X
Tap here to go to the mobile version of the site.

Support Forum

Urgent Fire Fox Update Notice

Posted

I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not?

I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not?

Chosen solution

Hi

We are aware of this issue are are working to resolve it. From what you are saying this is almost certainly malware.

Firefox will always update from within the browser and not from a random web page. If you ever unsure of whether you are using the most recent version, this page will walk you through how to check.


Comment added by a forum moderator Please also see our help article

If you do see one of these fake updates please as a reply to this thread post the web address of the fake orange page and if possible the address of the genuine website it appears to have come from - the back arrow on the address bar of the orange page may sometimes help find that.

Read this answer in context 236

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 15.16.20045
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 11.91.2 for Mozilla browsers
  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Office Authorization plug-in for NPAPI browsers
  • Shockwave Flash 22.0 r0
  • 5.1.41212.0
  • Skype for Business Web App Plug-in
  • NPWLPG
  • iTunes Detector Plug-in

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0

More Information

mykdonna 0 solutions 10 answers

Happy112 said

mykdonna said
Question; will it block thing I should see also?  :-)

If it would block things that you should see,   that would be really weird,   I'd say   !    :)

thank you :-) , Well , I mean like updates that are legit, & downloads I need.. ?

''Happy112 [[#answer-915001|said]]'' <blockquote> ''mykdonna [[#answer-914948|said]]'' <blockquote> Question; will it block thing I should see also? :-) </blockquote> If it would block things that you should see, &nbsp; that would be really weird, &nbsp; I'd say &nbsp; !&nbsp; &nbsp; :) </blockquote> thank you :-) , Well , I mean like updates that are legit, & downloads I need.. ?
Happy112 561 solutions 5694 answers

mykdonna said

thank you :-) , Well , I mean like updates that are legit, & downloads I need.. ?

Don't worry about it, and:   should anything   'weird'   happen:   you know where to find us   !   :)

''mykdonna [[#answer-915005|said]]'' <blockquote> thank you :-) , Well , I mean like updates that are legit, & downloads I need.. ? </blockquote> Don't worry about it, and: &nbsp; should anything &nbsp; 'weird' &nbsp; happen: &nbsp; you know where to find us &nbsp; ! &nbsp; :)
bobking10 1 solutions 25 answers

I've received these four times. Here's what popped up today.

Urgent Firefox update --- Download Now

Opening firefox-patch.js

You have chosen to open: firefox-patch.js which is: JavaScript File (2.6 KB) from: https://aphocpreviewyoursites.net Would you like to save this file? Save File [or] Cancel

I ignored this today. But when I downloaded and installed a previous one my Webroot Security identified it as a trojan and removed it.

I've received these four times. Here's what popped up today. '''Urgent Firefox update --- Download Now Opening firefox-patch.js You have chosen to open: firefox-patch.js which is: JavaScript File (2.6 KB) from: https://aphocpreviewyoursites.net Would you like to save this file? Save File [or] Cancel''' I ignored this today. But when I downloaded and installed a previous one my Webroot Security identified it as a trojan and removed it.
Happy112 561 solutions 5694 answers

Hi   bobking10,
Thanks for reporting a fake update.
I'm almost certain that   'you know the drill'   by now,   but here we go again:   Please see the article:    I found a fake Firefox update.

Also see:   Update Firefox to the latest version:
http://mzl.la/152VFwM
And last but not least:
http://addons.mozilla.org/en-US/addon/ublock-origin
Thanks to people like you we're going to get these scammers yet   !

Hi &nbsp; bobking10,<BR> Thanks for reporting a fake update.<BR> I'm almost certain that &nbsp; 'you know the drill' &nbsp; by now, &nbsp; but here we go again: &nbsp; Please see the article: &nbsp;&nbsp; [[I found a fake Firefox update]].<BR> Also see: &nbsp; Update Firefox to the latest version:<BR> http://mzl.la/152VFwM <BR> And last but not least:<BR> http://addons.mozilla.org/en-US/addon/ublock-origin <BR> Thanks to people like you we're going to get these scammers yet &nbsp; !
bobking10 1 solutions 25 answers

No, I do not already know the drill. As I said, I recently installed the fake Firefox "update." Thanks for linking me to the "I found a fake Firefox update" page, which I had not seen previously, but frankly, it tells me what to do "if I spot malware," but not HOW to spot malware.

