Este hilo del foro necesita una solución
Kudos0

Malicious Website plus Pop-Up Script!

al corriente: 19-Oct-2022 | 10:47AM · 25 Respuestas · · Translation:

So, I AM an 81 year old man who, from time-to-time, makes mistakes and then is in over his head.


I was comparing, online, two movie database websites (one was IMB...the other I sadly forgot).
 

I had two google chrome browsers open...for the side-by-side comparison...when suddenly NIS SafeWeb raised the alarm that one of the two websites is malicious (which it DID NOT say when I clicked on the google hyperlink leading to that movie data base site (Green Circle with white checkmark).


I had already bookmarked the "Malicious Website" in my Google Chrome web browser!

There were several overlaying pop-ups which seemed to contain code (script?) (right side of the page)

So, I closed the "Malicious Website," cleared Google Chrome history, ran SMART SCAN = 0 threats, ran Quick Scan = 0 threats, ran Full Scan = 0 threats, and then I ran Malwarebyte's Anti-Maleware (Premium) = 0 threats, and the I ram Norton Power Eraser = 0 threats!

What else can I do/should I do?

I would appreciate any and all advice.  THANK YOU

Respuestas

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 21-Oct-2022 | 11:59AM · Enlace permanente

PLEASE HELP!

So, I AM an 81 year old man who, from time-to-time, makes mistakes and then is in over his head.

I was comparing, online, two movie database websites (one was IMDb...the other I sadly forgot). In order to find out what it would cost me to have the complete HBO series Game of Thrones, Boardwalk Empire, and Black Sails (incomplete...I have some Seasons, but not all).

I had two google chrome browsers open...for the side-by-side comparison...when suddenly NIS SafeWeb raised the alarm that one of the two websites is malicious (which it DID NOT say when I clicked on the google hyperlink leading to that movie data base site (Green Circle with white checkmark).

I had already bookmarked the "Malicious Website" in my Google Chrome web browser (after having spent HOURS on that malicious website)!

To my surprise, after I had exited the malicious website...there were several overlaying pop-ups which seemed to contain code (script?)(right side of the page) 

The Pop-ups, about 5 -7 of them, looked like smart phones (overlapping) with lines of code in the display...there was a x mark (close) symbol next to the smart phone pop-ups, hence I clicked on X.

I have visited the IMDb website dozens of times...they DO NOT have pop-ups in the shape of smart phones (this has to do with the malicious website).

There ALSO was a 400 error code thereafter (IMDb website).

So, I closed the "Malicious Website," cleared Google Chrome history, ran SMART SCAN = 0 threats, ran Quick Scan = 0 threats, ran Full Scan = 0 threats, and then I ran Malwarebyte's Anti-Maleware (Premium) = 0 threats, and then I ran Norton Power Eraser = 0 threats!

It has never happened before that a malicious website has left a souvenire behind (usually its just a malicious website warning and No Further Action Required).

What else can I do/should I do? I AM WORRIED THAT I MIGHT HAVE MISSED SOMETHING, HENCE MY LAPTOP IS NOT SECURE.

I would appreciate any and all advice.  THANK YOU

Kudos2 Estadisticas

Re: Malicious Website plus Pop-Up Script!

al corriente: 21-Oct-2022 | 1:46PM · Enlace permanente

With all the scans you ran finding nothing, I would suggest that your system is OK.

What may have happened is some ads on the site you were visiting were of a malicious nature that redirected your browser to present those windows you saw. Norton does not block redirects, because many sites use them for legitimate purposes. Norton uses them on many of their sites.  What you can do do help protect against these redirects is to install an ad blocker extension in your browser. A couple of these extensions are

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 03-Nov-2022 | 12:46PM · Enlace permanente

THANK YOU ever SO MUCH for responding peterweb!

I AM GLAD that someone responded, to the CRY FOR HELP by an 81 year old Man (analog Guy living in the digital age), on these boards.

I AM SORRY that I did not respond back sooner (my health is NOT so great plus I wanted to use the laptop as little as possible as I felt that it was no longer secure).

