Personal computing discussed

Moderator: Dposcorp

 
veritassauce
Gerbil In Training
Topic Author
Posts: 5
Joined: Tue Dec 17, 2013 10:59 pm

Strange Browser Behavior: http://www.xn--e28h.com/

Tue Dec 17, 2013 11:03 pm

I was using Gmail today and suddenly, Firefox tried to access the following URL:

http://www.xn--e28h.com/

It tried to load this address in the tab in which Gmail was open (this caused Gmail to close). Firefox did not succeed in accessing the site (couldn't find the server).

MBAM doesn't find any malicious files on my hard drive.

Any ideas as to what could have happened?
Last edited by Steel on Tue Dec 17, 2013 11:07 pm, edited 1 time in total.
Reason: Turned off URL parsing
 
just brew it!
Gold subscriber
Administrator
Posts: 44161
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: Strange Browser Behavior: http://www.xn--e28h.com/

Tue Dec 17, 2013 11:27 pm

Certainly sounds like malicious Javascript or somesuch.

The domain name it tried to redirect to appears to be encoded with punycode, which is a method for encoding Unicode characters into a URL.
The years just pass like trains. I wave, but they don't slow down.
-- Steven Wilson
 
Jigar
Maximum Gerbil
Posts: 4822
Joined: Tue Mar 07, 2006 4:00 pm
Contact:

Re: Strange Browser Behavior: http://www.xn--e28h.com/

Wed Dec 18, 2013 6:09 am

If Malwarebytes has failed to find anything on your system, i would advice to nuke the OS and format the partition right away...
Image

Who is online

Users browsing this forum: No registered users and 1 guest