Home Malware Programs Fake Warning Messages Fake Firefox Security Alert

Fake Firefox Security Alert

Posted: June 1, 2011

The fake 'Firefox security alert' is a bogus error message caused by Trojans. This message is only the first step in an intricate scam that attempts to convince you to willingly install a rogue security application. Although this rogue security program, like the original 'Firefox security alert' error, offers only bad advice and fake system information, 'Firefox security alert's' external appearance is identical to that of a real anti-virus program. It's important to have a sufficient high level of browser security and privacy settings to prevent your PC from being infected by 'Firefox security alert' Trojans, but if you're already infected by a 'Firefox security alert' Trojan or a rogue security program that's related to 'Firefox security alert' errors, you can remove these PC threats by using fully-updated anti-malware applications within Safe Mode.

The Two Ways 'Firefox security alert' Takes a Stab at Your Browser's Security

'Firefox security alert' warning screens can occur in two primary ways:

  • 'Firefox security alert' screens can be displayed automatically by malicious websites. These websites are usually affiliated with the rogue security programs they're trying to install on your PC, and will show these fake alerts even if your PC isn't infected.
  • 'Firefox security alert' screens may also be created by Trojans that have already infected your computer and hijacked your web browser. Hijacks can be implemented in two primary ways: through the Windows Registry to adjust URL and IP mapping, or through adjusting browser settings to use proxy servers. Fake 'Firefox security alert' errors may be the only sign you see of these Trojans. One other prominent symptom to watch for is a continually running browser memory process, even if you've closed your browser.

Either way, 'Firefox security alert' screens will attempt to imitate the appearance of a true 'Firefox security alert' message with great precision. The primary difference is that a real Firefox warning will never prompt you to install a strange security application, whereas 'Firefox security alert' screens will use installation-prompting text like the following:

We recommend you to install (or activate) anti-virus security software.
I do realize that visiting this site can cause harm to my computer.
Continue Unprotected/Get security software

The 'security software' that 'Firefox security alert' errors nudge you towards isn't a security software at all, but rather, rogue security programs that imitate anti-virus functions while they're attacking your PC.

'Firefox security alert' screens may also show slightly different fake warnings that indicate that a running memory process is corrupt or that a Trojan like 'Trojan Horse IRC/Backdoor.SdBot4.FRV' is active on your system.

Fighting Back Against 'Firefox security alert' Attackers

'Firefox security alert' screens are always part of a larger scam that involves rogue security programs. Be wary about 'Firefox security alert' links to malicious websites like 'antispyware02.co.cc' and never install any software linked in 'Firefox security alert' screens. Rogue security product can take the form of Mac-specific threats like Mac Protector, a fake anti-spyware program like Spy Fighter or fake Windows affiliates like Windows Saviour Firewall.

Rogue threats such as the ones noted above can cause fake errors and warnings similar to the original 'Firefox security alert' screen, but they may also disable security-related programs or use browser-hijacking techniques to further corrupt your browsing activities. Rogue programs like the ones that 'Firefox security alert' offers for download will almost always try to steal your credit card number and other personal information.

'Firefox security alert' attacks have been noted to focus on vulnerabilities in older versions of Firefox. If you're running a version of Firefox below 3.6.12 your browser is particularly in danger of 'Firefox security alert' threats. Keep your browser up to date and disable unnecessary scripts (like Flash and JavaScript) to secure your browser against 'Firefox security alert' threats.

If you've already become infected by 'Firefox security alert' Trojans or related rogue security applications, switch to Safe Mode by hitting F8 during while rebooting, and use your preference of anti-malware program to delete 'Firefox security alert' software.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AllUsersProfile%Application Data[RANDOM CHARACTERS].dat
    2 %AllUsersProfile%Application Data[RANDOM CHARACTERS].ico
    3 %Temp%ins2.tmp
    4 %Temp%mv3.tmp
    5 %Temp%wrk4.tmp
    6 %UserProfile%Application DataMicrosoftInternet ExplorerQuick LaunchAntivirus Center.lnk
    7 %UserProfile%DesktopAntivirus Center.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}AuthorizedApplicationsList "C:WINDOWSsystem32rundll32.exe" = 'C:WINDOWSsystem32rundll32.exe:*:Enabled:Antivirus Center'HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[RANDOM CHARACTERS]"HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfile

Additional Information on Firefox security alert

  • The following messages's were detected:
    # Message
    1 Firefox security alert
    Scanning of your system is currently on, please wit until the end.
    Your system affected by numerous virus attacks, Mozilla Firefox recommends you to install proper software to protect your computer
Loading...