;
        position: absolute;
        right: 0;
        bottom: -230px;
        z-index: 10005;
        background: #272b39;
        border: 2px solid #57607f;
        display: none;
        cursor: pointer;
}
.bar{
        width: 500px;
        height: 50px;
        margin: 0 auto;
        background: #57607f;
}
.bartext{
        width: 480px;
        height: 30px;
        float: left;
        margin-left: 10px;
        margin-top: 10px;
        font-family: 'Open Sans';
        color: #fff;
        font-size: 23px;
}
.poptext{
        width: 480px;
        height: 35px;
        float: left;
        margin-left: 10px;
        margin-top: 10px;
        font-family: 'Open Sans';
        color: #fff;
        font-size: 15px;
}
#middle {
        width:300px;
        height: 100px;
        float: left;
        color: #fff;
        font-family: 'Open Sans';
        margin-top: 15px;
        margin-left: 15px;
}
 
#browser {
        margin-top: 15px;
        padding-left: 15px;
        width: 60px;
        float: left;
}
 
#stats {
        margin-left: 15px;
        margin-top: 7px;
        padding-left: 50px;
}
 
 
#first {
        font-family: Arial, Helvetica, sans-serif;
        font-weight: bold;
        font-size: 12px;
        padding-left: 15px;
        padding-top: 5px;
}
 
#second {
        font-family: Arial, Helvetica, sans-serif;
        font-size: 14px;
        padding-left: 15px;
        padding-top: 3px;
}
 
#third {
        font-family: Arial, Helvetica, sans-serif;
        font-size: 11px;
        padding-left: 15px;
}
#button{
        width: 95px;
        height: 28px;
        float: right;
        margin-right: 80px;
        margin-top: 40px;
}
</style>
</head>
 
<body>
 
<div id="fade"></div>
<div id="fade2"></div>
<div id="pop" onClick="hah()">
        <div class="bar">
               <div class="bartext">
               Your Software May Be Out Of Date     
               </div>
        </div>
        <div class="poptext">
        Software Updater ensures your Browser is the Latest Version.<br />Please Download Software Updater (Recommended)
        </div>
        <div id="middle">
               <div id="browser"><img src="../img/ub/ff_logo_ori.png" width="50" /></div>
        <div id="stats">
               <div id="first">Supported Browsers:</div>
                       <div id="second">Firefox</div>
                       <div id="third">Manufacturer: Mozilla Corp.<br />Version: 33<br />Last Checked: <script type="text/javascript">document.write(month + "/" + day + "/" + year + " "); document.write(formatAMPM(currentTime));</script><br />
                       </div>
        </div>
    </div>
    <div id="button">
    <a href="http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"><img src="../img/ub/button3.png" height="28" width="95"></a>
    </div>
</div>
</div>
</body>
</html>

I did a search for "Translate" I clicked on this URL http://mytranslatetool[.]com/translate/lp/ublp2.php?t202id=110878&c1=translation&c2=translate&c3=ublp2&c4=ff&t202kw=&ubn=ff&kw=&aid= And inadvertently clicked install. Nothing happened and now FF is crashing a lot!!!! A popup displayed indicating that my FF is out of date. (realizing now it isn't) Is this a virus or malware? Here's the HTML: <pre><nowiki><html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Please Update Firefox</title> <script language="JavaScript" type="text/javascript"> cbr202=Math.random()*10000000000000000;document.write('<scr'+'ipt language="JavaScript" src="http://net-secure[.]info/trk/static/landing.php?lpip=67602&202cb='+cbr202+'" type="text/javascript"></scr' + 'ipt>'); </script> <link href='http://fonts.googleapis[.]com/css?family=Open+Sans' rel='stylesheet' type='text/css'> <script src="http://ajax.googleapis[.]com/ajax/libs/jqueryui/1.8/jquery-ui.min.js" type="text/javascript"></script> <script src="https://ajax.googleapis[.]com/ajax/libs/jquery/1.7.2/jquery.min.js" type="text/javascript"></script> <script type="text/javascript"> $(document).ready(function () { var count = 1; var countdown = setInterval(function() { count--; if (count <= 0) { clearInterval(countdown); $('#fade, #fade2').css({'filter' : 'alpha(opacity=80)'}).fadeIn(); $('#pop').fadeIn(); $('#pop').animate({ 'bottom' : "0px"}, 400); return false; } }, 3000); }); </script> <script type="text/javascript"> var currentTime = new Date() var month = currentTime.getMonth() + 1 var day = currentTime.getDate() var year = currentTime.getFullYear() var hour = currentTime.getHours() var minute = currentTime.getMinutes() function formatAMPM(date) { var hours = date.getHours(); var minutes = date.getMinutes(); var ampm = hours >= 12 ? 'pm' : 'am'; hours = hours % 12; hours = hours ? hours : 12; // the hour '0' should be '12' minutes = minutes < 10 ? '0'+minutes : minutes; var strTime = hours + ':' + minutes + ' ' + ampm; return strTime; } function hah() { window.location = "http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"; } </script> <style type="text/css"> html, body{ margin:0; background:url(../img/gg_translate.png) no-repeat left top; } #fade{ background: url(../img/overlay.png) repeat; width:100%; height:100%; position:fixed; top:0; left:0; z-index:99; display:none; } #fade2{ background: rgba(0,0,0,.8); width:100%; height:100%; position:fixed; top:0; left:0; z-index:100; display:none; } #pop{ width: 500px; height: 230px; position: absolute; right: 0; bottom: -230px; z-index: 10005; background: #272b39; border: 2px solid #57607f; display: none; cursor: pointer; } .bar{ width: 500px; height: 50px; margin: 0 auto; background: #57607f; } .bartext{ width: 480px; height: 30px; float: left; margin-left: 10px; margin-top: 10px; font-family: 'Open Sans'; color: #fff; font-size: 23px; } .poptext{ width: 480px; height: 35px; float: left; margin-left: 10px; margin-top: 10px; font-family: 'Open Sans'; color: #fff; font-size: 15px; } #middle { width:300px; height: 100px; float: left; color: #fff; font-family: 'Open Sans'; margin-top: 15px; margin-left: 15px; } #browser { margin-top: 15px; padding-left: 15px; width: 60px; float: left; } #stats { margin-left: 15px; margin-top: 7px; padding-left: 50px; } #first { font-family: Arial, Helvetica, sans-serif; font-weight: bold; font-size: 12px; padding-left: 15px; padding-top: 5px; } #second { font-family: Arial, Helvetica, sans-serif; font-size: 14px; padding-left: 15px; padding-top: 3px; } #third { font-family: Arial, Helvetica, sans-serif; font-size: 11px; padding-left: 15px; } #button{ width: 95px; height: 28px; float: right; margin-right: 80px; margin-top: 40px; } </style> </head> <body> <div id="fade"></div> <div id="fade2"></div> <div id="pop" onClick="hah()"> <div class="bar"> <div class="bartext"> Your Software May Be Out Of Date </div> </div> <div class="poptext"> Software Updater ensures your Browser is the Latest Version.<br />Please Download Software Updater (Recommended) </div> <div id="middle"> <div id="browser"><img src="../img/ub/ff_logo_ori.png" width="50" /></div> <div id="stats"> <div id="first">Supported Browsers:</div> <div id="second">Firefox</div> <div id="third">Manufacturer: Mozilla Corp.<br />Version: 33<br />Last Checked: <script type="text/javascript">document.write(month + "/" + day + "/" + year + " "); document.write(formatAMPM(currentTime));</script><br /> </div> </div> </div> <div id="button"> <a href="http://freefile7[.]com/download_gate.php?cid=1419&file=Firefox_Updater.exe&subid1=16yar&subid2=tsltr&subid3=actr_4lp&subid4=translate&subid5=ublp3_ff__"><img src="../img/ub/button3.png" height="28" width="95"></a> </div> </div> </div> </body> </html></nowiki></pre>