So, Norton SafeSearch had given me the green light for the second website, NOT IMDb, and then later Norton reversed itself and said it was a malicious website...after I had that website open/google browser for hours.

"We highly recommend that you do not visit this website!"   ...once again I had been surfing that website for hours working myself from back to front. From Page 38 (movies for sale), to Page 37...Page 36 and so on...until I got to Page 2 and was about to click on Page 1...when Norton warning popped-up.

I closed google browser, deleted the bookmark (malicious webpage) in my google browser...and there suddenly were the Cellphone pop-ups (several of them stacked criss-cross on top of each other with an X top right...so I clicked on the X and they went away)

These Cellphone pop-ups are NOT related to IMDb, but rather the malicious movies foe sale website..

My Concern is that I might have authorized something malicious to land on my laptop, which the scans might not have picked up, and as such my laptop is not secure!

Several years ago I had an expensive DELL desktop...needed tech support from DELL...their tech support INDIA were NOT able to do so via remote assistance...I was told to post my problem on the DELL website and wait for a response.

The DELL website had been hacked...and I ended up with malicious java script on my desktop plus a key logger (at the time I did not realize that because ALL the scans I ran came back clean).

The Malicious Java Script, plus the key logger, caused thousands of dollars to go missing from my bank account.  

My Bank informed me the security breach was at my end, hence it was a complete financial loss on my part.  My Wife needed surgery around that time and I ended taking out a $ 95,000 loan to cover her medical expenses.

This was not a victimless crime!

("Once burned twice shy!")

So, what I have noticed since the incident...

My Norton interface (Device Security) which I always position top right corner of my laptop while I am online...disappears while I am online and I have to open Norton NIS ALL over again...and again...and again. This, prior too, was NEVER the case it stayed open top right corner of screen until I closed it and shut down the laptop.


Could something else have downloaded itself onto my laptop that I have no knowledge of?

Is it damaging (to google browser or my laptop) too bookmark a malicious website? (by accident)

"Sonar?" What is it? Does it come standard with NIS or do I have to buy it separately?

Thank you for the tip regarding AD Blocker!

I appreciate ALL advice/answers good people!

THANK YOU

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 06-Nov-2022 | 10:15AM · Enlace permanente

peterweb,

So, SORRY for getting back too you SO LATE, THANK YOU for responding, and the AD Bloker advice! ;0)

I gave you a Kudos, yet I don't know how to IM you (or otherwise get in touch with you) as I have one/or two follow up questions.

If you have the time and the inclination that is...

You would make an OLD MAN (Analog Guy in the digital age) happy!

Kudos1 Estadisticas

Re: Malicious Website plus Pop-Up Script!

al corriente: 07-Nov-2022 | 6:04AM · Enlace permanente

Could something else have downloaded itself onto my laptop that I have no knowledge of?

Anything is possible. But with the scans you ran, they should have caught anything.

You can ask follow up questions here in this thread. You only need to use the PM system if personal information is needed to be shared.

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 13-Nov-2022 | 11:31AM · Enlace permanente

THANK YOU for responding (once again)  ;o)

So, one of the things which go hand-hand with old age are doctors appointments, hence the tardiness regarding my responding on this Forum (I DO take this issue VERY seriously).

1.) Is it damaging (to google browser or my laptop) too bookmark a malicious website? (by accident)

2.) "Sonar?" What is it? Does it come standard with NIS or do I have to buy it separately?

3.) Would a 100 plus bookmarks increase, in google browser, use up significant memory? (Norton pop-up informed ME I have used up 89% of memory on my laptop, yet when I checked THIS PC it said: 174 mb free of 237 mb...So, why warn ME that I have only 11% left when in fact I've only used up 63 mb?  I have not downloaded anything!

I have noticed, since the incident, that it takes longer to sign-in to my password protected laptop/to load and access Desktop...that webpages are taking longer to load (some wont load at all).  Sometimes I have to restart the laptop because online activity is frozen.

