Unusual Browser Behaviour. Already Ran Win Defender and Malwarebytes No Problem

dcep on 31/10/2022 - 23:36

Looking for input from PC security savvy mobs.

This morning i left my laptop idling with firefox left opened on multiple tabs and windows, but later came back to notice 4 additional blank firefox windows were opened with address citing html file at local destination desktop and found 4 html files saved at desktop with random awjevgb.html filename.

I deleted the html files and closed firefox. Restarted laptop then ran both windows defender and malwarebytes but found nothing.

Should i be worried ?

Computing

Comments

  • grog on 31/10/2022 - 23:42
    +1

    Make sure firefox is the very latest 106.0.2

    Clean out cache then select ""Delete cookies and site data when Firefox is closed"" in privacy and security of settings/ cookies and site data.

  • MS Paint on 31/10/2022 - 23:51
    +7

    I would perform a fresh OS install but that's just me.

    • jv on 01/11/2022 - 00:39
      +3

      that's just you.

    • Che0063 on 01/11/2022 - 07:45
      +4

      Not sure why this was negged. Nuking my SSD and re-installing would be my instant action.

      If I had the time I might disconnect myself from the internet and then look at the contents of those files, or have a peek in task manager for any cute "nOtvIrus.exe" processes

    • iDroid on 01/11/2022 - 09:56

      I roll like this too.

  • coffeeinmyveins on 01/11/2022 - 00:17
    +3

    Could anyone have accessed your computer physically during that time?

    Have you recently installed any browser extensions or new apps?

    Tbh that behaviour warrants an overreaction. Fresh OS install

  • Jugganautx on 01/11/2022 - 06:28

    Too much pron

  • barge-in hunter on 01/11/2022 - 07:41
    +2

    Were the websites you had open… how can I say this… “less than respectable/mainstream”? Ie, torrents, random blogs, etc etc?

    Reason I ask is that sounds a bit like a dodgy display ad that hadn’t been securely imbedded/confined to a website - which does happen, even to the big websites sometimes. They’re all third party code that gets pulled in to the website.

    That might also explain why there were four tabs open. Websites cycle through and refresh display ads while it’s loaded on your screen (usually looking for more impression $)

    I’m not an expert, but don’t think that an ad like that would have access to run the html outside your browser’s sandbox… so i think that means the html files that were downloaded couldn’t have been “run”.

    On the other hand, I’m super conscious about these things - and would seriously consider a reinstall just for safety.

    Note- also run something that detects adware (not all antivirus search for this). Things like this may take over ad spots in your browser and track data etc, so less dangerous to you (if you’re not scared of pron) but still not something you want on your pc

  • jizmo on 01/11/2022 - 07:48
    +6

    I'd stuff paper inside the PC and set it on fire! But that's just me because I hate my boss and his shit computers.

  • avoidfullprice on 01/11/2022 - 08:08
    +2

    I would inspect task manager for unusually named process.

    I would not answer unsolicited calls claiming they are Microsoft

  • Sinnerator on 01/11/2022 - 08:35
    +1

    Pull out and nuke it from orbit. It's the only way to be sure.

  • geek001 on 01/11/2022 - 09:15
    +1

    If it is not a virus, it might be a rogue browser extension. I have a browser extension that helps me check for website changes. That browser extension sometimes opens a new tab instead of checking the website(s) I monitor in the background.

  • Soapdroid on 01/11/2022 - 19:14
    +4

    Do you have a cat?

  • Raj09 on 03/11/2022 - 05:27

    I would suggest kaspersky free or bitdefender to have a second opinion. Then, I would suggest a complete uninstall and reinstall of the browser and have a look at what extensions you are running

Login or Join to leave a comment
Login Join