X
Tap here to go to the mobile version of the site.

Support Forum

Urgent Fire Fox Update Notice

Posted

I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not?

I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not?

Chosen solution

Hi

We are aware of this issue are are working to resolve it. From what you are saying this is almost certainly malware.

Firefox will always update from within the browser and not from a random web page. If you ever unsure of whether you are using the most recent version, this page will walk you through how to check.


Comment added by a forum moderator Please also see our help article

If you do see one of these fake updates please as a reply to this thread post the web address of the fake orange page and if possible the address of the genuine website it appears to have come from - the back arrow on the address bar of the orange page may sometimes help find that.

Read this answer in context 236

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 15.16.20045
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 11.91.2 for Mozilla browsers
  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Office Authorization plug-in for NPAPI browsers
  • Shockwave Flash 22.0 r0
  • 5.1.41212.0
  • Skype for Business Web App Plug-in
  • NPWLPG
  • iTunes Detector Plug-in

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0

More Information

CAtransplant 0 solutions 13 answers
https://oochaons96.org/5952923236048/76b761f98992522c989d09932a3ed53b.html Link when fake update screen popped up.
alwaysbroke 0 solutions 4 answers

Sorry, already x it off, and it is a different download file everytime, too. It has happened on various sites, that I know are safe. I believe it was on Facebook this last time. It is not necessarily when you click on anything either. You can just be scrollin down a page when it pops up. This is why I was assuming that it must be a Firefox extension to blame. I don't even have flash player enabled for most sites either.

Sorry, already x it off, and it is a different download file everytime, too. It has happened on various sites, that I know are safe. I believe it was on Facebook this last time. It is not necessarily when you click on anything either. You can just be scrollin down a page when it pops up. This is why I was assuming that it must be a Firefox extension to blame. I don't even have flash player enabled for most sites either.

Modified by alwaysbroke

cliffontheroad 2 solutions 57 answers

I tend to not bother to register either for several reasons, but me being "one of you", thank you for posting what you did. New ideas are welcome, even if the inmates are running the prison. LOL.

My first orange screen came after I loaded active-x in Feb. Clue? I also took a look at my (top left screen) Tools, Add-ons, and saw several as expected. But I inquired on Google Earth Plugin and it was the previous release BUT with a date of this August. That was strange since I have deactivated Google updates, and IMO if going to their site or using any of their utilties (hidden in web sites), why would the non-latest be downloaded. This coincided with an item in my download folder.

Everything will be considered, so thanks. The orange screen has always been associated with a web page with an ad, and no one has to click on anything. As commented here or maybe on 2 other threads, the ads (?) causing the branching are unknown. Some web pages had it impossible to find out where the image even is housed. Any page, such as the yahoo/att one above only has media from yahoo. And all links on the page are to others on that site. BUT some of those programs, or subroutines, have hundreds of their own "calls" to sites elsewhere. Google, ATT, abv3-tslogging.touchcommerce, https://bs.serving-sys.com/BurstingPipe/adServer.bs which is an adserver for Sizmek, dpm.demdex.net, cdn.tt.omtrdc.net, etc.

and I'm only 2 levels deep. And that is just the source code (?) sent back to my machine. The actual code/program on someone elses to get to the orange screen could be different. There are other companies which may house or redirect a user to left field. Something will show itself, eventually. Oh, the orange screen happens overseas too. I don't want to give out too many deails. It will just make it harder.

I support ad blocking, as well as reporting the problem/screen to various sites. BUT, the address of the orange screen (which changes) probably tests as OK. It's the patch/update which is the problem. 3rd party sites can house legit stuff and download it okay. But we know now that Firefox should ONLY come from the browser help tab. I am not a fan of background automatic updates. Microsoft doesn't know the panic caused when CPU usage jumps for reasons unknown. Google too and FF....

AlwaysBroke. Try the web site you visited tomorrow. It may rehappen. Just what site WERE you visiting?

