MozillaZine

Protection-Check07.com

User Help for Mozilla Firefox
Tish
Guest
 

Post Posted September 13th, 2009, 7:35 am

On NY Times site - comes up "virus scan" - can't get out - "Protection-Check07.com" - just started with latest Firefox upgrade

LIMPET235
Moderator

User avatar
 
Posts: 38454
Joined: October 19th, 2007, 1:53 am
Location: The South Coast of N.S.W. Oz.

Post Posted September 13th, 2009, 7:49 am

Apparently, it's up to the NYT to fix it, since it happens to all browsers.
Do a Google for it & "best-antivirus03".
2 newies out there.
Try Malwarebytes to rid yourself of it.
> http://www.malwarebytes.org/mbam.php
If that doesn't work, go to one of these sites...
> http://bleepingcomputer.com/
> http://www.spywareinfoforum.com/
> http://forum.aumha.org/
> http://forums.tomcoyote.org/index.php?showforum=27
Ancient Amateur Astronomer
Win-7-HP/Intel® DualCore-2.0GHz/500G HDD/4 Gig Ram/550Watt PSU/350WattUPS/Firefox-20.0-57.0-61.0-62.0/T-bird-2.0.0.24/SnagIt-v10.0.1/MWP-7.11.0.
RadioYachting. (Always choose the "Custom" Install.)

James P
Guest
 

Post Posted September 13th, 2009, 8:41 am

I just got this on the NYT as well. This is embarrassing for them.

Tim JM
Guest
 

Post Posted September 13th, 2009, 8:47 am

I'm also getting it running my Mac 10.5.8 with Safari 4.0.3. I was a little nervous that I was infected, but the web page that comes up clearly shows it scanning a Windows computer. And I got it today (9/13/09) from the NYT headline e-mail and yesterday as well.

admission
Guest
 

Post Posted September 13th, 2009, 8:52 am

Yeah, I'm using a mac and it made me really nervous. Does my mac now have a virus? Or should I not worry?

Guest
Guest
 

Post Posted September 13th, 2009, 8:58 am

happened to me yesterday and today - always from NYTimes site. I'm running 10.5.8 on my Mac and it happened with both Safari and Firefox.

Mac attack
Guest
 

Post Posted September 13th, 2009, 9:14 am

I just had the same trouble and hard to reboot and forcequit safari.

Guest
Guest
 

Post Posted September 13th, 2009, 9:19 am

I also got it twice from the NYTimes site, on my Mac. I force quit Safari both times but may have clicked on cancel; is my computer infected now?

Daifne
Moderator

User avatar
 
Posts: 123038
Joined: July 31st, 2005, 9:17 pm
Location: Where the Waters Meet, Wisconsin

Post Posted September 13th, 2009, 9:32 am

Sounds to me like NYTimes.com has been hacked. Nothing you can do about it unless you can contact them and tell them. They need to fix the hack.

On a Mac, you don't have to worry about this.

martyphoto
 
Posts: 1
Joined: September 13th, 2009, 9:21 am

Post Posted September 13th, 2009, 9:37 am

Several minutes ago I went to NY Times site and got this pop-up from this protection-check07.com. I recognized it to be from a a PC and not an Apple format. However it did do I quick scan indicating my Mac was infected. I just don't believe it but I am still wondering if this report was accurate or just bull as I suspect

punchcard
 
Posts: 9
Joined: January 28th, 2006, 1:20 pm

Post Posted September 13th, 2009, 9:53 am

I've gotten this twice this morning, once yesterday. Had to kill the FF process (FF 3.5.2) to get out of it. Ran a Malwarebytes scan which didn't find anything... I also found this link: http://www.411-spyware.com/remove-omega-antivir which refers to something that sounds likely, but I didn't find any of the "omega" components described in the article. No other sites have shown any problem, yet...

LIMPET235
Moderator

User avatar
 
Posts: 38454
Joined: October 19th, 2007, 1:53 am
Location: The South Coast of N.S.W. Oz.

Post Posted September 13th, 2009, 10:02 am

Mmmmm....
[q]
Spyware Doctor’s free trial installs on your computer and scans your system for any type of threat. If any badware is found, you can register Spyware Doctor for less than $30 to perform system-wide cleaning and protection.
[/q]
Not a very good solution, if you ask me.
Image
Ancient Amateur Astronomer
Win-7-HP/Intel® DualCore-2.0GHz/500G HDD/4 Gig Ram/550Watt PSU/350WattUPS/Firefox-20.0-57.0-61.0-62.0/T-bird-2.0.0.24/SnagIt-v10.0.1/MWP-7.11.0.
RadioYachting. (Always choose the "Custom" Install.)

NYTimesReader
Guest
 

Post Posted September 13th, 2009, 10:04 am

We have been seeing this kind of problem for 24 hours on the NY Times site, with Firefox popups about both "best-antivirus03.com" (an expired domain), and "protection-check07.com" (domain created on 09/09/09). Here's a description of our most recent encounter. We use Firefox 3.5.3 running on an up to date Linux machine; I did not stick around long enough to read the webpage to see if it actually said it was scanning a windows machine, which we obviously don't have.

"My computer Online Scan - Mozilla Firefox" in title of main window.

modal dialog (other menu items don't work) titled

The page at http:/protection-check07.com says:

with content

Warning!!! Your system requires immediate anti-viruses scan!
Personal Antivirus can perform fast and free virus and malicious
software scan of your computer .

and two buttons, Cancel and OK.

Hit Cancel, then close the tab. You'll also get

modal dialog titled

The page at http:/protection-check07.com says:

with content

Potentially dangerous software. These programs may damage your
computer and steal your private information. Online Security
Checker needs Personal Antivirus components to repair your
computer. Please click Ok to download and install Personal
Antivirus tool.

and OK button.

Daifne
Moderator

User avatar
 
Posts: 123038
Joined: July 31st, 2005, 9:17 pm
Location: Where the Waters Meet, Wisconsin

Post Posted September 13th, 2009, 10:08 am

Please do not post live links to sites that are known to be providing malware.

plink1
Guest
 

Post Posted September 13th, 2009, 11:00 am

I had same issue with FF 3.5 on Ubuntu 9.04 when I was on home page of NYT.

I followed a suggestion posted on ubuntu forum to move $HOME/.gconfd/saved_state file to foobar, then chmod 000 foobar.
That seems to work.

Return to Firefox Support


Who is online

Users browsing this forum: No registered users and 10 guests