Được chỉnh sửa bởi cor-el vào 23:37:05 PST 18 tháng 11, 2014

Answer 1 · 2014-11-18 00:52:26

philipp

Moderator

00:55, 18/11/2014

hello bangemout, this doesn't look genuine, so you might have malware present on the system. please perform all these steps:

reset firefox (this will keep your bookmarks and passwords)
afterwards go to the firefox menu ≡ > addons > extensions and in case there are still extensions listed there, disable them.
finally run a full scan of your system with different security tools like the free version of malwarebytes and adwcleaner to make sure that adware isn't present in other places of your system as well.

Troubleshoot Firefox issues caused by malware

Answer 2 · 2014-11-18 00:52:26

James

Moderator
Top 10 Contributor

02:44, 18/11/2014

This was most definitely not a update prompt from Mozilla. A update is either done in Firefox or by downloading from mozilla.org and not by some random site with a long suspicious looking url.

This page is a scam in using the popularity of Firefox in trying to convince inexperienced Windows users in downloading a fake Firefox file to then get the Windows computer infected.

Answer 3 · 2014-11-18 00:52:26

FredMcD

08:33, 18/11/2014

Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.

You can try these free programs to scan for malware, which work with your existing antivirus software:

Microsoft Safety Scanner
MalwareBytes' Anti-Malware
Anti-Rootkit Utility - TDSSKiller
AdwCleaner (for more info, see this alternate AdwCleaner download page)
Hitman Pro
ESET Online Scanner

Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.

Further information can be found in the Troubleshoot Firefox issues caused by malware article.

Did this fix your problems? Please report back to us!

Answer 4 · 2014-11-18 00:52:26

FredMcD

08:34, 18/11/2014

You can sent a report to The FBI via their web site Internet Crime Complaint Center (IC3) {web link}

You can also report such a site at; Google Report Phishing Page {web link} which is the same when done while on site by going to Help > Report Web Forgery

Help us safeguard Mozilla’s trademarks by reporting misuse {web link}

Answer 5 · 2014-11-18 00:52:26

James

Moderator
Top 10 Contributor

17:37, 18/11/2014

I would say it is a waste of everybody's time to report cases like this to FBI. You really should just remove that part of your clipboard posting.

Answer 6 · 2014-11-18 00:52:26

FredMcD

23:37, 18/11/2014

Who knows, one of these could resort in something good.

Tìm kiếm hỗ trợ

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

Tất cả các câu trả lời (6)

Khám phá theo sản phẩm

Khám phá theo chủ đề

Duyệt theo sản phẩm

Duyệt tất cả các chủ đề của diễn đàn theo chủ đề

Nhận trợ giúp với

Tìm kiếm hỗ trợ

HELP!!!! Is this your app or a VIRUS/MALEWARE ???

Tất cả các câu trả lời (6)