Is this a virus or...?

Date Published: 08/23/2013 12:35 AM
Author:

Hey,

During the past few hours this has occurred two times and it's never happened before. I'm never at the computer when this happens so I have no idea what's going on.

When I go away from my computer, while leaving Google Chrome open, for 30+ minutes I find that there are four new tabs all with empty pages opened. The url bar always has https://fbcdn-profile-a.akamaihd.net/hprofile-ak-ash3/hellocdn.html?v=1 entered in it.

I've done a full scan of my computer with Microsoft Security Essentials (Windows Defender since I'm running Windows 8) and it turned up nothing. When I try googling the link in the paragraph above all I get is a bunch of ranking websites and a few Japanese links.

As far as I can remember, the only major thing that I've done before this started happening, is installing LaTeX. I downloaded the first link on this page http://ctan.mirror.rafal.ca/systems/windows/protext/ which was given to me by the official LaTeX site. I doubt this has anything to do with the problem but that's it.

submitted by _Valkryst
[link] [comment]
View full answer on Reddit - Techsupport

View Local Answers...

Can't find the answer to this question?
  • Tytalus posted this on 08/23/2013 at 3:08 AM

    Sorry I don't have an answer for you, but I do have the same issue (although my 4 tabs pop open at startup)

    I've not added anything to my system, and run Norton (which I hope is doing it's job), so I'm pretty baffled as well!

    Anyone any ideas?

    Ty
  • HC posted this on 08/23/2013 at 7:27 AM

    Yeah, got the same thing here oddly enough - just started happening today, without installing anything new :-/
    The icon at those pages are all a facebook icon, so perhaps somehow facebook is doing it? hmm
  • Tytalus posted this on 08/23/2013 at 2:09 PM

    GOT IT! (And you're so close HC)

    Having spent a good part of the afternoon deleting stuff, scanning, etc, it's the FB part of the FBCDN addresses (as they are different in each window) that gives it away:

    Uninstall the FaceBook messaging 'app' from your programmes and Vola, its gone!

    Thank goodness for that... And Facebook really need to sort their act out.

    TY
  • ALI posted this on 08/24/2013 at 12:00 AM

    WOW thank you guys for this awesome site!! lol i was so confused..


    tytalus, ive always used FB messanger but i will uninstall and see how it goes! :D thank you!
  • Tytalus posted this on 08/24/2013 at 1:33 AM

    All I can say is that it worked for me, and I've been using FB messenger for ages as well. At least it's something easy to remove without dodgy 3rd party software, won't leave your machine venerable, easy to re-install and hopefully the problem is a one off and won't re-appear.

    Would be nice to know if I was lucky, or it really does work, though :)

    Ty
  • Jenn posted this on 08/29/2013 at 1:59 PM

    Guys, ive got the same problem - how do i delete fb messenger ?!! please help me thank you
  • abhishek posted this on 08/31/2013 at 4:00 AM

    Jenn.
    for un-installing fb messanger app , go to start type in the search box for add or remove prrograms ,open it find ur fb messenger app then right click on it and un-install it.
    vola ur done .
    if u cannot to it this way try this,
    go to control panel ,u find a proggrams option ,just below it in small letters its written uninstall a program, click on it then find ur fb messenger app then right click on it and un-install it.
    if it helps u let me know :)


  • michael posted this on 09/02/2013 at 11:47 AM

    same problem~~
    thanks for the tip~~
    it helps me alot~~

    a teenager from Taiwan~
  • Bounty posted this on 09/03/2013 at 4:46 AM

    This happened to me too and since deleting facebook messenger it hasn't happened, however, i have read on various different sites that this is a virus that is temporarily dealt with by deleting facebook messenger but it leaves harmful files on your computer that can't be picked up by anti virus software, can anyone tell me if this is true or is it a bunch of people on the internet trying to cause a panic over nothing ?
  • c22600 posted this on 09/03/2013 at 8:55 PM


    I "had" a similar problem but seemed to have resolved it "without" the removal of FB Messenger. When the computer booted, my Chrome browser would automatically open with these 6 URLâs in it:

