A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » General XP issues or comments
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

O.T. Yahoo pop-up



 
 
Thread Tools Display Modes
  #1  
Old January 20th 18, 12:20 AM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. Yahoo pop-up

I mentioned this before in another post; when
on Yahoo and reading a story, suddenly the page
just went white. I didn't think to take a screenshot
at the time.

Something similar happened again but this
time I did take a screenshot:

http://i63.tinypic.com/2guwfir.jpg

So what is this? A bad attempt at maleware?

Robert
Ads
  #2  
Old January 20th 18, 01:27 AM posted to microsoft.public.windowsxp.general
Paul in Houston TX[_2_]
external usenet poster
 
Posts: 999
Default O.T. Yahoo pop-up

Mark Twain wrote:
I mentioned this before in another post; when
on Yahoo and reading a story, suddenly the page
just went white. I didn't think to take a screenshot
at the time.

Something similar happened again but this
time I did take a screenshot:

http://i63.tinypic.com/2guwfir.jpg

So what is this? A bad attempt at maleware?

Robert


Phishing expedition attempting to get your personal info.
When things like that pop up I use task mgr to kill the browser process.

  #3  
Old January 20th 18, 02:04 AM posted to microsoft.public.windowsxp.general
Paul[_32_]
external usenet poster
 
Posts: 11,873
Default O.T. Yahoo pop-up

Mark Twain wrote:
I mentioned this before in another post; when
on Yahoo and reading a story, suddenly the page
just went white. I didn't think to take a screenshot
at the time.

Something similar happened again but this
time I did take a screenshot:

http://i63.tinypic.com/2guwfir.jpg

So what is this? A bad attempt at maleware?

Robert


That's called scareware, and the phone number leads
to a "Technical Support Scam". They will ask for a
credit card number, charge $200 to it and "pretend"
to clean the computer of the virus.

If you cannot dismiss the window using the corner
of the window, and dialogs keep popping up, use
the control-alt-delete (Task Manager).

In there, locate the browser, like say Firefox, and
kill the N copies you find. Modern Firefox is a multi
process program, so more than one thing may need to be
killed on Windows 7. The browsers that run on WinXP
are less likely to be that generous with EXE entries
and have fewer of them.

Once the browser is killed, you can manually clean
the cache and remove the files in it.

When the browser starts, it will ask if you want
to "restore last session". You do not! If you restore
the last session, you'll get that scareware again.
So you don't want the last session, and you do want
to clean the cache.

Firefox has a "clear data" function for cleaning,
but sometimes I like to do this by hand. Just in
case a javascript has found a way to stay alive in
there.

In any case, using Task Manager, you should be
able to get in control of the computer again.
While the "X" might not work on the Firefox window
with the scareware in place, it's a little harder
for them to escape from Task Manager and killing
the process involved.

Just don't "restore last session", OK ? :-)

Cleaning is for when you have some idea where to look.

C:\Users\User Name\AppData\Local\Mozilla\Firefox\Profiles\xxxxxx xx.default\startupCache

startupCache.8.little and five other files

This covers rare cases where the .little is infected

C:\Users\Bolt Upright\AppData\Local\Mozilla\Firefox\Profiles\xxx xxxxx.default\cache2\entries

many files with long names, delete

The scareware javascript is likely to be one of the
files in this folder. Restoring the session would pull
a fresh copy from the Internet again...

Control Panels : Flash Player : Advanced Tab : Delete all

(you can tick both boxes if you want)

That's a small start at cleaning Firefox.

None of those should affect bookmarks.

HTH,
Paul
  #4  
Old January 20th 18, 03:42 AM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. Yahoo pop-up

I just used my home page to get ride
of it which is about:blank but if that
failed I would use Task Manger as Paul
in Tx.

Hmmmmmm, should I clean the cache anyway?

Thanks,
Robert
  #5  
Old January 20th 18, 05:31 AM posted to microsoft.public.windowsxp.general
Paul[_32_]
external usenet poster
 
Posts: 11,873
Default O.T. Yahoo pop-up

Mark Twain wrote:
I just used my home page to get ride
of it which is about:blank but if that
failed I would use Task Manger as Paul
in Tx.

Hmmmmmm, should I clean the cache anyway?

Thanks,
Robert


Your choice.

If it comes back, you can be more aggressive
the second time.

Paul
  #6  
Old January 20th 18, 11:43 AM posted to microsoft.public.windowsxp.general
J. P. Gilliver (John)[_4_]
external usenet poster
 
Posts: 2,679
Default O.T. Yahoo pop-up

In message , Mark
Twain writes:
I mentioned this before in another post; when
on Yahoo and reading a story, suddenly the page
just went white. I didn't think to take a screenshot
at the time.

Something similar happened again but this
time I did take a screenshot:

http://i63.tinypic.com/2guwfir.jpg

So what is this? A bad attempt at maleware?


Could be femaleware - much worse ... (ducks and runs)

Robert

--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

Gravity is a myth; the Earth sucks.
  #7  
Old January 20th 18, 11:48 AM posted to microsoft.public.windowsxp.general
J. P. Gilliver (John)[_4_]
external usenet poster
 
Posts: 2,679
Default O.T. Yahoo pop-up

In message , Paul
writes:
[]
When the browser starts, it will ask if you want
to "restore last session". You do not! If you restore
the last session, you'll get that scareware again.
So you don't want the last session, and you do want
to clean the cache.

[]
Just don't "restore last session", OK ? :-)

[]
Firefox, at least (at least I assume it still does in the latest version
- I use an old one), when presenting the "restore" option (which I think
it does after two crashes), presents a ticklist of all the tabs you had
open (initially pre-ticked); if you _know_ which one had the malware,
you could try just unticking that one.

Not that clearing the data probably isn't a good idea - but the above
may let you save all the other tabs, if you want to. (I think the "save
all tabs" function I have might be a function of the Tab Mix Plus
add-on; I occasionally use it - usually using a bookmark folder with
today's date - usually after I think I've recovered from something.)
--
J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

Gravity is a myth; the Earth sucks.
  #8  
Old January 21st 18, 01:42 AM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. Yahoo pop-up

I cleaned the cache.

Robert
  #9  
Old January 21st 18, 02:14 AM posted to microsoft.public.windowsxp.general
Paul in Houston TX[_2_]
external usenet poster
 
Posts: 999
Default O.T. Yahoo pop-up

Mark Twain wrote:
I cleaned the cache.

Robert


I like to ctrl-alt-del out of those situations instead of clicking the close X, etc,
because I am sure what the close X or other buttons are programmed to do.
For a while when W10 came out closing the beg screen via the X really meant to
install W10. It made a lot of people quite angry.

  #10  
Old January 22nd 18, 12:01 AM posted to microsoft.public.windowsxp.general
Mark Twain
external usenet poster
 
Posts: 2,402
Default O.T. Yahoo pop-up

I bet it did!

Robert
  #11  
Old January 22nd 18, 12:40 AM posted to microsoft.public.windowsxp.general
Paul in Houston TX[_2_]
external usenet poster
 
Posts: 999
Default O.T. Yahoo pop-up

Mark Twain wrote:
I bet it did!

Robert


I accidentally left "NOT" out of my previous reply.
I am NOT sure what the X does.
 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 05:06 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.