I surmise from what I read there that Firefox will NEVER send me a message telling me an update is needed. Is that correct? And, if it is correct, I respectfully suggest that you should say that EXPLICITLY and PROMINENTLY on that page, so that computer illiterates like me can understand. Thank you.

No, I do not already know the drill. As I said, I recently installed the fake Firefox "update." Thanks for linking me to the "I found a fake Firefox update" page, which I had not seen previously, but frankly, it tells me what to do "if I spot malware," but not HOW to spot malware. I surmise from what I read there that Firefox will NEVER send me a message telling me an update is needed. Is that correct? And, if it is correct, I respectfully suggest that you should say that EXPLICITLY and PROMINENTLY on that page, so that computer illiterates like me can understand. Thank you.
Happy112 561 solutions 5694 answers

Hi again,   bobking10   !

I apologize for assuming that you already   'knew the drill';   my mistake   !
You're calling yourself a   'computer illiterate':   don't sell yourself short   !
You didn't fall for this scam;   good for you   !!!
To shine a little light on the subject:
Updates are done internally in Firefox itself.
Scammers have been using this tactic for years,  trying to get users to download and infect their computer.
Hard to get rid off,   as they will change their   URL   on a daily basis.
I sure hope you will check out those links I gave you earlier   !
Good job,   bobking10   !

Hi again, &nbsp; bobking10 &nbsp; !<BR> I apologize for assuming that you already &nbsp; 'knew the drill'; &nbsp; my mistake &nbsp; !<BR> You're calling yourself a &nbsp; 'computer illiterate': &nbsp; don't sell yourself short &nbsp; ! <BR> You didn't fall for this scam; &nbsp; good for you &nbsp; !!!<BR> To shine a little light on the subject:<BR> Updates are done internally in Firefox itself.<BR> Scammers have been using this tactic for years,&nbsp; trying to get users to download and infect their computer.<BR> Hard to get rid off, &nbsp; as they will change their &nbsp; URL &nbsp; on a daily basis.<BR> I sure hope you will check out those links I gave you earlier &nbsp; !<BR> Good job, &nbsp; bobking10 &nbsp; !
bobking10 1 solutions 25 answers

But, I DID fall for the scam. It was only my security program that saved me.

But, I DID fall for the scam. It was only my security program that saved me.
Happy112 561 solutions 5694 answers

bobking10 said

But, I DID fall for the scam. It was only my security program that saved me.

But you   did   report it,  and I'll keep saying:   good job   !
Just found another article that you might be interested in:
'Avoid and report Mozilla tech support scams',   and here's a link to it:
http://mzl.la/1N46GnS

''bobking10 [[#answer-915306|said]]'' <blockquote> But, I DID fall for the scam. It was only my security program that saved me. </blockquote> But you &nbsp; '''did''' &nbsp; report it, &nbsp;and I'll keep saying: &nbsp; good job &nbsp; !<BR> Just found another article that you might be interested in:<BR> 'Avoid and report Mozilla tech support scams', &nbsp; and here's a link to it:<BR> http://mzl.la/1N46GnS
James
  • Moderator
1594 solutions 11226 answers

bobking10 said

I surmise from what I read there that Firefox will NEVER send me a message telling me an update is needed. Is that correct? And, if it is correct, I respectfully suggest that you should say that EXPLICITLY and PROMINENTLY on that page, so that computer illiterates like me can understand. Thank you.

You can get a message of a Firefox update yes but in Firefox and not from a random weird name website.

The way Firefox updates are done in desktop Firefox on Windows, Mac OSX, and Linux has not really changed since Firefox 1.5 back in late 2005. It is done internally in Firefox with a .mar type of file that a Firefox user does not need to interact with. example .mar files here.

