1:21 p.m.
F14
Every so often I get one of these DAMN Windows Virus testers while
Online with Firefox and I can't stop it , I have to do a
ctrl-alt-backspace to get out of it. and even tho I long back in Firefox
wants to automatically restart the test , without asking me if I want to
Restore or Start New Session.
How can I prevent Firefox from Starting these tests ? I don't want to
change any settings that Will affect any other web site
It does not make any difference what Website your on it's just pops up
and starts
1:41 p.m.
Jim wrote:
F14
Every so often I get one of these DAMN Windows Virus testers while
They aren't actually doing anything. Simply set your preference
about downloading always to ask you where to put things. Then, when
it "finds Windows viruses" on your Linux machine, and starts to
download the .EXE for auto execution, you'll get a pop up window
asking where to put it. At that point, you can close all the
relevant windows, and no harm done.
Mike
--
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Oppose globalization and One World Governments like the UN.
This message made from 100% recycled bits.
You have found the bank of Larn.
I speak only for myself, and I am unanimous in that!
1:11 p.m.
On 12/18/2010 02:21 PM, Jim wrote:
F14
Every so often I get one of these DAMN Windows Virus testers while
Online with Firefox and I can't stop it , I have to do a
ctrl-alt-backspace to get out of it. and even tho I long back in Firefox
wants to automatically restart the test , without asking me if I want to
Restore or Start New Session.
When you see the Restore or Start New Session, you can remove a
check-mark from any window/tab you don't want restored. Its as simple
as that. Remove the check-mark, and the window won't come back.
Problem solved (for now).
Just to clear up a few things, they are *not* Windows Virus Testers.
They are a carefully crafted attempt to get you to download their
malware to your (supposedly) Windows computer. I actually get a kick
out of them, especially the C: portion of those windows, as they look
like a Windows program running on my Linux system. Too Funny.
We got the PopUp windows problem solved. Now we have to get the "close
that window without running (or opening) something else" problem solved.
--
Kevin J. Cummings
kjchome(a)verizon.net
cummings(a)kjchome.homeip.net
cummings(a)kjc386.framingham.ma.us
Registered Linux User #1232 (http://counter.li.org)
1:29 p.m.
On Sat, 18 Dec 2010 14:21:37 -0500
Jim wrote:
How can I prevent Firefox from Starting these tests ?
I have no idea what a Windows Virus Test is or how it's relevant to Linux, but
if it's some kind of a automated advertisement or something similar to that you
should look into noscript (firefox plugin) and privoxy (ad filtering proxy).
--
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com
2:27 p.m.
On Saturday, December 18, 2010 02:21:37 pm Jim wrote:
It does not make any difference what Website your on it's just
pops up
and starts
More information about these 'surf-by' infection agents:
http://blog.webroot.com/2009/11/25/fakealerts-building-a-better-mousetrap/
7:14 a.m.
From: "Jim" <binarynut(a)comcast.net>
Sent: Saturday, 2010/December/18 13:12
On 12/18/2010 03:56 PM, Joe Zeff wrote:
> On 12/18/2010 11:29 AM, Frank Cox wrote:
>> I have no idea what a Windows Virus Test is or how it's relevant to
>> Linux, but
>> if it's some kind of a automated advertisement or something similar to
>> that
> It's an attempt to trick you into installing malware. Not only does it
> always find "infections," even if you try to close the download box or
> click on Cancel, it starts the download. Of course, it's all Windows
> specific and Firefox (well, my copy, at least) won't run any program
> without asking, but getting rid of it can be a problem.
>
> Try this: close Firefox, then use Ctrl-F2 to bring up a command line and
> type in the url of your home page. This should open Firefox without
> going back to the attack site.
This Virus Tester won't allow me to shut down Firefox, no matter what I
click on. crtl-alt-backspace is the the only way out.
Er, Jim, think a moment. {^_-} You are out of FireFox after the ctrl-alt-
backspace, right? So log back in and use the ctrl-F2 trick Joe suggested.
That should work unless you have FireFox automatically start up when you
boot. If you did this is your punishment for doing so. {^_-}
Use the kill -9 on FireFox trick others have mentioned. Then the ctrl-f2
trick.
{^_^}
9:38 a.m.
On 12/18/2010 03:12 PM, Jim wrote:
On 12/18/2010 03:56 PM, Joe Zeff wrote:
> On 12/18/2010 11:29 AM, Frank Cox wrote:
>> I have no idea what a Windows Virus Test is or how it's relevant to Linux,
but
>> if it's some kind of a automated advertisement or something similar to that
> It's an attempt to trick you into installing malware. Not only does it
> always find "infections," even if you try to close the download box or
> click on Cancel, it starts the download. Of course, it's all Windows
> specific and Firefox (well, my copy, at least) won't run any program
> without asking, but getting rid of it can be a problem.
>
> Try this: close Firefox, then use Ctrl-F2 to bring up a command line and
> type in the url of your home page. This should open Firefox without
> going back to the attack site.
This Virus Tester won't allow me to shut down Firefox, no matter what I
click on. crtl-alt-backspace is the the only way out.
Open a terminal windows and type "killall firefox"
--
-- Steve
4:34 p.m.
Lamar Owen wrote:
On Saturday, December 18, 2010 02:21:37 pm Jim wrote:
> It does not make any difference what Website your on it's just pops up
> and starts
>
More information about these 'surf-by' infection agents:
http://blog.webroot.com/2009/11/25/fakealerts-building-a-better-mousetrap/
I get this all the time and it tells me I am infected by several viruses.
