Hi Bill, there are real people here now that you are in your own question instead of reading articles and previous questions.

I have a "malware?" that continuously pops up on my screen and it appears to reference Firefox.exe and it has just started since my Firefox update on Friday. It is titled Botnet and refers to a URL https://ap.lijit.com/rtb/ord?src=prebid_prebid_prebid_6.12.0

That is an ad server. Whether it forces your computer into a botnet is "to be determined." I submitted that URL to VirusTotal for a second opinion and the majority didn't think it was a problem, but some malicious servers know better than to let VirusTotal check their files.

Where is that URL showing up? For example:

• Your security software says that it blocked a connection to that URL
• Your security software says that a Firefox file (such as a settings file or a cached file) lists that URL
• A Firefox window appears with that URL for no apparent reason
• Something else (please describe)

Although we still have much to learn about the situation, I can give you a general "good housekeeping" suggestion:

One possible culprit would be an extension. You can view, disable, and often remove unwanted or unknown extensions on the Add-ons page. Either:

• Ctrl+Shift+a (Mac: Command+Shift+a)
• "3-bar" menu button (or Tools menu) > Add-ons
• type or paste about:addons in the address bar and press Enter/Return

In the left column of the Add-ons page, click Extensions. On the right side, find the "Manage Your Extensions" heading.

If there is at least one extension before the next heading -- "Recommended Extensions" -- please continue:

Then cast a critical eye over the list below that heading. Any extensions Firefox installs for built-in features are hidden from this page, so everything listed here is your choice (and your responsibility) to manage. Anything suspicious or that you just do not remember installing or why? If in doubt, disable (or remove). For your privacy and security, don't let mystery programs linger here.

Any improvement?

What if the Extensions list is blank or is blocked?

You can restart Firefox in its Troubleshoot Mode to bypass any interference by extensions using either:

• "3-bar" menu button > Help > Troubleshoot Mode... (before Fx88: Restart with Add-ons Disabled)
• (menu bar) Help menu > Troubleshoot Mode... (before Fx88: Restart with Add-ons Disabled)

and OK the restart. A small dialog should appear. Click the Open button (before Fx88: "Start in Safe Mode" button).

Note: Don't use the Refresh without first reviewing this article to understand what will be deleted: Refresh Firefox - reset add-ons and settings.

jscher2000 thanks for the response. When the pop up shows it is from my Avast Premium Security package. It gives the statement "Threat Secured - We've safely aborted connection on ap.lijit.com because it was infected with URL:Botnet."

I got your message via email but it is a "no reply" email. Hopefully this gets to you.

Hi Bill, with this site, you always need to come back to your thread to reply.

So it sounds like Avast blocked whatever the connection was for so you don't need to worry about having been infected.

I think it's still a good idea to check your add-ons in case one of those is the source of the request.

jscher2000 I did go in and close a bunch of add ons but maybe I have to close more. Thanks.

I'll report if I happen to hit the right one.:-))