''bobking10 [[#answer-915296|said]]'' <blockquote> I surmise from what I read there that Firefox will NEVER send me a message telling me an update is needed. Is that correct? And, if it is correct, I respectfully suggest that you should say that EXPLICITLY and PROMINENTLY on that page, so that computer illiterates like me can understand. Thank you. </blockquote> You can get a message of a Firefox update yes but in Firefox and not from a random weird name website. The way Firefox updates are done in desktop Firefox on Windows, Mac OSX, and Linux has not really changed since Firefox 1.5 back in late 2005. It is done internally in Firefox with a .mar type of file that a Firefox user does not need to interact with. [https://archive.mozilla.org/pub/firefox/releases/48.0.2/update/win64/en-US/ example .mar files here].
dmbx1 0 solutions 5 answers

I wanted to post this here also since many are following this discussion. Has anybody tried Windows Defender to remove the malware that causes the popup?

I wanted to post this here also since many are following this discussion. Has anybody tried Windows Defender to remove the malware that causes the popup?
dmbx1 0 solutions 5 answers

Has anybody had any success with any malware removal software?

Has anybody had any success with any malware removal software?
James
  • Moderator
1594 solutions 11226 answers

dmbx1 said

I wanted to post this here also since many are following this discussion. Has anybody tried Windows Defender to remove the malware that causes the popup?

The fake urgent update sites has not been determined to be due to any form of malware on Windows. The malicious sites are being served through a Ad system(s) that some websites may use. Because these sites links the person gets is not viewable by others it makes it harder to reproduce and to get details of how and where.

''dmbx1 [[#answer-915516|said]]'' <blockquote> I wanted to post this here also since many are following this discussion. Has anybody tried Windows Defender to remove the malware that causes the popup? </blockquote> The fake urgent update sites has not been determined to be due to any form of malware on Windows. The malicious sites are being served through a Ad system(s) that some websites may use. Because these sites links the person gets is not viewable by others it makes it harder to reproduce and to get details of how and where.

Modified by James

bobking10 1 solutions 25 answers

dmbx1 said

Has anybody had any success with any malware removal software?

As I posted yesterday, immediately after i downloaded the fake update and restarted Firefox my Webroot Security program identified a Trojan and removed it.

''dmbx1 [[#answer-915517|said]]'' <blockquote> Has anybody had any success with any malware removal software? </blockquote> As I posted yesterday, immediately after i downloaded the fake update and restarted Firefox my Webroot Security program identified a Trojan and removed it.
bobking10 1 solutions 25 answers

Current fraudulent pop-up, as of 11:34 a.m. CST today, September 11, 2016

from URL: https://iixaebrokerforex.net/2541109998248/175773b2294802c1c08b7b72e6328bbe.html

Current fraudulent pop-up, as of 11:34 a.m. CST today, September 11, 2016 from URL: https://iixaebrokerforex.net/2541109998248/175773b2294802c1c08b7b72e6328bbe.html
John99 971 solutions 13138 answers

What we really need to know from someone able to see these fake updates is what site is triggering them. What site were you using when these came up. (Or what had you used recently there could be a time delay involved).

If someone is able to do that then we still need further information about what happens but unfortunately it is difficult for us to pass on the necessary explanations and ask for this before it disappears again. If you do repeatedly see these fake updates the information needed is explained here. For instance
Saving the page that pops up the fake update screen (not the markup of the update screen, but of the page that creates it) using ctrl-s (cmd-s on osx) and saving it once as "web page, complete" and once as "web page, HTML only", ... (save that!) ...
or using wireshark another advanced technique of obtaining useful information.
What we really need to know from someone able to see these fake updates is what site is triggering them. What site were you using when these came up. (Or what had you used recently there could be a time delay involved). If someone is able to do that then we still need further information about what happens but unfortunately it is difficult for us to pass on the necessary explanations and ask for this before it disappears again. If you do repeatedly see these fake updates the information needed is explained [/forums/contributors/712056?last=70117&page=6#post-70117 here]. For instance <blockquote>Saving the page that pops up the fake update screen (not the markup of the update screen, but of the page that creates it) using ctrl-s (cmd-s on osx) and saving it once as "web page, complete" and once as "web page, HTML only", ... (save that!) ... </blockquote> or using ''wireshark'' another advanced technique of obtaining useful information.
dmbx1 0 solutions 5 answers

I never downloaded the popup, I knew this wasn't the way Firefox updated. I was a little sloppy recently and looked at some sites that I knew had a risk so I still wonder if there is some malware on my PC initiating the popup. I have Windows Security Essentials and it does not find anything.