Scam to say the least.
I take not of the addresses that they are coming from and block them in
firefox
3:29 p.m.
On 12/18/2010 01:12 PM, Jim wrote:
This Virus Tester won't allow me to shut down Firefox, no matter
what I
click on. crtl-alt-backspace is the the only way out.
Try adding Force Quit to one of your panels. Then, if this happens
again, click on it. You'll get a little popup window that tells you to
click on the program you want to close, or Esc to exit. Click on the
Firefox window, confirm that you really want to force quit and Bob's
your uncle.
3:23 p.m.
On Sat, 2010-12-18 at 16:12 -0500, Jim wrote:
On 12/18/2010 03:56 PM, Joe Zeff wrote:
> On 12/18/2010 11:29 AM, Frank Cox wrote:
>> I have no idea what a Windows Virus Test is or how it's relevant to Linux,
but
>> if it's some kind of a automated advertisement or something similar to that
> It's an attempt to trick you into installing malware. Not only does it
> always find "infections," even if you try to close the download box or
> click on Cancel, it starts the download. Of course, it's all Windows
> specific and Firefox (well, my copy, at least) won't run any program
> without asking, but getting rid of it can be a problem.
>
> Try this: close Firefox, then use Ctrl-F2 to bring up a command line and
> type in the url of your home page. This should open Firefox without
> going back to the attack site.
This Virus Tester won't allow me to shut down Firefox, no matter what I
click on. crtl-alt-backspace is the the only way out.
Do you have the noscript plugin? If not, install it and use it.
poc
3:22 p.m.
On Sat, 18 Dec 2010 16:12:06 -0500
Jim wrote:
This Virus Tester won't allow me to shut down Firefox, no matter
what I
click on. crtl-alt-backspace is the the only way out.
killall firefox
killall -9 firefox
--
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com
3:12 p.m.
On 12/18/2010 03:56 PM, Joe Zeff wrote:
On 12/18/2010 11:29 AM, Frank Cox wrote:
> I have no idea what a Windows Virus Test is or how it's relevant to Linux, but
> if it's some kind of a automated advertisement or something similar to that
It's an attempt to trick you into installing malware. Not only does it
always find "infections," even if you try to close the download box or
click on Cancel, it starts the download. Of course, it's all Windows
specific and Firefox (well, my copy, at least) won't run any program
without asking, but getting rid of it can be a problem.
Try this: close Firefox, then use Ctrl-F2 to bring up a command line and
type in the url of your home page. This should open Firefox without
going back to the attack site.
This Virus Tester won't allow me to shut down
Firefox, no matter what I
click on. crtl-alt-backspace is the the only way out.
2:56 p.m.
On 12/18/2010 11:29 AM, Frank Cox wrote:
I have no idea what a Windows Virus Test is or how it's relevant
to Linux, but
if it's some kind of a automated advertisement or something similar to that
It's an attempt to trick you into installing malware. Not only does it
always find "infections," even if you try to close the download box or
click on Cancel, it starts the download. Of course, it's all Windows
specific and Firefox (well, my copy, at least) won't run any program
without asking, but getting rid of it can be a problem.
Try this: close Firefox, then use Ctrl-F2 to bring up a command line and
type in the url of your home page. This should open Firefox without
going back to the attack site.
1:49 p.m.
On Saturday, December 18, 2010 02:21:37 pm Jim wrote:
It does not make any difference what Website your on it's just
pops up
and starts
At least it doesn't infect your PC with the 'fake Windows AntiVirus' virus.
I've seen these a time or two, from seemingly random websites; one of them was a
technical blog about the merits of JFS versus XFS. I have a screenshot of that one.
Yesterday I found another. In my case, I hit the X for that tab, and then hit ok (since
the systempack107_2089.exe that that downloaded won't autorun on Linux; and you really
don't want to set up autorun through wine...:-)). And it went away.
Got the .exe though for future analysis.
That same advice on Windows produces a tenacious infection of a rogue antivirus program
that is in reality a virus itself that tries to scam you out of money for buying a
subscription.
It's just a matter of time before the rogue antivirus writers figure out how to make
this work with Linux.....unfortunately. Time for sandboxing of Firefox and other apps
that can run that mess. And while such a virus can't overwrite system files if
you're browsing as a normal user, it certainly *can* infect your own files, such as
.bashrc for one, which would produce essentially the same effect as on Windows (and with
the default F14 setup disallowing root logins, you need to make a second 'rescue'
user to remove such nasties without reverting to a text console and root).
6:46 p.m.
On Sat, 2010-12-18 at 14:49 -0500, Lamar Owen wrote:
and with the default F14 setup disallowing root logins, you need to
make a second 'rescue' user to remove such nasties without reverting
to a text console and root
When I've set up systems, I've always set up more than one user. Even
though it's highly unlikely that anyone else would be using *my* PC,
it's useful for testing and debugging (you have an unsullied account to
test against, or one that you don't mind deliberately screwing up).
--
[tim@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686
Don't send private replies to my address, the mailbox is ignored. I
read messages from the public lists.
4844
days inactive
4876
days old
14 comments
11 participants
participants (11)
-
Frank Cox -
jdow -
Joe Zeff -
Kevin Cummings -
Lamar Owen -
Michael Miles -
Mickey -
Mike McCarty -
Patrick O'Callaghan -
SternData -
Tim