I tend to not bother to register either for several reasons, but me being "one of you", thank you for posting what you did. New ideas are welcome, even if the inmates are running the prison. LOL. My first orange screen came after I loaded active-x in Feb. Clue? I also took a look at my (top left screen) Tools, Add-ons, and saw several as expected. But I inquired on Google Earth Plugin and it was the previous release BUT with a date of this August. That was strange since I have deactivated Google updates, and IMO if going to their site or using any of their utilties (hidden in web sites), why would the non-latest be downloaded. This coincided with an item in my download folder. Everything will be considered, so thanks. The orange screen has always been associated with a web page with an ad, and no one has to click on anything. As commented here or maybe on 2 other threads, the ads (?) causing the branching are unknown. Some web pages had it impossible to find out where the image even is housed. Any page, such as the yahoo/att one above only has media from yahoo. And all links on the page are to others on that site. BUT some of those programs, or subroutines, have hundreds of their own "calls" to sites elsewhere. Google, ATT, abv3-tslogging.touchcommerce, https://bs.serving-sys.com/BurstingPipe/adServer.bs which is an adserver for Sizmek, dpm.demdex.net, cdn.tt.omtrdc.net, etc. and I'm only 2 levels deep. And that is just the source code (?) sent back to my machine. The actual code/program on someone elses to get to the orange screen could be different. There are other companies which may house or redirect a user to left field. Something will show itself, eventually. Oh, the orange screen happens overseas too. I don't want to give out too many deails. It will just make it harder. I support ad blocking, as well as reporting the problem/screen to various sites. BUT, the address of the orange screen (which changes) probably tests as OK. It's the patch/update which is the problem. 3rd party sites can house legit stuff and download it okay. But we know now that Firefox should ONLY come from the browser help tab. I am not a fan of background automatic updates. Microsoft doesn't know the panic caused when CPU usage jumps for reasons unknown. Google too and FF.... AlwaysBroke. Try the web site you visited tomorrow. It may rehappen. Just what site WERE you visiting?

Modified by cliffontheroad

John99 971 solutions 13138 answers
.... I am not a fan of background automatic updates. Microsoft doesn't know the panic caused when CPU usage jumps for reasons unknown. Google too and FF....

At least with Firefox it can be set to check and then update later. Use

about:preferences#advanced  
Check for updates, but let me choose whether to install them

See Advanced panel - Accessibility, browsing, network, updates, and other advanced settings in Firefox_update-tab

<blockquote>.... I am not a fan of background automatic updates. Microsoft doesn't know the panic caused when CPU usage jumps for reasons unknown. Google too and FF....</blockquote> At least with Firefox it can be set to check and then update later. Use about:preferences#advanced Check for updates, but let me choose whether to install them See [[Advanced panel - Accessibility, browsing, network, updates, and other advanced settings in Firefox#w_update-tab]]_update-tab
mykdonna 0 solutions 10 answers

This is the url of the Urgent Update orange screen I just encountered if it helps

https://iezohiauksh.net/2981140357516/b5de3a7720ad1714e918bdbb2999a26d.html

This is the url of the Urgent Update orange screen I just encountered if it helps https://iezohiauksh.net/2981140357516/b5de3a7720ad1714e918bdbb2999a26d.html
misschalkdust 0 solutions 2 answers

Just popped up - url for orange screen

and a screen shot of screen and "firefox patch.js" No wonder Mozilla doesn't like java script!!!

https://iezohiauksh.net/3782903888914/69fefe87336ad2fa018c873f969b89ba.html

Just popped up - url for orange screen and a screen shot of screen and "firefox patch.js" No wonder Mozilla doesn't like java script!!! https://iezohiauksh.net/3782903888914/69fefe87336ad2fa018c873f969b89ba.html
hdhndsft 0 solutions 3 answers
https://quibutonyluvgeraldine.org/626847985650/e0d5effef0b7ffd8f46745a6d1529d3a.html
Happy112 561 solutions 5694 answers

Hi   mykdonna,   misschalkdust  and   hdhndsft,
Thanks for reporting a fake update. Please see the article I found a fake Firefox update.

