Rogue AV

Discussion in 'malware problems & news' started by Dregg Heda, Mar 4, 2010.

Thread Status:
Not open for further replies.
  1. Dregg Heda

    Dregg Heda Registered Member

    Joined:
    Dec 13, 2008
    Posts:
    830
    So I went to this website when I was highjacked and this rogue av popped-up asking to be installed. I couldnt close the page manually so I used the task manager to close it. This should have been enough to prevent infection right? My browser was sandboxed via sbie. Thanks.
     
    Dregg Heda, Mar 4, 2010
    #1
  2. FiOS Dan

    FiOS Dan Registered Member

    Joined:
    May 24, 2006
    Posts:
    89
    Location:
    Boynton Beach. FL
    Believe me you would know by now if your system had been compromised. Based upon my own sad experiences, I bet that of the two defenses you employed Sandboxie is the one that saved your tail.
     
    FiOS Dan, Mar 4, 2010
    #2
  3. Biscuit

    Biscuit Registered Member

    Joined:
    May 26, 2006
    Posts:
    978
    Location:
    Isle of Man
    Using Task Manager to close the window was quick thinking & saved your bacon. Never trust a "cancel" button from a fraudster! :cool:
     
    Biscuit, Mar 5, 2010
    #3
  4. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    You could also right click Sandboxie's tray icon and selected terminate programs then delete contents as well.
     
    Franklin, Mar 5, 2010
    #4
  5. Dregg Heda

    Dregg Heda Registered Member

    Joined:
    Dec 13, 2008
    Posts:
    830
    Yea it was my fear that the "cancel" button would authorise the install as well. Thankfully the task manager came through for me!
     
    Dregg Heda, Mar 5, 2010
    #5
  6. Dregg Heda

    Dregg Heda Registered Member

    Joined:
    Dec 13, 2008
    Posts:
    830
    Thats a great idea Franklin, thanks!
     
    Dregg Heda, Mar 5, 2010
    #6
  7. Searching_ _ _

    Searching_ _ _ Registered Member

    Joined:
    Jan 2, 2008
    Posts:
    1,988
    Location:
    iAnywhere
    If your interested in seeing an analysis of fake av's, then..
    http://blog.damballa.com/?p=578
    Aslo...
    http://www.damballa.com/research/aurora/
     
    Searching_ _ _, Mar 9, 2010
    #7
  8. andyman35

    andyman35 Registered Member

    Joined:
    Nov 2, 2007
    Posts:
    2,336
    Very interesting read there Searching.:thumb: :thumb:
     
    andyman35, Mar 10, 2010
    #8
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...