Author |
Topic: 20 Rapid Hits: Win32:Swizzor-gen [Trojan] |
Chip Fossa
From: Monson, MA, USA (deceased)
|
Posted 12 Apr 2006 1:35 pm
|
|
Just about 1/2 hour ago I was bombarded in rapid succession of this Swizzor virus.
Avast anti-virus picked it up with a big warning flag and a siren blast. As soon as I clicked on DELETE or SEND TO VIRUS CHEST, another Trojan would pop up. 20 in all. I've never seen this before. Was scary.
Things seemed to have calmed down now.
Should I delete these viruses from the CHEST?
They are mostly an .exe file.
These all occurred after I downloaded and installed the Firefox anti-animation add-on.
Uclick was one of the recognizable Trojan files. I use Uclick for some Xword puzzles.
Maybe just a coincidence. |
|
|
|
Wiz Feinberg
From: Mid-Michigan, USA
|
Posted 12 Apr 2006 4:41 pm
|
|
Yes, delete the viruses.
What is the name of that Firefox extension? I want to look it up and investigate to see if anybody else has reported a trojan in the download.
------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices
[This message was edited by Wiz Feinberg on 12 April 2006 at 05:41 PM.] |
|
|
|
Fred Shannon
From: Rocking "S" Ranch, Comancheria, Texas, R.I.P.
|
Posted 12 Apr 2006 9:36 pm
|
|
Here you go Wiz:
C:\Program Files\Mozilla Firefox\plugins\npclntax.dll is infected with Adware.ZangoSearch
caught it with Symantec
------------------
"From Truth, Justice is Born"--Quanah Parker-1904
|
|
|
|
Chip Fossa
From: Monson, MA, USA (deceased)
|
Posted 13 Apr 2006 1:40 am
|
|
Actually, fellas, I got wind of this Firefox anti-animation in b0b's post about it, right here.
I was suspicious of it and was going to remove it from the Firefox option/prefences or wherever it's listed, but figured the damage was already done.
The anti-animation definitely blocks out Macromedia. I now have to click on a "go" button to allow MM to work.
The reason I asked about deleting those CHEST files, was I wanted to make sure they weren't attached to someting else and that I might mess up.
Thanks Wiz, and Fred. |
|
|
|
b0b
From: Cloverdale, CA, USA
|
Posted 13 Apr 2006 6:36 am
|
|
I use ZoneAlarm Pro and Symantec Anti-virus. I haven't seen anything unusual since installing FlashBlock on my PC.
FlashBlock is a Firefox Extension. AFAIK, there's never been a report of a Firefox Extension carrying a trojan, and I certainly wouldn't expect a download from mozdev.org to be tainted. I guess anything's possible, though.
------------------
Bobby Lee
-b0b- quasar@b0b.com
System Administrator
My Blog |
|
|
|
Chip Fossa
From: Monson, MA, USA (deceased)
|
Posted 13 Apr 2006 10:47 am
|
|
b0b,
Yeah, that's the url I clicked on > flashlock.mozdev.org < and clicked on the
"install flashblock 1.5.1" in the green rectangle.
I got scared cuz it looked like the repeats were just going to go on forever, and looked as tho, maybe, Avast wasn't really working. But, it was.
Everything today, so far, is OK |
|
|
|