    âhttps---fbcdn-photos-a-a.akamaihd.net-hphotos-ak-ash3-hellocdn.html-v=1.urlâ

    âhttps---fbcdn-photos-a-a.akamaihd.net-hphotos-ak-prn1-hellocdn.html-v=1.urlâ

    âhttps---fbcdn-profile-a.akamaihd.net-hprofile-ak-ash3-hellocdn.html-v=1.urlâ

    âhttps---fbcdn-sphotos-a-a.akamaihd.net-hphotos-ak-prn1-hellocdn.html-v=1.urlâ

    âhttps---photos-a.xx.fbcdn.net-hphotos-ash3-hellocdn.html-v=1.urlâ

    âhttps---photos-a.xx.fbcdn.net-hphotos-prn1-hellocdn.html-v=1.urlâ

    I am not really sure what the cause of this was except that I was trying to send my friend a URL to my server page using FB Messenger and FB blocked it. I think I tried 6 times hence the 6 instances above. That is when this issue started occurring so I think was the cause.

    I download Malwarebytes Anti-Malware (Trial) 1.75.0.1300 from www.malwarebytes.org



    Database version: v2013.09.03.08

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 10.0.9200.16660
    MBAM-log-2013-09-04 (10-33-40).txt

    Scan type: Quick scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 248474
    Time elapsed: 1 minute(s), 49 second(s)

    Registry Keys Detected: 1
    HKCRAppID{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> No action taken.
    Files Detected: 0
    (No malicious items detected)

    (end)


    The culprit was a registry key âPUP.Optional.Delta.Aâ:
    Windows Registry Editor Version 5.00
    [HKEY_CLASSES_ROOTAppID{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}]
    [HKEY_CLASSES_ROOTAppID{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}Instl]
    [HKEY_CLASSES_ROOTAppID{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}InstlData]
    "hp_url"="http://www1.delta-search.com/?affID=121562&babsrc=HP_ss&mntrId=D6D25404A6037840"
    "sp_name"="Delta Search"
    "sp_url"="http://www1.delta-search.com/?q={searchTerms}&affID=121562&babsrc=SP_ss&mntrId=D6D25404A6037840"
    "tb_url"="http://www1.delta-search.com/?q={searchTerms}&affID=121562&babsrc=TB_ss&mntrId=D6D25404A6037840"
    "nt_url"="http://www1.delta-search.com/?affID=121562&babsrc=NT_ss&mntrId=D6D25404A6037840"
    "kw_url"=http://www1.delta-search.com/?affID=121562&babsrc=KW_ss&mntrId=D6D25404A6037840&q=

    I let Malwarebytes Anti-Malware delete the Reg Key and now my problem seems to have vanished.

    Hope this helps.


  • ladytigeress posted this on 09/09/2013 at 11:13 PM

    I stopped having this problem once I stopped opening the facebook messenger program on my computer. I tested this even and just as soon as messenger opened, I had six tabs on my firefox browser and I have also stopped getting the random tab opening on my chrome. I haven't stopped using facebook messenger as I am using it from my browser instead.

    I have also gone as far as uninstalling the program so that it wouldn't be opened accidentally sometime when I start up my computer. I scanned and scanned my computer and everything came up clean. It is in the messenger program itself.

    Hope this helps someone.
  • Creondai from Rio de Janeiro posted this on 09/12/2013 at 1:10 PM

    This fact came to happen here too.
    unfortunatelly i had to uninstall the messenger...
    even if we don't know what's happening here until now, it's better to keep a posture of defense against this possible threat.
  • Viv posted this on 09/19/2013 at 3:25 PM

    Hi Guys, thank you for help.
    It worked i uninstalled facebook messager and all the crab has gone.

