Jump to content

0x49019;window.zfgloadedpopup = true; ---- Malicious?


Recommended Posts

Hi!

I've was, embarrassingly, browsering through content an adult-content site, and when I clicked on a video which opened two seperate tabs, one of which was the video itself and the other one is an extraordinarily long link, which on first eyesight might likely contain information about my computer hardware. While I do not have the link itself, I have copied the text that the website displays states: 0x49019;window.zfgloadedpopup = true. I happened to also stumble upon this analysis https://www.hybrid-analysis.com/sample/4549eed582050392e9cecd9b69f0d8d796fd5132e47a2e8161c4bf76ed176a9e?environmentId=100 of another website which seems to deliver the same result, though I have not been able to comprehend any of the information in the analysis itself. I have run the webside using Brave browser on a Tor tab, which the "Block scripts" option disabled. 

I have done an immediate Malwarebytes and Adwcleaner scan with no threats shown. However, I have heard that running URLs (Javascript, perhaps?) in the browser is capable of granting access to passwords without any notifications from Malwarebytes (assuming real-time protection is off, which is my case). I fear that I might've given potential access to my browser, and I would heavily appreciate some advice on proceeding further. 
I also thought that pasting in the "0x49019;window.zfgloadedpopup = true" text from the popup might help potential victims to find this same page once they search up the same prompt. 

Link to post
Share on other sites

Hello @StartUpMenu and :welcome::

Please carefully follow the procedures below in the order given for the best data. Please do not forget Malwarebytes AdwCleaner in its proper order.

Although I will not be your malware removal helper, please carefully follow the steps in the order given:

Let's go ahead and run a couple of scans and get some updated logs from your system. Please read the entire post below before starting so that you're more familiar with the process.

Then, follow each step in the order provided. Unless otherwise asked, please attach all log files.

Please make the following system changes:  Please pay close attention to the instructions in all the following links.

  1. If you have not done so already, Enable System Protection and create a NEW System Restore Point.
  2. Temporarily disable your antivirus real-time protection or other security software first only if it blocks or interferes with the scans or downloads. Make sure to turn it back on once the scans are completed.
  3. Temporarily disable the overly sensitive Microsoft SmartScreen to download software below only if needed. Make sure to turn it back on once the downloads are completed.
  4. Disable-Fast-Startup. <<<<< Important.
  5. Show-Hidden-Folders-Files-Extensions.

Please run the following scans:  Please Take your time and pay close attention to the instructions in all the following links.

  1. Select the following link and run a Scan with Malwarebytes AdwCleaner with only the eight (8) requested options selected.  Report files: AdwCleaner[S00].txt and AdwCleaner[C00].txt   Please run the scan only once, correctly, to capture any and all error data. Alternate Download Source.
  2. Select the following link and run a DEFAULT Scan with Malwarebytes 5 for Windows®. Report file: Malwarebytes Scan Report YYYY-MM-DD HHMMSS.txt 
  3. >>>> Restart the computer <<<<
  4. Select the following link, and then rename FRST.exe or FRST64.exe to FRSTEnglish.exe and run a Scan with Farbar Recovery Scan Tool. Report files: FRST.txt and Addition.txt

Example image of where to click to attach the five (5) files when posting your reply to yourtopic:

image.thumb.png.e208c182ff570799c53bcf57

The sooner you attach/send the five (5) log files, the sooner one of the Experts will weigh-in on your topic.

Thank you.

Link to post
Share on other sites

  • Root Admin

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.