4.) I got a weird message that there is an energy problem with my laptop, yet the battery is 100% charged...and my laptop is hooked up to an AC adaptor/surcharge protector plugged into the wall outlet (same as always)...never got that kind of message before! ("Low power source detected/Your computer will run in reduced perf")

5.) If someone ends up on a malicious website , and said malicious website, leaves something BAD behind...would it only end up/show up in the download folder? IF NOT, then where else on my laptop?

6.) My Norton interface (Device Security) which I always position top right corner of my laptop while I am online...disappears while I am online and I have to open Norton NIS ALL over again ...and again...and again. This, prior too, was NEVER the case it stayed open top right corner of screen until I closed it and shut down the laptop.

THANK YOU, once again, for ALL your patience with me as I appreciate any/and all help and advice GOOD PEOPLE!

Kudos1 Estadisticas

Re: Malicious Website plus Pop-Up Script!

al corriente: 13-Nov-2022 | 4:02PM · Enlace permanente

david S.:

THANK YOU for responding (once again)  ;o)

So, one of the things which go hand-hand with old age are doctors appointments, hence the tardiness regarding my responding on this Forum (I DO take this issue VERY seriously).

1.) Is it damaging (to google browser or my laptop) too bookmark a malicious website? (by accident)

Only if you click on that bookmark. It cannot do anything just sitting there. It is easy to remove the bookmark. Right click on it and click on Delete.

2.) "Sonar?" What is it? Does it come standard with NIS or do I have to buy it separately?

SONAR is the abbreviation for Symantec Online Network for Advanced Response. Unlike virus signatures, SONAR examines the behaviour of applications to decide whether they are malicious.

3.) Would a 100 plus bookmarks increase, in google browser, use up significant memory? (Norton pop-up informed ME I have used up 89% of memory on my laptop, yet when I checked THIS PC it said: 174 mb free of 237 mb...So, why warn ME that I have only 11% left when in fact I've only used up 63 mb?  I have not downloaded anything!

Do not confuse memory and disk storage. The memory warning you are getting is the internal working RAM memory on your computer. Generally 8 - 16GB on modern computers (or more for geeks and gamers).  If you are checking your PC's hard drive space, anything measured in mb is inconsequential given most hard drives are at least 256GB or more.

I have noticed, since the incident, that it takes longer to sign-in to my password protected laptop/to load and access Desktop...that webpages are taking longer to load (some wont load at all).  Sometimes I have to restart the laptop because online activity is frozen.

Coupled with the memory warnings above, that could explain what you are seeing. Are you restarting your computer every few days? That is required to clean out the junk that Windows accumulates as you load and close programs. Be sure you are using the Restart command. Not Shutdown and startup again if you have Windows Fast Startup feature enabled. If you use Windows 8/8.1, 10 or 11, there can be an issue with the Windows Fast Startup feature.. See more information here.

4.) I got a weird message that there is an energy problem with my laptop, yet the battery is 100% charged...and my laptop is hooked up to an AC adaptor/surcharge protector plugged into the wall outlet (same as always)...never got that kind of message before! ("Low power source detected/Your computer will run in reduced perf")

How old is the laptop? As they age, the battery capacity gets reduced. It could also be that the power adaptor being used to power the laptop is starting to fail.

5.) If someone ends up on a malicious website , and said malicious website, leaves something BAD behind...would it only end up/show up in the download folder? IF NOT, then where else on my laptop?

Not likely. That would be one of the first places someone would look for malware that might get downloaded. Malware developers can hide their code anywhere that they have access to. That is why it is a security suggestion to only use a Standard Windows User Account for your daily use. An Administrator account has access to more areas of the PC where things could get hidden.

6.) My Norton interface (Device Security) which I always position top right corner of my laptop while I am online...disappears while I am online and I have to open Norton NIS ALL over again ...and again...and again. This, prior too, was NEVER the case it stayed open top right corner of screen until I closed it and shut down the laptop.

