Windows 10: How can you get a virus by just visting a web page & not clicking...?

How can you get a virus by just visiting a web page & not clicking anything? To top it off, I am using Firefox 64 bit. That suppose to provided better security.

Category: Trojan

Description: This program is dangerous and executes commands from an attacker.

Recommended action: Remove this software immediately.

Items:
file:C:\Users\user name\AppData\Local\Mozilla\Firefox\Profiles\un68b6ch.default\cache2\entries\76D1F107391DACB900F6C13F EE93B2DBA73CC107


It was detected & removed by Microsoft security essentials in windows 7 but I will restore from back up & hope this doesn't happen again. I am beginning to dislike computers. Just because you visit a medical site you shouldn't get viruses.

Marking this solved for now, I am going to restore from a backup image.


Edit
After restoring my image.
I did a full system scan using MSE in windows 7 & Defender in Windows 10 nothing found.
I also scanned with Malwarebytes also nothing found. Yes, I checked the root kit detector option.

At least, I know my restore image is clean.

:)

 

Belle - can you add a Web page Bookmark as a shorcut on dektop?

Belle - can you add a Web page Bookmark as a shorcut on dektop?



I only see two choces add Widget or add shortcut and shortcut only gives you list of apps



On Anna i had a BBC News rss feed as widget for example



and i would like shortcut to bbc iplayer webpage etc.

 

Belle - can you add a Web page Bookmark as a shorcut on dektop?

I am also unable to find the way to create a shortcut to an existing bookmark.

 

I may be wrong, but if it is embedded in a jpg or a script...something that loads/runs when the web page loads, that's what can bring that in to you system.

 

As soon as you went to that site, you did, in fact "click" on it, just by going there. Cookie, anyone?

 

Absolutely correct. Dozens of facts about your system/browser will have already been revealed. Which probably includes your WAN IP address if a VPN/TOR was not employed.

 

DeconFrost had the much more accurate answer as far as auto scripting dropping bugs on you as soon as you hit a bad site! This is one of the main reasons I tell people to go with av programs that offers Internet Security type features like web filtering which will automatically block suspect sites on the spot! In fact on some sites found clean but simply a pop up for a download I have to shut the av software down entirely!

Web filtering and an effective firewall are two things that help add multiple layers of protection since most bugs come from where? The web! If you are getting hit it means you lack adequate filters!

 

Night Hawk

I am wondering if that medical site even knows they are infected. I notice there were some comments on that page, unless people don't care they are infected. I do, because I do banking but I do use a separate Firefox profiles for that.

I also take this to mean 64 bit browsers are not more secure than a 32 but browser. Which brings up a interesting theory. Instead of 64 bit systems. Wouldn't it be better to use 32 bit system and add Physical Address Extension (PAE) to access memory above the 4 gb ram.

 

Won't work.

Since about XP SP2 the use of PAE will NOT allow access to RAM above 4 GB. PAE will allow the CPU to access RAM over 4 GB but that does you no good unless the OS will use it. All modern client versions of Windows are specifically designed to ignore RAM above the 4 GB mark and no application can use it.

In the early days of XP Microsoft discovered that many third party device drivers behaved very badly in an environment with over 4 GB RAM. It makes no difference to applications. So from about XP SP2 the kernel ignores RAM above 4 GB and that has not changed in more recent versions of Windows.

 

A little off topic. I take it certain puppy Linux operating system distros are specifically built to use PAE

PuppyLinux: PAE (Physical Address Extention)

I couldn't get puppy slaco to work on my system. Actually, no slackware linux would work or work well on my system.

unfortunately, I don't remember if I was able to use puppy PAE distro, it been awhile since I tested those. I don't link running as root.

 

With Vista, 7, 8 definitely with Vista and 7 while still dual booting Vista with the 7 beta builds back then both 32bit installs would see anything over 3.571gb mapped out to hardwares automatically while the 64bit 7 beta saw full access less what Windows takes up as well as your start ups to the 4gb total. That would have been the perfect op there for comparing the 32bit 10 on to see where the mapping either remained identical or saw a difference.

Now for MS Security Essential reporting a dropped trojan upon reaching a medical site of all places that was either a false positive typical of the MS SE or you picked it up just prior to going to that particular site and suddenly seeing it finally getting flagged when it tried to come to life. What I was referring to about being nailed upon first arriving at some strange new site happened when the Bing search engine was first introduced and when running a search and the results came up I clicked on one of the first links and got whamied while still running with AVG which lacked any web filtering.

The web site was specifically geared to bug bomb new arrivals on the spot apparently while professionals tend to look after medical and other commercial sites where no one bug bombs you but might see things simply not work at the site itself which is what gets effected when infected. The server information gets a bit trashed.

 

I would upload that file to VirusTotal and see if it might be a FP.

Infected ads and malicious scripting will hit you upon arrival, especially if it can take advantage of Flash or Java which is not up-to-date and/or set as "Always Activate" in the FF browser. I always set them to "Ask to Activate", then install AdBlock Plus add-on, and Malwarebytes AntiExploit, and CryptoPrevent.

 

It's called a fly by or drive by virus. Someone has a hidden macro embedded in the page that initiates the download action just by going there. You are unaware of this until the virus shows up.

NoScript is a good plug in to deal with this sort of thing. It blocks all scripts until you allow them. Of course, you will have to allow scripts for sites to work, like YouTube when you go there. The trade off is that you have a measure of protection against hidden nasties.

NoScript - JavaScript/Java/Flash blocker for a safer Firefox experience! - what is it? - InformAction

 

That's one thing I never have to worry about here. Formerly Sunbelt and now GFI I decided to follow the advice someone passed along about 5yrs. back and give VIPRE Internet Security a try. As a result I ended finally going with the life time license a year ago after running a few 2yr. subscription when that offer became available.

As far as running into sites with scripted bugs laying in wait for your arrival that should be the prime indication you are dealing with an untrustworthy site rather then any place you would want to rely! A legit site will see that things are secure from hackers as well as intentional malwares while unscrupulous sites will plant bugs like spywares or ad bots on you to squeeze what they can out of you if possible.

One of the main of the main reasons for staying with just the one av software and not running 10 of them is it does have an effective web filtering process which picks up on any intentional malicious coding as well as being connected direct to the ThreatTrack site and the continual updated data base there. Actually I end up needing to shut VIPRE down at times since it can be a bit too overprotective just because a few sites aren't matching a criteria particularly when going to download some new program to look over.

 

I don't know which browser you use but I use FireFox and I have an extension called Wot and when you type something you are looking for and all the links come up then wot puts a green circle beside the links that are Good and a red or dark circle beside links that are bad .if you google "wot web of trust" it will tell you all about it.