X
Tap here to go to the mobile version of the site.

منتدى الدعم

Urgent Firefox Upgrade virus

Posted

This popped up while surfing on ebay and also pandora. Tries to install firefox-patch.js file from khadacitylinkexpress.org Please notify support! See attached screen shot.

This popped up while surfing on ebay and also pandora. Tries to install firefox-patch.js file from khadacitylinkexpress.org Please notify support! See attached screen shot.

Chosen solution

So you are getting a random name website page claiming to have a so called urgent update for Firefox and a prompt to download a fake firefox-patch.js file?. The random name of the website alone should raise a flag that it was not legit.

This is not from Mozilla or the Firefox web browser. The fake firefox-patch.exe and firefox-patch.js files can install things like trojans, viruses, unwanted software or to download additional stuff onto Windows based on past reports if the user runs them.

The Firefox updates are done internally in Firefox (with a .mar type of file) whether on Windows, Mac OSX or Linux (since Firefox 1.5 almost eleven years ago) or by download from mozilla.org like say www.mozilla.org/firefox/all/

You could try using a adblocker extension like uBlock Origin to block theses fake ads if you keep getting them. https://addons.mozilla.org/firefox/addon/ublock-origin/

Unfortunately this has gone on for a while now with one or two new sites reported almost everyday. https://support.mozilla.org/en-US/forums/contributors/712056/

Even if you were to download this firefox-patch.js file it is not a risk unless you were to try and run it.

Read this answer in context 6

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 10.1.2
  • Amazon MP3 Downloader Plugin 1.0.17
  • Catalina Savings Printer
  • Google Update
  • PDF-XChange Viewer Netscape Gecko Plugin
  • Pando Web Plugin
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Shockwave Flash 23.0 r0
  • 5.1.50901.0
  • Windows Presentation Foundation (WPF) plug-in for Mozilla browsers
  • iTunes Detector Plug-in

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; rv:49.0) Gecko/20100101 Firefox/49.0

More Information

James
  • Top 25 Contributor
  • Moderator
1603 solutions 11348 answers

Chosen Solution

So you are getting a random name website page claiming to have a so called urgent update for Firefox and a prompt to download a fake firefox-patch.js file?. The random name of the website alone should raise a flag that it was not legit.

This is not from Mozilla or the Firefox web browser. The fake firefox-patch.exe and firefox-patch.js files can install things like trojans, viruses, unwanted software or to download additional stuff onto Windows based on past reports if the user runs them.

The Firefox updates are done internally in Firefox (with a .mar type of file) whether on Windows, Mac OSX or Linux (since Firefox 1.5 almost eleven years ago) or by download from mozilla.org like say www.mozilla.org/firefox/all/

You could try using a adblocker extension like uBlock Origin to block theses fake ads if you keep getting them. https://addons.mozilla.org/firefox/addon/ublock-origin/

Unfortunately this has gone on for a while now with one or two new sites reported almost everyday. https://support.mozilla.org/en-US/forums/contributors/712056/

Even if you were to download this firefox-patch.js file it is not a risk unless you were to try and run it.

So you are getting a random name website page claiming to have a so called urgent update for Firefox and a prompt to download a fake firefox-patch.js file?. The random name of the website alone should raise a flag that it was not legit. '''This is not from Mozilla or the Firefox web browser'''. The fake firefox-patch.exe and firefox-patch.js files can install things like trojans, viruses, unwanted software or to download additional stuff onto Windows based on past reports if the user runs them. The Firefox updates are done internally in Firefox (with a .mar type of file) whether on Windows, Mac OSX or Linux (since Firefox 1.5 almost eleven years ago) or by download from mozilla.org like say www.mozilla.org/firefox/all/ You could try using a adblocker extension like uBlock Origin to block theses fake ads if you keep getting them. https://addons.mozilla.org/firefox/addon/ublock-origin/ Unfortunately this has gone on for a while now with one or two new sites reported almost everyday. https://support.mozilla.org/en-US/forums/contributors/712056/ Even if you were to download this firefox-patch.js file it is not a risk unless you were to try and run it.
jujubee2259 0 solutions 5 answers
I was reading my mail - Yahoo / SBCglobal.net - when it popped up. URL of the address was https://akeeckickette.org/651550806155/90e5ab88f37c554a6d8b4a188aed206b/30f2d5408cd93935095d48653d43a302.html
jujubee2259 0 solutions 5 answers
I was on this page https://www.yahoo.com/news/passing-driver-kills-man-attacking-arizona-trooper-road-083744215.html and the bogus patch popped up with this URL: https://eeyimpauljrdesigns.org/240550806155/8daa4a76b66e2a2fb6522e579d8c9ba7/31d990cac8f93647bf82ec38fabf24c4.html
J.L.Miller 0 solutions 5 answers

I received the "Urgent Firefox Update" popup this morning, 2017.01.15, from the following URL:

https://eoxetinforwebradios.org/5231753757765/ee3e6942ce5eb90eacf2e2a2eced3709/bea070493441aefce0429daed7a33522.html

I received the "Urgent Firefox Update" popup this morning, 2017.01.15, from the following URL: https://eoxetinforwebradios.org/5231753757765/ee3e6942ce5eb90eacf2e2a2eced3709/bea070493441aefce0429daed7a33522.html
jujubee2259 0 solutions 5 answers

Are you still wanting people to submit the URLs? I know the previous thread was archived and this one only has a few posts on it.

Here's another one if you're chasing them down: https://yohyagaymentubexxx.org/861550806155/5c702d07f414afa02be48e41f168beba/784531d9f43e3d930f2f04c320f45f8a.html

Are you still wanting people to submit the URLs? I know the previous thread was archived and this one only has a few posts on it. Here's another one if you're chasing them down: https://yohyagaymentubexxx.org/861550806155/5c702d07f414afa02be48e41f168beba/784531d9f43e3d930f2f04c320f45f8a.html
James
  • Top 25 Contributor
  • Moderator
1603 solutions 11348 answers

Helpful Reply

jujubee2259 said

Are you still wanting people to submit the URLs? I know the previous thread was archived and this one only has a few posts on it. Here's another one if you're chasing them down:

The long thread that was being used for mentioning sites was auto locked after six months. I still add sites to the list in https://support.mozilla.org/en-US/forums/contributors/712056 if only to show it is still an annoyance.

''jujubee2259 [[#answer-954031|said]]'' <blockquote> Are you still wanting people to submit the URLs? I know the previous thread was archived and this one only has a few posts on it. Here's another one if you're chasing them down: </blockquote> The long thread that was being used for mentioning sites was auto locked after six months. I still add sites to the list in https://support.mozilla.org/en-US/forums/contributors/712056 if only to show it is still an annoyance.