Hi &nbsp; mykdonna, &nbsp; misschalkdust&nbsp; and &nbsp; hdhndsft,<BR> Thanks for reporting a fake update. Please see the article [[I found a fake Firefox update]].
mykdonna 0 solutions 10 answers

Again it happened today - just now. I was posting a link to facebook from ebay - it opened a tab in between tabs - (colorful tabs)

url  ; https://keeshelcuara.net/5531140357516/605581f7b0d3fedb49f0247c43a726ce.html

Again it happened today - just now. I was posting a link to facebook from ebay - it opened a tab in between tabs - (colorful tabs) url ; https://keeshelcuara.net/5531140357516/605581f7b0d3fedb49f0247c43a726ce.html
Happy112 561 solutions 5694 answers

Hi   mykdonna,

Thanks for reporting a fake update   (again   !)   Don't you just wish these scammers were on board a rocket to a faraway planet ?
Please see the article I found a fake Firefox update.

Hi &nbsp; mykdonna,<BR> Thanks for reporting a fake update &nbsp; (again &nbsp; !) &nbsp; Don't you just wish these scammers were on board a rocket to a faraway planet ?<BR>Please see the article [[I found a fake Firefox update]].
mykdonna 0 solutions 10 answers

Happy112 said

Hi   mykdonna,
Thanks for reporting a fake update   (again   !)   Don't you just wish these scammers were on board a rocket to a faraway planet ?
Please see the article I found a fake Firefox update.


Yes it is quite disturbing- the screen opens & and covers what you were doing. it says "LOOK AT ME NOW & AND CLICK ON SOMETHING BAD"

''Happy112 [[#answer-914614|said]]'' <blockquote> Hi &nbsp; mykdonna,<BR> Thanks for reporting a fake update &nbsp; (again &nbsp; !) &nbsp; Don't you just wish these scammers were on board a rocket to a faraway planet ?<BR>Please see the article [[I found a fake Firefox update]]. </blockquote> Yes it is quite disturbing- the screen opens & and covers what you were doing. it says "LOOK AT ME NOW & AND CLICK ON SOMETHING BAD"
cliffontheroad 2 solutions 57 answers

Unknown if it will help, but try the URL below (in another window/tab) for whois and more importantly tracert.

One could also use Windows CMD (via RUN on WIndows 7) and type TRACERT keeshelcuara.net (or whatever the name of the day)

Where you end up is probably the only important thing. When the URL is unregistered or flagged, the whois is soon to be unavailable. Again, this is only for my curiosity and I'd prefer it not be posted here (private email)

http://cqcounter.com/traceroute and type in the URL (keeshelcuara.net, for example)

My best 'hits' have been between 2-5 AM. By 5PM for a 7AM posting, details are pretty much unavailable for investigation, except of course the site the person was visiting when "orange" showed its ugly head to see if there is a pattern among sites.

Unknown if it will help, but try the URL below (in another window/tab) for whois and more importantly tracert. One could also use Windows CMD (via RUN on WIndows 7) and type TRACERT keeshelcuara.net (or whatever the name of the day) Where you end up is probably the only important thing. When the URL is unregistered or flagged, the whois is soon to be unavailable. Again, this is only for my curiosity and I'd prefer it not be posted here (private email) http://cqcounter.com/traceroute and type in the URL (keeshelcuara.net, for example) My best 'hits' have been between 2-5 AM. By 5PM for a 7AM posting, details are pretty much unavailable for investigation, except of course the site the person was visiting when "orange" showed its ugly head to see if there is a pattern among sites.

Modified by cliffontheroad

Happy112 561 solutions 5694 answers

mykdonna said

Yes it is quite disturbing- the screen opens & and covers what you were doing. it says "LOOK AT ME NOW & AND CLICK ON SOMETHING BAD"

This should help you to rid of them:
https://addons.mozilla.org/en-US/addon/ublock-origin
And again:  : thanks for reporting this and good for you not to fall for it   !

''mykdonna [[#answer-914617|said]]'' <blockquote> Yes it is quite disturbing- the screen opens & and covers what you were doing. it says "LOOK AT ME NOW & AND CLICK ON SOMETHING BAD" </blockquote> This should help you to rid of them:<BR> https://addons.mozilla.org/en-US/addon/ublock-origin <BR> And again: &nbsp: thanks for reporting this and good for you not to fall for it &nbsp; !
CAtransplant 0 solutions 13 answers
Thanks for this: https://addons.mozilla.org/en-US/addon/ublock-origin Hope it works!
Happy112 561 solutions 5694 answers

CAtransplant said

Thanks for this: https://addons.mozilla.org/en-US/addon/ublock-origin Hope it works!