    It worked :).
    Viv
  • Lucia posted this on 09/27/2013 at 5:11 PM

    Hola, muchas gracias a Tytalus, parece que ya se fue el virus quitando el Facebook Messenger. Muchas muchas gracias desde España, Alicante. Saludos.
  • Sky posted this on 09/30/2013 at 6:44 AM

    Thank you very much for the sharing... :)
  • klingstin posted this on 10/01/2013 at 3:06 AM

    simple, Its FB messenger that is the culprit (the address quoted is related to pictures of your friends list). Just uninstall it and fill in the feedback form like I have. They'll so fix it.
  • Deny Boy posted this on 10/09/2013 at 10:18 AM

    Removed messenger and all fixed here
  • John Doe posted this on 10/13/2013 at 12:36 PM

    I always used FB Messenger, and never had this kind of problem.
    Today, it happened twice. The only thing that has changed, is that my internet service is unstable.

    So, if I would guess, FB Messenger is calling these pages at every moment, but only when things goes wrong (internet stops working) the popups may appear (as the error response was not what FB was expecting for).

    So, if this happens to you on boot, maybe FB is loading before your PC connects to the internet. Just a bug inside the FB Messenger.

    That said, definetly, not a virus.

    About the addresses:
    - They are links to CDNs around the world (one from Tucows and the other from the "MARKMONITOR INC", probably in name of FB itself)
    - CDN stands for: http://en.wikipedia.org/wiki/Content_delivery_network
    - So, you can think of "hellocdn.html?v=1" a little "connection test", just like a "ping". Something facebook messenges does once in a while to see if its network is working properly. In my case, it wasn't, so I got these popups.
  • BulletKing posted this on 11/30/2013 at 1:43 PM

    I've had this problem for a couple of days now, and I have reported it to facebook. I really like the facebook messenger app for windows and I don't want to remove it so I hope they fix it. And I think they should start updating it because they don't seem to care about the app at all.
  • Jane posted this on 12/25/2013 at 10:16 PM

    John Doe, I get what you have explained. Because im getting the pop ups plus i've been having issues with my fb messenger app. Has your app been restored? How do i fix it?
  • charles posted this on 01/13/2014 at 3:57 PM

    fbcdn-photos-b-a.akamaihd.net/hphotos-ak-ash3/hellocdn.html?v=1 ,opens in my browser window usually when windows 7 boots up or just out of the blue. Scanned with different virus detecting software nothing shows up.
  • bgpcdr posted this on 02/20/2014 at 8:32 AM

    As per C22600, I'm DL'ding Malwarebytes for the 1st time in awhile, to scan for and delete the bugs within this app--I'll keep using Messenger if it ceases entirely.
    Before I found this page, I went into Chrome and blocked popups from this site, and am about to go back in and use wildcards to block any popups from either 'fbcdn' or 'akamai'.
  • r_sellvv@yahoo.com posted this on 02/20/2014 at 9:21 AM


    **********|WELCOME ALL CUSTOMER|**********

    =|Hello all buyer I'm Hacker|=
    -Seller CVV GOOD BALANCE ALL TYPE , DUMPS CARD, BANK TRANSFER , BANK LOGIN , WESTERN UNION TRANSFER...!
    **CONTACT US
    + Our yahoo to support ::::::: r_sellcvv
    + Our email to support :::::::: r_sellcvv@yahoo.com
    + https://www.facebook.com/doli.nguyen.14
    NOTE: I use only one yahoo and one email and one www.facebook.com Please be careful of this . Because there are so many people fake us to commit fraud..
    ---------------- PRODUCTs LIST ----------------
    (1)- Selling Cvv Fresh Good Blance All Type And Many Country
    (2)- Selling Bank Login Account With BaLance, Bank Transfer
    (3)- Western Union Money Transfer Online Selling MTCN
    (4)- Sell Account Paypal Verification with Balanced
    (5)- Dumps Track 1/2 pin , Ship Iphone,Ipad,samsung Galaxy....vv..

