Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Fell for Firefox "missing font" scam
Message
<blockquote data-quote="MarkPhil" data-source="post: 699619" data-attributes="member: 68611"><p>I visited a webpage where the text wasn't rendering, and got a popup notification in Firefox that said I needed to install a missing font. I downloaded the file (ttf.js) and ran it (this was not smart, I know—in my defense, this looked much more legit than your typical virus scam, but still...) The file disappeared after I ran it and I can find no trace of it.</p><p></p><p>Shortly thereafter i got a "flyout" notification from Windows Defender that a threat had been detected. I clicked on the notification but didn't get any additional information. I also got a message box notification about a security threat—I don't remember the file path it mentioned, but it had something to do with Xbox (which I've never used).</p><p></p><p>Naturally I started Googling and discovered that what I'd downloaded was malware. I ran a full Windows Defender scan, and installed Malwarebytes, Malwarebytes anti-rootkit (based on <a href="https://malwaretips.com/threads/accidentally-installed-chrome_font-exe-and-cant-install-most-removal-programs-like-malwarebytes-etc.67909/" target="_blank">this thread</a>), Zemana, HitmanPro, and AdwCleaner. All of them found no threats, and I haven't noticed any unusual behavior on my machine. But I'm worried because I also found a recent <a href="http://www.ibtimes.co.uk/dont-fall-this-missing-font-scam-spreading-malware-chrome-firefox-browsers-1637893" target="_blank">article</a> saying that many AV programs don't recognize this malware (although I don't know whether that refers just to the initial file I downloaded or to the various things the malware installs when you run it). </p><p></p><p>So either this is an very clever virus that has slipped past all of these AV tools or else I got extremely lucky and my computer hasn't been infected. Windows clearly picked up that something was amiss, but is it possible it neutralized the threat before any damage was done? Do the attached logs give any clues? </p><p></p><p>Many thanks for any advice.</p></blockquote><p></p>
[QUOTE="MarkPhil, post: 699619, member: 68611"] I visited a webpage where the text wasn't rendering, and got a popup notification in Firefox that said I needed to install a missing font. I downloaded the file (ttf.js) and ran it (this was not smart, I know—in my defense, this looked much more legit than your typical virus scam, but still...) The file disappeared after I ran it and I can find no trace of it. Shortly thereafter i got a "flyout" notification from Windows Defender that a threat had been detected. I clicked on the notification but didn't get any additional information. I also got a message box notification about a security threat—I don't remember the file path it mentioned, but it had something to do with Xbox (which I've never used). Naturally I started Googling and discovered that what I'd downloaded was malware. I ran a full Windows Defender scan, and installed Malwarebytes, Malwarebytes anti-rootkit (based on [URL='https://malwaretips.com/threads/accidentally-installed-chrome_font-exe-and-cant-install-most-removal-programs-like-malwarebytes-etc.67909/']this thread[/URL]), Zemana, HitmanPro, and AdwCleaner. All of them found no threats, and I haven't noticed any unusual behavior on my machine. But I'm worried because I also found a recent [URL='http://www.ibtimes.co.uk/dont-fall-this-missing-font-scam-spreading-malware-chrome-firefox-browsers-1637893']article[/URL] saying that many AV programs don't recognize this malware (although I don't know whether that refers just to the initial file I downloaded or to the various things the malware installs when you run it). So either this is an very clever virus that has slipped past all of these AV tools or else I got extremely lucky and my computer hasn't been infected. Windows clearly picked up that something was amiss, but is it possible it neutralized the threat before any damage was done? Do the attached logs give any clues? Many thanks for any advice. [/QUOTE]
Insert quotes…
Verification
Post reply
Top