Let us know if it did,   will you   ?
Good luck   !!!
(and by the way:   you're quite welcome.)

''CAtransplant [[#answer-914856|said]]'' <blockquote> Thanks for this: https://addons.mozilla.org/en-US/addon/ublock-origin Hope it works! </blockquote> Let us know if it did, &nbsp; will you &nbsp; ?<BR> Good luck &nbsp; !!!<BR> (and by the way: &nbsp; you're quite welcome.)
CAtransplant 0 solutions 13 answers

Wilco.

Wilco.
mykdonna 0 solutions 10 answers
Day 3 i get this - https://iechudacast.net/1781140357516/c3acb42eb4f23c6251f5c2e360ffc2e0.html
Happy112 561 solutions 5694 answers

mykdonna said

Day 3 i get this - https://iechudacast.net/1781140357516/c3acb42eb4f23c6251f5c2e360ffc2e0.html

Isn't this infuriating   !!! I'd almost say:   you know the drill by now,   but let's go over it again, just to be sure:
To try and get rid of these scammers:
http://addons.mozilla.org/en-US/addon/ublock-origin
And once again:
Thanks for reporting a fake update. Please see the article:   I found a fake Firefox update.

''mykdonna [[#answer-914948|said]]'' <blockquote> Day 3 i get this - https://iechudacast.net/1781140357516/c3acb42eb4f23c6251f5c2e360ffc2e0.html </blockquote> Isn't this infuriating &nbsp; !!! I'd almost say: &nbsp; you know the drill by now, &nbsp; but let's go over it again, just to be sure:<BR> To try and get rid of these scammers:<BR> http://addons.mozilla.org/en-US/addon/ublock-origin <BR> And once again: <BR> Thanks for reporting a fake update. Please see the article: &nbsp; [[I found a fake Firefox update]].
mykdonna 0 solutions 10 answers

Happy112 said

mykdonna said
Day 3 i get this - https://iechudacast.net/1781140357516/c3acb42eb4f23c6251f5c2e360ffc2e0.html

Isn't this infuriating   !!! I'd almost say:   you know the drill by now,   but let's go over it again, just to be sure:
To try and get rid of these scammers:
http://addons.mozilla.org/en-US/addon/ublock-origin
And once again:
Thanks for reporting a fake update. Please see the article:   I found a fake Firefox update.

Thank you Happy112, and every one else for the comments, I am not very tech save even though I use a computer every day, But my son is, & I just got him to help me get the "U Block" app running. lets see if it helps. Thank you again!

Question; will it block thing I should see also?  :-)

''Happy112 [[#answer-914968|said]]'' <blockquote> ''mykdonna [[#answer-914948|said]]'' <blockquote> Day 3 i get this - https://iechudacast.net/1781140357516/c3acb42eb4f23c6251f5c2e360ffc2e0.html </blockquote> Isn't this infuriating &nbsp; !!! I'd almost say: &nbsp; you know the drill by now, &nbsp; but let's go over it again, just to be sure:<BR> To try and get rid of these scammers:<BR> http://addons.mozilla.org/en-US/addon/ublock-origin <BR> And once again: <BR> Thanks for reporting a fake update. Please see the article: &nbsp; [[I found a fake Firefox update]]. </blockquote> Thank you Happy112, and every one else for the comments, I am not very tech save even though I use a computer every day, But my son is, & I just got him to help me get the "U Block" app running. lets see if it helps. Thank you again! Question; will it block thing I should see also? :-)
Happy112 561 solutions 5694 answers

mykdonna said

Question; will it block thing I should see also?  :-)

If it would block things that you should see,   that would be really weird,   I'd say   !    :)

''mykdonna [[#answer-914948|said]]'' <blockquote> Question; will it block thing I should see also? :-) </blockquote> If it would block things that you should see, &nbsp; that would be really weird, &nbsp; I'd say &nbsp; !&nbsp; &nbsp; :)