If the system restart I noted above does not also help with this, I'm not sure about this one. Are you sure the Norton interface is not just getting hidden behind your browser?

THANK YOU, once again, for ALL your patience with me as I appreciate any/and all help and advice GOOD PEOPLE!

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 14-Nov-2022 | 10:36AM · Enlace permanente

peterweb,

THANK YOU  for responding!  ;o)

I gave you another kudos...

So, yes. I have confused memory with disk space. My laptop has 8 GB RAM.

1.) What else can I do to free up memory?

2.) If someone ends up on a malicious website , and said malicious website, leaves something BAD behind (as in Norton or MBAM not blocking the attack)...would said something BAD (most likely) be revealed to Norton and MBAM via scans? Or is this insidious BAD stuff SO EVIL that it turned invisible?

I went to Control Panel - User Accounts, yet IT wont allow me to switch from Administrator to Standard. Everytime I click the Standard circle nothing happens (stuck on Administrator).

As for Norton Interface...

Yes, I click on Norton Desktop icon - position the consul top right of laptop screen - click on Google Desktop icon - open google browser/surf web - and when I close Google browser Norton Interface is no longer where I left it (top right corner). Almost as if it is playing hide and seek...this is new/recent!

THANK YOU for your patience with me! ;o)

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 14-Nov-2022 | 12:44PM · Enlace permanente

peterweb,

So, a thought crossed my mind...

My HP laptop is normally connected to a router (via cable/port) because the router contains a firewall - the router, in turn, is hooked up to the modem. Thus increasing cyber security.

Sadly I have a bad back, hence I unplugged the router cable connected to my HP laptop...and took my laptop to the bedroom Wi-Fi (surfed the web while lying on my bed). This took place on the day of the incident (Malicious website), hence lousy timing.

1.) If my HP laptop were to contain something BAD/infected...would that also mean that the router (when connected to the HP laptop via cable/port) could be infected (by proxy)?

THANK YOU for your patience with me! ;o)

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 14-Nov-2022 | 12:54PM · Edited: 14-Nov-2022 | 12:59PM · Enlace permanente

1. Windows looks after your memory use. As you open and close apps and documents, Windows will move things around in RAM memory or virtual memory on your hard drive. As you continue to use the system, some memory may not get released correctly. That is generally what has happened if you get the memory warnings. Restarting your computer on a regular basis (every day or two), will resolve that for you.

2. Although no AV product can protect 100% of the time from the tens of thousands of new malware variants released every day, Norton should catch anything that tries to run on the system that behaves like malware.

If you only have one Windows user account on your system, you don't want to change that only user to a standard user. You still need an Admin account on your system to be able to do needed maintenance on the system. You need to create a new user account and set it up as a Standard user. With the Standard user, there are areas of the system that are not available. So if some hacker did access your system while you are using the Standard user account, those areas that are admin only that the hacker would be interested in would not be available to them.

For the interface getting closed, the only thing I can think of is that when you move the Norton interface to the top right, and then you open Chrome you may have lined up the 'X' that closes Chrome is lined up with the 'X' that closes Norton. If your finger lingers after closing Chrome, it could then close Norton as well. Just a guess here. Why would this be now? Maybe a Windows update changed something.  Try not moving the Norton interface to the very top right, leave it down about an inch or so and see if that stops it closing.

Kudos1 Estadisticas

Re: Malicious Website plus Pop-Up Script!

al corriente: 14-Nov-2022 | 6:16PM · Enlace permanente

1.) If my HP laptop were to contain something BAD/infected...would that also mean that the router (when connected to the HP laptop via cable/port) could be infected (by proxy)?

Only if there was malware aimed at routers. Although not impossible, it is unlikely.

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 15-Nov-2022 | 10:25AM · Enlace permanente

peterweb,

THANK YOU, yet once again for responding! ;o)

So, once again, thank you for informing me/reducing my naivety on IT related matters!

And of, of course, THANK YOU for taking the time to answer my questions and for your good advice.

