Forum Home
Press F1
 
Thread ID: 123233 2012-02-12 08:56:00 Firefox related nastie? minster (9180) Press F1
Post ID Timestamp Content User
1258794 2012-02-12 08:56:00 Was browsing F1 Forums last night om my desktop and on closing page got a pop up saying my pc was infected!
It tried to get me to download an exe file to clean computer but I closed the page and run malawarebyte/msse scans to check and they came up clear.
This morning on my laptop the same thing pops up (Windows Secure Kit 2011)
After a bit of searching I found that Windows Secure Kit 2011 is browser related (Firefox) and could cause trouble if a user was to install it.
Wondering if this has come up before on F1 and if there are any easy removal options if the worst was to happen?
minster (9180)
1258795 2012-02-13 00:18:00 ....on closing the page?
you weren't using a search link or anything?

this seems to be a very recent recurrence of an "SEO" hijack using redirect techniques to load the scare-ware url instead of an intended page searched for

see here (nakedsecurity.sophos.com)
bevy121 (117)
1258796 2012-02-13 00:28:00 Yes I had earlier done a search to see if the apparent problem had been discussed before but after my search I spent 30 mins or so reading posts before closing.
Also, this same program reappeared the next morning, but this time on my laptop so I do not believe there could be any link between PressF1 and the nastie as I had not been near F1 with the laptop.
minster (9180)
1258797 2012-02-13 08:58:00 Turning off Java scripting tends to allow you to wrestle control back from many of these things.

Easiest way to do it is to switch to a different tab, and disable Java from there, then return to the tab with the bogus page and close it.
Paul.Cov (425)
1