465315 - Malware Webpage

Status: RESOLVED WORKSFORME

(Firefox :: Security, defect)

Description

[yadumba]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4

On clicking this webpage(found in google search), it pops up a virus scan, directs to an unknown website.
(i'm no geek)

Reproducible: Always

Steps to Reproduce:
1.Google for "accounting crosswords stockholders equity".
2.Find and click the above webpage, given in URL.
3.
Actual Results:  
-Pops up a message giving a warning for virus attack and asking for virus scan.
-if pressed ok, goes on to launch a virus scan window.
-if pressed cancel, directs to an unknown antivirus webpage.

Expected Results:  
It should open the webpage without any popups.

Sort of malware. 
Same webpage when opened in IE7 doesn't behave like this.
When I found & clicked this webpage first time, and then after canceling and closing, it started to underline each letter i typed in Firefox.

Comment 1

[Tyler Downer [He/Him]]

This is not a problem for me. Please give more specifics. This seems like the website is simply at fault.

Comment 2

[Daniel Veditz [:dveditz]]

There are a couple of different "scareware" ads that popup fake anti-virus scans and try to sell their security solution to the (imaginary) problem. Those are pure social-engineering and aren't doing anything to hack you (they are not really scanning your system, it's all fake).

It sounds like you're saying it evaded our popup blocker, which is annoying and a bug we'd like to fix if we can capture the ad and examine what they're doing.