I, of course, gave you another kudos! ;o)

So, I don't drive, because of excessive/chronic backpain, yet once ever 14 days relatives drive me to a Walmart Superstore here in town to go grocery shopping. I live in a city of 25,000 people and there are only 2 places where you can buy a computer (the Walmart Superstore and Staples). Yes, I am aware that there are more options online...did that a few years ago by buying an expensive Dell tower online...which turned out to be a useless piece of junk...plus USPS/FedEx/UPS have lost packages sent to me.

I had a look at the laptops Staples had in-store (all of them expensive/no sales) and then a relative of mine took me grocery shopping at the Walmart Superstore. I looked around in their electronics section for a good deal (the prices were lower than Staples). I saw an Acer Chromebook 315, 15.6" HD, Intel Celeron N4000, 4GB LPDDR4, Pure Silver, Chrome OS, CB315-3H-C19A for $ 179.90 (none in-stock). My Relative is a thrifty shopper (and has a smart phone) looked up the Acer on Walmart online...for sale $139.00 (free shipping).

So, as 14 November 2022 marked the beginning of Black Friday online sales for Walmart we bought the Acer spontaneously, rather than my consulting with you first, as both of us were frustrated with the Walmart Associates lack of knowledge regarding the products which they sell (computers) while window shopping at Walmart. Really amazing the many questions, of mine, which they could not answer.

So, I DO understand that the Acer Chromebook 315 is NOT a laptop, yet my relative assured me as far as browsing the web and looking up things on google (just as good as a laptop). MY Concern remains CYBERSECURITY (not familiar with Chrome OS). Its a little late now, but is Acer Chromebook 315 compatible with Norton Security Deluxe and MBAM Premium (I extended/purchased an additional 12 months on both AV software)?

I hope this post finds you in good health and of good cheer! :o)

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 15-Nov-2022 | 10:43AM · Enlace permanente

Sorry got the prices mixed up (Walmart Online) the Acer Chromebook 315 is $149 while the Gateway 15.6" Ultra Slim Notebook, FHD, Intel Pentium Silver, 128GB Storage, 4GB Memory, Tuned by THX™ Audio, 1.0MP Webcam, HDMI, Windows 10 S, Microsoft 365 Personal 1-Year Included $139.00 (from $218.90). 

I did not see the fine print on the small screen smart phone...otherwise I would have bought the Gateway (that is a speed record for me regarding "Buyer's Remorse")! ;o(

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 16-Nov-2022 | 4:48AM · Enlace permanente

peterweb,

So, I AM following your advice by restarting the laptop (on a daily basis), yet I have run into a small snag when it comes to creating a Standard User account! ;o(

Control Panel - User Accounts - (Manage Another Account?) - underneath Owner (Administrator) it says "Add a User Account" I am asked for an e-mail address (I dont want to do business with Microsoft...I just want to set up a Standard User Account when I surf the web)

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 16-Nov-2022 | 5:19AM · Enlace permanente

peterweb,

SO SORRY...

I finally had the time to sit down and try to install the adblocker you had recommended...

 https://chrome.google.com/webstore/detail/adblock-plus-free-ad-bloc/cfhd...

However, once I got to the page...nowhere did it say "Click Here" to install (or download).

I AM a luddite! ;o(

Kudos1 Estadisticas

Re: Malicious Website plus Pop-Up Script!

al corriente: 16-Nov-2022 | 9:42AM · Enlace permanente

For the ad blocker, look to the right side of the page beside the ad blocker extension name. On mine, I see a big blue button to Remove from Chrome (because it is already installed ).  Yours should say something like Add to Chrome.

When setting up the Standard User, I believe that Microsoft wants you to use your email address to log into a Microsoft Account to log into your computer. But there is a way to just use a local account. Open Windows Settings > Accounts > Family & other users. Then click on Add someone else to this PC

On the next window, click on I don't have this person's sign-in information.

In the next window click on Add a user without a Microsoft Account.

The next screen allows you to enter a username and password to create a new user account. Enter the information and click on Next.

