Is Mozilla Firefox safe to use? I got Trojan Horses!

debitcardmayhem

Tiggywood wrote: »

Thanks. I have no idea what you mean by NoScript, but I think I will try Avast, would I need to uninstall AVG first? What does Malwarebytes do differently (in a nutshell for a non-technie!) I have that as I downloaded it when I panicked when I saw the Trojan horses.

Noscript can be installed in Firefox as an addon - select tools/addons search for noscript, it stops scripts from running unless you allow them, it is a bit of a learning curve though.
Malwarebytes is jus another tool to use alongside your Antivirus program, as a precaution or remedy probably better describes it. If you have run a scan with it in your "panic" then you could still post the log here for for us to view.
Start it up and go to the logs tab, open the last log and select all of the details and then paste it in to a reply. (to select it all either press ctrl+a or goto edit select all then edit copy)

Tiggywood

closed wrote: »

http://en.wikipedia.org/wiki/Trojan_horse_%28computing%29

Thanks, but it's a bit scary, I feel like I'm being watched by hackers! Did they steal my passwords? If Malware removed it does it mean it's gone???

Fire_Fox

I am completely not techie either, but my understanding is many Microsoft products (e.g. hotmail, IE) are higher risk - either because the code is poorly written OR in many cases because they are so widely used that they are an obvious target for the 'bad guys'. But obviously it is down to you and I to regularly update all software.

I use Firefox, switched from AVG to Avira after an infection and use Malwarebytes on the advice of this board. If you do have a problem I have found these guys endlessly patient, so I try to follow their advice to make their lives a little easier and mine a little safer!!

Re: passwords, you can use KeePass which is a free to install programme. In Firefox you can tell it to remember passwords for sites that are not sensitive but make sure they are not the same as passwords that are sensitive like PINs. It is super easy to access the Firefox stored passwords, click 'Tools', then 'Options' then 'Security' and you (or a hacker!) can either look at saved passwords OR you can set a master password! :T

debitcardmayhem

closed wrote: »

nocscript is a plug-in for firefox, that stops scripts running, more trouble than it's worth for the average user imo.

debitcardmayhem wrote: »

Noscript can be installed in Firefox as an addon - select tools/addons search for noscript, it stops scripts from running unless you allow them, it is a bit of a learning curve though.

It is trouble to learn, but then again there is nothing better than experience

closed

update malwarebytes and do a full scan, and then let avast do a full scan, if they both don't find anything, it's probably gone.

Not all trojans steal password, depends what it was, and whether someone on the other end is listening. If you are worried, make sure the pc is clean, then change them

Tiggywood

debitcardmayhem wrote: »

Noscript can be installed in Firefox as an addon - select tools/addons search for noscript, it stops scripts from running unless you allow them, it is a bit of a learning curve though.
Malwarebytes is jus another tool to use alongside your Antivirus program, as a precaution or remedy probably better describes it. If you have run a scan with it in your "panic" then you could still post the log here for for us to view.
Start it up and go to the logs tab, open the last log and select all of the details and then paste it in to a reply. (to select it all either press ctrl+a or goto edit select all then edit copy)

OK I think this is it

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org
Database version: 3967
Windows 6.0.6000
Internet Explorer 7.0.6000.16890
07/04/2010 22:52:14
mbam-log-2010-04-07 (22-52-14).txt
Scan type: Quick scan
Objects scanned: 111152
Time elapsed: 8 minute(s), 2 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{df1c8e21-4045-4d67-b528-335f1a4f0de9} (Adware.NaviPromo) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)

Does this mean it's gone?
(sorry to be so low-tech)

debitcardmayhem

closed wrote: »

update malwarebytes and do a full scan, and then let avast do a full scan, if they both don't find anything, it's probably gone.

Not all trojans steal password, depends what it was, and whether someone on the other end is listening. If you are worried, make sure the pc is clean, then change them

I would do as closed suggests since that scan was yesterday, update Malwarebytes first though. And if both come up clean then I would then suggest change you update IE also to version 8 , and make sure windows update is up to date. And try again with Firefox (with or without noscript)

aliEnRIK

After youve updated malwarebytes, run a full scan and posted the log ~

reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD THIS VERSION')
http://www.filehippo.com/download_hijackthis/2894/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

DVardysShadow

Tiggywood wrote: »

Thanks
OK, well that makes me feel better, although why did I hear that the Germans has security problems with it?

All browsers get security problems from time to time - usually they are dealt with quite quickly, but you need to keep your software up to date. In this instance, I think the Germans over reacted and the media made more of it than was perhaps justified

DCFC79

closed wrote: »

It's not your browser at fault, it's what you do, and where you go, and how good your antivirus is.

as well as keeping it up to date