The last two times the popup showed up was when I was browsing on Amazon. I have noticed in the past few months AdChoices has had Amazon adds with things I looked at. I didn't use to get Amazon ads in AdChoices. My PC also had a forced shutdown today, I think that might have happened only one other time in the nearly two years I have had this PC.

I never downloaded the popup, I knew this wasn't the way Firefox updated. I was a little sloppy recently and looked at some sites that I knew had a risk so I still wonder if there is some malware on my PC initiating the popup. I have Windows Security Essentials and it does not find anything. The last two times the popup showed up was when I was browsing on Amazon. I have noticed in the past few months AdChoices has had Amazon adds with things I looked at. I didn't use to get Amazon ads in AdChoices. My PC also had a forced shutdown today, I think that might have happened only one other time in the nearly two years I have had this PC.
bobking10 1 solutions 25 answers

John99 said

What we really need to know from someone able to see these fake updates is what site is triggering them. What site were you using when these came up. (Or what had you used recently there could be a time delay involved). If someone is able to do that then we still need further information about what happens but unfortunately it is difficult for us to pass on the necessary explanations and ask for this before it disappears again. If you do repeatedly see these fake updates the information needed is explained here. For instance
Saving the page that pops up the fake update screen (not the markup of the update screen, but of the page that creates it) using ctrl-s (cmd-s on osx) and saving it once as "web page, complete" and once as "web page, HTML only", ... (save that!) ...
or using wireshark another advanced technique of obtaining useful information.

I was on this site when the pop-up appeared. https://www.google.com/#q=Do+unto+others

Before that I had visited several sites directed by a Google search for wallpapers.

''John99 [[#answer-915602|said]]'' <blockquote> What we really need to know from someone able to see these fake updates is what site is triggering them. What site were you using when these came up. (Or what had you used recently there could be a time delay involved). If someone is able to do that then we still need further information about what happens but unfortunately it is difficult for us to pass on the necessary explanations and ask for this before it disappears again. If you do repeatedly see these fake updates the information needed is explained [/forums/contributors/712056?last=70117&page=6#post-70117 here]. For instance <blockquote>Saving the page that pops up the fake update screen (not the markup of the update screen, but of the page that creates it) using ctrl-s (cmd-s on osx) and saving it once as "web page, complete" and once as "web page, HTML only", ... (save that!) ... </blockquote> or using ''wireshark'' another advanced technique of obtaining useful information. </blockquote> I was on this site when the pop-up appeared. https://www.google.com/#q=Do+unto+others Before that I had visited several sites directed by a Google search for wallpapers.
dmbx1 0 solutions 5 answers

Just wanted to add that the button to download the virus is greyed out when it pops up so I couldn't download it if I wanted to so it does appear something is at least blocking that.

Just wanted to add that the button to download the virus is greyed out when it pops up so I couldn't download it if I wanted to so it does appear something is at least blocking that.
mykdonna 0 solutions 10 answers

I was on ebay all three times - But since (2 days ago) I added UBlock I have not had a problem.... Knock! Knock! on wood.... :-)

I was on ebay all three times - But since (2 days ago) I added UBlock I have not had a problem.... Knock! Knock! on wood.... :-)
Happy112 561 solutions 5694 answers

mykdonna said

I was on ebay all three times - But since (2 days ago) I added UBlock I have not had a problem.... Knock! Knock! on wood.... :-)

Great   !   ......   fingers crossed   !!! ☺

''mykdonna [[#answer-915650|said]]'' <blockquote> I was on ebay all three times - But since (2 days ago) I added UBlock I have not had a problem.... Knock! Knock! on wood.... :-) </blockquote> Great &nbsp; ! &nbsp; ...... &nbsp; fingers crossed &nbsp; !!! ☺