Jump to content

Landing-Savetubevideo - MWB Failed


Recommended Posts

After re-installing Firefox I became infected by Landing.savetubevideo.com.

MWB did not prevent the infection nor did it detect it during a full system scan after the event. StopZilla detected it - and found four other infections which do not in fact exist on my machine. It demanded payment to remove the existent and non-existent infections! I presume StopZilla is scareware, but I would have expected MWB to have either prevented the infection or to have detected and removed it.

Link to post
Share on other sites

Hello, Cheemag:

Sorry to hear about your infected computer.

I'm sure you are very frustrated.

Alas, no 1 AV or anti-malware product can protect against 100% of threats.

Moreover, MBAM is not an anti-virus -- it is designed to provided layered protection alongside a robust standard AV and firewall.

I am not an engineer and don't know specifically about the landing savetube-video, but it appears to be a virus -- hence it may not be something in the MBAM database, but it ought to have been detected by your AV.

That said, free, expert, one-on-one malware removal assistance is just around the corner.

Alas, we do not work on malware removal in this particular sub-forum.

Instructions on how to proceed are posted in the 2nd Important Topic pinned at the top of this forum: "I'm Infected - What Do I Do Now?".

There are 3 options:

1) run a few preliminary scans & start a thread at the Malware Removal-HJT forum; or

2) start a support ticket (free for paid users of MBAM PRO); or

3) try one of the premium, fee-based support options.

OPTION 1:

Free, expert assistance can be found at the malware removal-HJT forum.

Please go to this page, print out, read and follow as many instructions as you can, skipping any you are unable to complete:

http://forums.malwarebytes.org/index.php?showtopic=69723

Then please describe your computer's symptoms as best you can, and post the requested logs by starting a new thread here:

http://forums.malwarebytes.org/index.php?showforum=7

One of the authorized, trained experts will then assist you as soon as possible for one-on-one malware detection and removal.

When you post, please be sure to select Track This Topic & choose one of the email options, so that you will be notified when someone responds; allow 24-48 hours before bumping your thread.

OPTION 2:

Alternatively, as a paying customer, you may wish to start a support ticket by contacting support at: support@malwarebytes.org;

OPTION 3:

Premium, fee-based support options are here:

http://www.malwarebytes.org/premium-support.php

Also, please use the "Add Reply" button when replying here & at the other boards, so that it will be easier for everyone to follow the thread.

I hope this gets you started on cleaning up your system,

daledoc1

Link to post
Share on other sites

Hello, Cheemag:

Sorry to hear about your infected computer.

I'm sure you are very frustrated.

Alas, no 1 AV or anti-malware product can protect against 100% of threats.

Moreover, MBAM is not an anti-virus -- it is designed to provided layered protection alongside a robust standard AV and firewall.

I am not an engineer and don't know specifically about the landing savetube-video, but it appears to be a virus -- hence it may not be something in the MBAM database, but it ought to have been detected by your AV.

The Savetubevideo thing isn't a virus, it's a "search hijacker", and in retrospect probably not detectable by either an AV or by MWB.

That said, free, expert, one-on-one malware removal assistance is just around the corner ...

Won't be necessary. The usual method of removing this nuisance is by deleting files and folders. Oddly, although I found one folder, it was empty. I suspect that I had downloaded an infected copy of Firefox from what appeared to be the Mozilla site. Uninstalling that and getting a fresh copy of FF seems to have solved the problem.

Neither MWB nor the ESet scanner can find anything except the AOA Audio Converter, which the latter considers a threat.

Thanks for the response.

Link to post
Share on other sites

Glad you got it fixed and working.

FWIW, the only place to get FF (or TBird) downloads is here either

http://www.mozilla.com

or

http://www.mozilla.org.

There are a lot of phony sites out there.

I've seen several threads about this at the mozillazine forums.

You might wish to start a thread here, since the mods/admins can try to get them shut down.

Still, it might not be a bad idea to have one of the experts take a look at your system, to be sure it's clean.

Best regards,

daledoc1

Link to post
Share on other sites

Glad you got it fixed and working.

FWIW, the only place to get FF (or TBird) downloads is here either

http://www.mozilla.com

or

http://www.mozilla.org.

There are a lot of phony sites out there.

I've seen several threads about this at the mozillazine forums.

You might wish to start a thread here, since the mods/admins can try to get them shut down.

Unfortunately I don't now know the URL for the site from which I got the infected file. There are many offering Firefox downloads besides Mozilla itself.

Still, it might not be a bad idea to have one of the experts take a look at your system, to be sure it's clean.

You mean by getting a support ticket?

Link to post
Share on other sites

Hi, Cheemag:

The only authorized sites to download the OFFICIAL FF program is from the links I gave you.

Downloads available at any other sites are -- at best -- 3rd-party versions that one uses at one's own risk (or worse).

So, in the future, it is best for the sake of your computer security & stability only to download from the official sites, unless you like to live dangerously. :lol:

(The link in my last post to the mozillazine forums will provides lots of interesting reading...)

As for having the experts check your system, that's up to you.

I outlined the 3 options in my original reply: malware-removal/HJT forum (free) or MBAM support (free for paying customers running MBAM PRO) or premium support (fee based).

Couldn't hurt, at least for peace of mind.

Best regards,

daledoc1

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.