Protection-Check07.com

User Help for Mozilla Firefox
Tish
Guest

Protection-Check07.com

Post by Tish »

On NY Times site - comes up "virus scan" - can't get out - "Protection-Check07.com" - just started with latest Firefox upgrade
User avatar
LIMPET235
Moderator
Posts: 39933
Joined: October 19th, 2007, 1:53 am
Location: The South Coast of N.S.W. Oz.

Re: Protection-Check07.com

Post by LIMPET235 »

Apparently, it's up to the NYT to fix it, since it happens to all browsers.
Do a Google for it & "best-antivirus03".
2 newies out there.
Try Malwarebytes to rid yourself of it.
> http://www.malwarebytes.org/mbam.php
If that doesn't work, go to one of these sites...
> http://bleepingcomputer.com/
> http://www.spywareinfoforum.com/
> http://forum.aumha.org/
> http://forums.tomcoyote.org/index.php?showforum=27
[Ancient Amateur Astronomer.]
Win-10-H/64 bit/500G SSD/16 Gig Ram/450Watt PSU/350WattUPS/Firefox-115.0.2/T-bird-115.3.2./SnagIt-v10.0.1/MWP-7.12.125.

(Always choose the "Custom" Install.)
James P
Guest

Re: Protection-Check07.com

Post by James P »

I just got this on the NYT as well. This is embarrassing for them.
Tim JM
Guest

Re: Protection-Check07.com

Post by Tim JM »

I'm also getting it running my Mac 10.5.8 with Safari 4.0.3. I was a little nervous that I was infected, but the web page that comes up clearly shows it scanning a Windows computer. And I got it today (9/13/09) from the NYT headline e-mail and yesterday as well.
admission
Guest

Re: Protection-Check07.com

Post by admission »

Yeah, I'm using a mac and it made me really nervous. Does my mac now have a virus? Or should I not worry?
Guest
Guest

Re: Protection-Check07.com

Post by Guest »

happened to me yesterday and today - always from NYTimes site. I'm running 10.5.8 on my Mac and it happened with both Safari and Firefox.
Mac attack
Guest

Re: Protection-Check07.com

Post by Mac attack »

I just had the same trouble and hard to reboot and forcequit safari.
Guest
Guest

Re: Protection-Check07.com

Post by Guest »

I also got it twice from the NYTimes site, on my Mac. I force quit Safari both times but may have clicked on cancel; is my computer infected now?
User avatar
Daifne
Moderator
Posts: 123071
Joined: July 31st, 2005, 9:17 pm
Location: Where the Waters Meet, Wisconsin

Re: Protection-Check07.com

Post by Daifne »

Sounds to me like NYTimes.com has been hacked. Nothing you can do about it unless you can contact them and tell them. They need to fix the hack.

On a Mac, you don't have to worry about this.
martyphoto
Posts: 1
Joined: September 13th, 2009, 9:21 am

Re: Protection-Check07.com

Post by martyphoto »

Several minutes ago I went to NY Times site and got this pop-up from this protection-check07.com. I recognized it to be from a a PC and not an Apple format. However it did do I quick scan indicating my Mac was infected. I just don't believe it but I am still wondering if this report was accurate or just bull as I suspect
punchcard
Posts: 9
Joined: January 28th, 2006, 1:20 pm

Re: Protection-Check07.com

Post by punchcard »

I've gotten this twice this morning, once yesterday. Had to kill the FF process (FF 3.5.2) to get out of it. Ran a Malwarebytes scan which didn't find anything... I also found this link: http://www.411-spyware.com/remove-omega-antivir which refers to something that sounds likely, but I didn't find any of the "omega" components described in the article. No other sites have shown any problem, yet...
User avatar
LIMPET235
Moderator
Posts: 39933
Joined: October 19th, 2007, 1:53 am
Location: The South Coast of N.S.W. Oz.

Re: Protection-Check07.com

Post by LIMPET235 »

Mmmmm....
[q]
Spyware Doctor’s free trial installs on your computer and scans your system for any type of threat. If any badware is found, you can register Spyware Doctor for less than $30 to perform system-wide cleaning and protection.
[/q]
Not a very good solution, if you ask me.
Image
[Ancient Amateur Astronomer.]
Win-10-H/64 bit/500G SSD/16 Gig Ram/450Watt PSU/350WattUPS/Firefox-115.0.2/T-bird-115.3.2./SnagIt-v10.0.1/MWP-7.12.125.

(Always choose the "Custom" Install.)
NYTimesReader
Guest

Re: Protection-Check07.com

Post by NYTimesReader »

We have been seeing this kind of problem for 24 hours on the NY Times site, with Firefox popups about both "best-antivirus03.com" (an expired domain), and "protection-check07.com" (domain created on 09/09/09). Here's a description of our most recent encounter. We use Firefox 3.5.3 running on an up to date Linux machine; I did not stick around long enough to read the webpage to see if it actually said it was scanning a windows machine, which we obviously don't have.

"My computer Online Scan - Mozilla Firefox" in title of main window.

modal dialog (other menu items don't work) titled

The page at http:/protection-check07.com says:

with content

Warning!!! Your system requires immediate anti-viruses scan!
Personal Antivirus can perform fast and free virus and malicious
software scan of your computer .

and two buttons, Cancel and OK.

Hit Cancel, then close the tab. You'll also get

modal dialog titled

The page at http:/protection-check07.com says:

with content

Potentially dangerous software. These programs may damage your
computer and steal your private information. Online Security
Checker needs Personal Antivirus components to repair your
computer. Please click Ok to download and install Personal
Antivirus tool.

and OK button.
User avatar
Daifne
Moderator
Posts: 123071
Joined: July 31st, 2005, 9:17 pm
Location: Where the Waters Meet, Wisconsin

Re: Protection-Check07.com

Post by Daifne »

Please do not post live links to sites that are known to be providing malware.
plink1
Guest

Re: Protection-Check07.com

Post by plink1 »

I had same issue with FF 3.5 on Ubuntu 9.04 when I was on home page of NYT.

I followed a suggestion posted on ubuntu forum to move $HOME/.gconfd/saved_state file to foobar, then chmod 000 foobar.
That seems to work.
Locked