    =====|SELLING CC, CCV, VBV.. ALL COUNTRIES & TYPES|=====

    - USA : VISA | MASTER | AMEX | DISCOVER | BIN | DOB | FULLS
    - UK : VISA | MASTER | AMEX | DISCOVER | BIN | DOB | FULLS
    - CA : VISA | MASTER | AMEX | DISCOVER | BIN | DOB | FULLS
    - AU : VISA | MASTER | AMEX | DISCOVER | BIN | DOB | FULLS
    - EU : VISA | MASTER | AMEX | DISCOVER | BIN | DOB | FULLS

    =============|TRANSFER BALANCE BANK|==============
    - We have sell balance of the Bank, Use software hack account bank and transfer to your account
    - I chagre fee's transfer is 10% for per transaction.
    - Amounts transfer from $3000 to $20,000
    *BANK LOGIN WITH BALANCE 3K,5K,8K,10K...IN US,UK,CA,AU,EU
    - Halifax,HSBC,BOA,Chase,Wells Fargo, LLOYDS TSB,BARCLAYS,Standard Chartered,HSBC....

    ==============|Western Union Money Transfer Selling MTCN|============
    Transfer Western Union / bank (Eu,Uk,Asia,Canada,Us,France,Germany,Italy,Nigeria and very easy to cashout African) :
    - 150$ (MTCN) 1500$(minimum)
    - 200$ (MTCN) 2000$
    - 300$ (MTCN) 3000$
    - 400$ (MTCN) 4500$
    - 500$ (MTCN) 6000$
    - 700$ (MTCN) 10000$
    - 900$ (MTCN) 12000$
    - 1000$ (MTCN) 15000$
    - 1200$ (MTCN) 20000$(maximum)

    >> BANK LOGIN and TRANSFER BANK >SHIPPING 2 day have tracking , 7-10 days got items We can ship all electronic item to your shipping address.

    ========SELL BALANCE WITH PAYPAL=========
    - Paypal v?i pass email = 50 $ / paypal
    - Paypal Veritified With balanced and reasonable price
    ==> [3000 $ = 200 $]
    ==> [ 8000 $ = 350 $]
    ==> [ 13000 $ = 550 $]
    ====>Contact us to know the price and how to order
    + Our yahoo to support ::::::: r_sellcvv
    + Our email to support :::::::: r_sellcvv@yahoo.com

    ===============|SELL CARD DUMPS + PIN|================
    - Tracks 1&2 US = 50$ per 1
    - Tracks 1&2 UK = 50$ per 1
    - Tracks 1&2 CA + AU = 60$ per 1
    - Tracks 1&2 EU = 60$ per 1
    -----USA:101----
    + MasterCard Standart, Visa Classic = $40
    + Visa Gold|Platinum|Corporate|Signature|Business = $40
    + American Express = $45 ( WITHOUT SID )
    + Discover = $50
    -----CANADA:101 201----
    + MasterCard, Visa Classic = $50
    + Visa Gold|Platinum|Corporate|Signature|Business = $50
    -----EU:101 201----
    + MasterCard, Visa Classic = $90
    + Visa Gold|Platinum|Corporate|Signature|Business = $120
    ----Other countries:101 201----
    + MasterCard| Visa Classic = $60
    + Visa Gold|Platinum|Corporate|Signature|Business =$100
    ----ASIA/AUSTRALIA/Exotic:101 , 201 , 121 and others----
    + MasterCard| Visa Classic = $50
    + Visa Gold|Platinum|Corporate|Signature|Business = $60
    ---------------------------------------------------------------------------------
    ====WAY WORKING OUR
    - I always check and update cvv good and fresh every day.
    - I sure cvv of me very good and fresh all with good prices.
    - i here No Test , No Scam , No "not Good" , No Rip , No Bad
    , No Demo , No Free , No Sample
    - If you want to test you must send money for me.
    - I can sell you minimum 5 cvv for testing.
    - I can not send free to experiment.
    - If you don't trust my services. Please do not contact me.
    - I only accept payment money with Perfectmoney(PM)and Westernunion (WU).
    - Hope you are best customer and we can to work a long time.
    - I'm looking for who can work together
    - I'll show you how we do business. And one thing I am sure you will be happy to come with us....
    =====================================================
    ====Thanks all read my post ....... hope to see you soon====

Can you answer this question?

Is this a virus or...?

  • Your Nickname
  • Your Answer

  • Enter the code below to prove you are human