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 17-Nov-2022 | 11:38AM · Enlace permanente

peterweb,

THANK YOU for "spelling it out for me in plain English" (Standard Account) and also thank you regarding advice on adblocker! ;o)

I, of course, gave you an kudos.

I have a doctor's appointment today, as well as tomorrow, yet I DO want to improve my laptop cybersecurity (as soon as possible).

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 17-Nov-2022 | 12:11PM · Enlace permanente

peterweb,

My Laptop appears to be haunted, or I offended the Techno God, as I cannot seem to be able to set up Standard Account.

I have followed your instructions to the letter, yet once all the information has been filled in (user name, password, security reminder) and I click on NEXT nothing happens (almost as if it were frozen).

I have repeated the process 6 times...always with the sad result.  :o(

Maybe this laptop has been over run by TRULY EVIL malware that turned invisible!

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 18-Nov-2022 | 11:30AM · Enlace permanente

peterweb,

I hope this posting finds you in good health & of good cheer! ;o)

So, your instructions, on how to create a Standard User Account, are straight forward, yet there must be something wrong with my software. Each and every time I enter the new user name, enter password - re-enter password (and answer backup security questions)...and then click on NEXT (the information I entered gets frosted). No confirmation of a second account (or to switch user at sign-in).  Really Weird!

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 20-Nov-2022 | 10:02AM · Enlace permanente

peterweb,

"Wishing YOU a HAPPY THANKSGIVING!" ;o)

Kudos1 Estadisticas

Re: Malicious Website plus Pop-Up Script!

al corriente: 20-Nov-2022 | 10:40AM · Enlace permanente

And a Happy Thanksgiving to you. Being Canadian, we already had ours on October 10. 

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 23-Nov-2022 | 12:50PM · Enlace permanente

peterweb,

"Some of the kindest, most generous, and thoughtful people whom you shall ever meet...are Canadians!" (Robin Williams)

So, I AM beginning to believe that I have some TRULY EVIL malware on my HP laptop that turned invisible, hence ALL the scans could not find said TRULY EVIL malware.

My Laptop keeps freezing while online (close lid - restart)!

As for setting up a Standard User Account (while bypassing Microsoft)...your instructions were straight forward...I followed them to the letter, yet once I was done inputting new user name - password - answer backup security questions - click on NEXT - my entries "frost over", yet there is no congratulations you have successfully set up an additional account!

IT still just says, "OWNER/local account/Administrator."

When I restart the laptop there is ONLY 1 account (rather than 2).

Truly Baffled

I hope your Canadian Thanksgiving, on October 10, was great! ;o)

Kudos1 Estadisticas

Re: Malicious Website plus Pop-Up Script!

al corriente: 25-Nov-2022 | 1:29PM · Enlace permanente

I have asked one of the other gurus here to see if he has any insight into something we have missed.

Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 27-Nov-2022 | 10:16AM · Enlace permanente

David did resetting of your laptop as suggested in one of your other threads, also correct the issue you are about posting here? Just trying to assist per request.  

SA

MS Certified Professional Windows 11 Home 22H2 x 64 build 22621.1702 - Windows 10 Pro x 64 version 22H2 / build 19045.3031 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.4.6 / Opera GX LVL4 (core: 98.0.4759.74) 64 bit-Early Access w/Norton Chrome Extensions
Kudos0

Re: Malicious Website plus Pop-Up Script!

al corriente: 17-Dic-2022 | 5:25PM · Enlace permanente

David can we assist further, has the issue been corrected? When you see "OWNER/local account/Administrator." This means the account name is OWNER ( YOU ), its a local account vice a Microsoft login account, and the account has administrative privileges. 

SA

MS Certified Professional Windows 11 Home 22H2 x 64 build 22621.1702 - Windows 10 Pro x 64 version 22H2 / build 19045.3031 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.4.6 / Opera GX LVL4 (core: 98.0.4759.74) 64 bit-Early Access w/Norton Chrome Extensions

This thread is closed from further comment. Please visit the forum to start a new thread.