0

This question already has an answer here:

I would call my self a security aware computers professional, and I was asking my self for a long time now allready. How can it be that male-ware gets onto my computer wihtout me actively playing it or accepting an information about it?

I reinstalled some weeks ago my windows and did the following things in this order(given that all download were done from their official webpage):

  • installed win7
  • upgraded it to win10
  • installed mozilla
  • downloaded and installed kaspersky (with pre-existing license, if matters for features)
  • isntalled putty, winscp, tortoise, steam, battle.net and teamspeak, and downloaded software I own on those platforms.
  • did some ssh stuff between my server and my personal pc to get backups of important projects.
  • installed flash and adobe and surfed a bit through the web. (watched southpark streams on the german offical southpark site)

especially the last point probably is what caused the trouble, naimingly kaspersky detected 2 days ago 3 trojaners and 2 adwares on my computer.

that page was until some days ago hsoted by comedycentral, but that seemed to have been changed. And it now appears pretty harmfull. My pc is since I watched the streams pretty slow and so on.

But now my actuall question is:

In case I'm right in the assumption that all the previous steps won't have been able to inject harmfull software to my pc, then I'm concluding that there are ways (with java script?!) that are parsed by the browser into creating files on my computer and doing additional changes on my pc making it possible that those files are executed at some point automatically.

But why should browsers implement such features? And even if they were so important and required, why am I not even informed or asked by my browser about possibly harmfull executes?

I mean for making a just created file beeing at some point automatically executed, there would have to be taken changes on my computer that shouldn't be that common for website applications, or am I wrong and it isn't that common that websites need to acces i.e. my registrys?

So from that point, why does it happen, that js features are supported from a browser that do such config changes on my pc, and why is the rbowser not even asking me about me beeing fine with it?

And for the future, are there other ways to protect against it, except deactivating js?

Or could it be something entirely different?

marked as duplicate by Neil Smithline, Rory Alsop May 7 '16 at 20:16

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • My two recommendations: Be careful where to download your applications - not every download site is legit. And: remove Flash. – Lukas May 7 '16 at 17:50
  • Google "drive by downloads". And there's no way I would be confident that your installs didn't bring malware. – Neil Smithline May 7 '16 at 18:25
  • @NeilSmithline: why you wouldn't be confident about it?? – Zaibis May 7 '16 at 18:27
  • 1
    Microsoft is certainly more likely to be secure than CNET. Regarding the browser companies fixing vulnerabilities fast enough, they try, but they fail. You can't protect against a 0-day until you've seen it. – Neil Smithline May 7 '16 at 18:40
  • 1
    @Zaibis - there are currently 1534 Firefox vulnerabilities that have been publicly announced. Based on that alone, I think it is fair to say that the difficulty of fixing these problems is non-trivial. – Neil Smithline May 7 '16 at 19:00
2

Drive-by downloads are a real threat. These enable a website to exploit a 0-day vulnerability in your browswer to execute malicious code on your system. Note that sometimes websites are hacked to behave maliciously without the website's owners being malicious.

While browser manufacturers work to fix security problems quickly, the 1534 publicly announced Firefox vulnerabilities are proof that this is a difficult task. Flash is also another well-known source of security problems (currently 1039).

It is also possible that one of your downloads came with malicious files in it. Sites such as CNET are notorious for this.

Not the answer you're looking for? Browse other questions tagged or ask your own question.