Spyware, viruses, &amp; security forum: Need help on Fake App Attack notices from Norton AV

Total posts: 7 (Showing page 1 of 1)

Thread display preference:
Collapsed
Expanded

Back to Spyware, viruses, & security

Tracked Track this thread

Answers

Answer Best answer as chosen by user texasmary

About Fake App Attack - Fake Scan Website 3

by Carol~ - 9/7/12 8:49 PM

In Reply to: Need help on Fake App Attack notices from Norton AV by texasmary

Mary..

Please read how Symantec describes: Fake App Attack: Fake Scan Website 3

It says in part:

This signature is designed to prevent access to sites that redirect users or perform actions to trick users into installing misleading applications such as fake antivirus software.

The creators of misleading applications often use web pages with fake antivirus scanners in order to convince users to download and run an executable file. They may also use intermediate sites that redirect users from the site they are visiting to another one offering misleading applications for download.

Misleading applications such as fake antivirus scanners (Trojan.FakeAV) or bogus disk defragmenters (UltraDefraggerFraud) are designed to mislead users into thinking that their computer has serious problems that must be fixed by paying for a license of the software. For example, a fake antivirus scanner may perform fake scans of the hard disk and then report multiple non-existent threats....

* * * * * * * * * * *

Norton Safe Web gives Healthboards.com a SAFE rating.
http://static-safeweb.norton.com/report/show?url=healthboards.com

* * * * * * * * * * *

So why all the alerts? The site is / was probably compromised in some form or another. Here's a perfect example. A Norton user posted at their community forum, asking how to stop the alerts, when visiting the Irish Times website. S/he contacted the site and received (in part) the following response:

"We have successfully traced the fake anti-virus notice to a third party advertisement which was being intermittently delivered to users of The Irish Times web-site in recent days. As of Monday, this advertisement has been blocked from running on our site, and the third party advertisement agency have been alerted to the problem. Despite our team vetting the advertisement before it was launched on July 13th, the advert was subsequently altered by the third party late last week without our knowledge and began to distribute these false messages regarding viruses. "

I would suggest contacting the site owner, if you frequent it often. I would further suggest scanning with the below (FREE) tools to make sure all is "as it should be".

Malwarebytes' Anti-Malwre
http://www.malwarebytes.org/products/malwarebytes_free/

ESET's Online Scanner - Their FAQ and Help sections should answer any questions you might have. (Temporarily disable Norton prior to running the scan)

Best of luck..
Carol

Was this reply helpful? (1) (0)

Staff pick

Already contacted the website

by texasmary - 9/7/12 9:26 PM

In Reply to: About Fake App Attack - Fake Scan Website 3 by Carol~

Thank you. I think I have already read all of the info you mentioned above. I have already contacted the admin for the website. That was about 3 weeks ago before my hard disk crashed. I did not receive a reply from the admin. The newest warning just came yesterday. I'm not sure why the website closes down when I receive the warning. It says that it is to protect my computer. Since I get a warning from Norton, I do not get the opportunity to subscribe to something I don't need and that would endanger my computer. What I dislike most is that I can't go to that website when I want. Thanks again.

Was this reply helpful? (0) (0)

Staff pick

Safe Surfing needs some tools to stay protected

by mchainmchain - 9/8/12 4:03 AM

In Reply to: Already contacted the website by texasmary

Seems as if it would help to have at least a second opinion here.

The following antimalware sites scan for web exploits, viruses, and rogue apps:

http://www.urlvoid.com/
http://sitecheck.sucuri.net/scanner/
http://zulu.zscaler.com/
http://urlquery.net/

All that needs to be done here is to type in the full address of the site you want to visit (in this case Healthboards.com) to see if indeed there is anything amiss using any of the above url scanner websites. Whether a site you like becomes infected is beyond anyone's control; at least you can scan it to see why.

I scanned with urlquery and it shows some malware running on the site. Your choice to visit despite the deep level flash exploit warnings and malvertisement site warning. Not every web url scanner will catch everything. That is why it is best to use more than one scanner to come to your best decision.

Was this reply helpful? (1) (0)

Staff pick

Thanks

by texasmary - 9/8/12 7:10 AM

In Reply to: Safe Surfing needs some tools to stay protected by mchainmchain

Thank you very much! I will try the above. Still thinking on this... If I visit the website and Norton does not give me a warning (it has been happening about 50% of the time), does that mean that the virus slipped through and could have infected my computer?

Was this reply helpful? (0) (0)

Staff pick

Hacked Website(s)

by mchainmchain - 9/8/12 2:11 PM

In Reply to: Thanks by texasmary

--Once a website is hacked, it is under the control of the bad guys. So, malware present can be active for only one to three hours, and then a newer improved version is installed and the malware comes back up.

--(See above) You may have been protected before, but not always at a later visit. The point of hacking is to infect your system and all other systems that visit.

Was this reply helpful? (1) (0)

Staff pick

About Fake App Attack - Fake Scan Website 3

by EXPERT1984 - 9/17/12 4:54 AM

In Reply to: Thanks by texasmary

HI
As you know that computer is already infected avoid taking risk ., you can try doing system restore in safe mode , if it works good for you / IF Not get help from proffesionals as there is chance of loosing data

reply back if it works or if you need any help

Was this reply helpful? (0) (0)

Staff pick