X
Tap here to go to the mobile version of the site.

Support Forum

Urgent Fire Fox Update Notice

Posted

I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not?

I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not?

Chosen solution

Hi

We are aware of this issue are are working to resolve it. From what you are saying this is almost certainly malware.

Firefox will always update from within the browser and not from a random web page. If you ever unsure of whether you are using the most recent version, this page will walk you through how to check.


Comment added by a forum moderator Please also see our help article

If you do see one of these fake updates please as a reply to this thread post the web address of the fake orange page and if possible the address of the genuine website it appears to have come from - the back arrow on the address bar of the orange page may sometimes help find that.

Read this answer in context 236

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 15.16.20045
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 11.91.2 for Mozilla browsers
  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Office Authorization plug-in for NPAPI browsers
  • Shockwave Flash 22.0 r0
  • 5.1.41212.0
  • Skype for Business Web App Plug-in
  • NPWLPG
  • iTunes Detector Plug-in

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0

More Information

scgal 0 solutions 5 answers

Just got one here. I seem to mostly get them at tv news sites. Sometimes I go a week without one. I visit wistv.com often and get the most there.

http://philadelphia.cbslocal.com/2016/09/19/philly-fop-chief-on-presidential-endorsment-clinton-blew-the-police-off/

Just got one here. I seem to mostly get them at tv news sites. Sometimes I go a week without one. I visit wistv.com often and get the most there. http://philadelphia.cbslocal.com/2016/09/19/philly-fop-chief-on-presidential-endorsment-clinton-blew-the-police-off/
capt0404 0 solutions 3 answers

I get this once or twice a day and I've attach screenshots with addresses. Appears to be random, not connected to any website activity. It is VERY annoying and has to be fixed.

I get this once or twice a day and I've attach screenshots with addresses. Appears to be random, not connected to any website activity. It is VERY annoying and has to be fixed.
John99 971 solutions 13138 answers

This is problem on the internet not with Firefox. Using an adblocker may help prevent you seeing this issue.


If you are an advanced user and see this and are able to reproduce it then let us know because there are things you may be able to do to help us investigate the problem.

This is problem on the internet not with Firefox. Using an adblocker may help prevent you seeing this issue. * See also the recently updated article [[I found a fake Firefox update]] ------- If you are an advanced user and see this and are able to reproduce it then let us know because there are things you may be able to do to help us investigate the problem. * See https://support.mozilla.org/en-US/questions/1129758?page=5#answer-917446 above and this [https://support.mozilla.org/forums/contributors/712056?last=70117&page=6#post-70117 post]
scgal 0 solutions 5 answers

I used the back button and saved the page as directed in that post but was not able to reproduce. I tried chrome and firefox on another laptop within 5 minutes.

I used the back button and saved the page as directed in that post but was not able to reproduce. I tried chrome and firefox on another laptop within 5 minutes.
Happy112 561 solutions 5694 answers

capt0404 said

I get this once or twice a day and I've attach screenshots with addresses. Appears to be random, not connected to any website activity. It is VERY annoying and has to be fixed.

As   John99   already suggested:   you could consider an adblocker,   like:
https://addons.mozilla.org/en-US/addon/ublock-origin
That should put an end to this.

''capt0404 [[#answer-918636|said]]'' <blockquote> I get this once or twice a day and I've attach screenshots with addresses. Appears to be random, not connected to any website activity. It is VERY annoying and has to be fixed. </blockquote> As &nbsp; John99 &nbsp; already suggested: &nbsp; you could consider an adblocker, &nbsp; like:<BR> https://addons.mozilla.org/en-US/addon/ublock-origin <BR> That should put an end to this.
cliffontheroad 2 solutions 57 answers

This is a reply. I have never seen more than one orange screen per day on one browser. Once displayed, it might be possible (is?) to redisplay the orange screen but only after a page-back and page-forward. The page-back is very important because, when the URL is shared here, it gives us a change to get our own orange screen until the site is deactivated within hours.

This is a reply. I have never seen more than one orange screen per day on one browser. Once displayed, it might be possible (is?) to redisplay the orange screen but only after a page-back and page-forward. The page-back is very important because, when the URL is shared here, it gives us a change to get our own orange screen until the site is deactivated within hours.
cliffontheroad 2 solutions 57 answers

New topic opened today but it is our phony udate creature which a person has downloaded and now gets pop-up ads every 15 minutes.

https://support.mozilla.org/en-US/questions/1139998#answer-919295

New topic opened today but it is our phony udate creature which a person has downloaded and now gets pop-up ads every 15 minutes. https://support.mozilla.org/en-US/questions/1139998#answer-919295
fastharry 0 solutions 6 answers

i'm getting it as well....happens esp when I am on ebay.....sending pic....Firefox 49, windows 10 with anniversary build...

i'm getting it as well....happens esp when I am on ebay.....sending pic....Firefox 49, windows 10 with anniversary build...
markem 0 solutions 4 answers

I wanted to put in a ME TOO message. I am finding that eBay has this on it. My thoughts are that they are embedding it in to images. Possibly ad images and they are exploiting some hole in the way images are being displayed. My search on eBay was for "laser cut coasters". After the page loaded, I turned away from the computer for a moment and when I looked back at Firefox - it had this urgent message being displayed. Since I don't think eBay is in the business of doing scams, spoofs, or whatever, I am taking it that there is a problem with an algorithm to display images. I have to admit - if the hackers spent half as much time in legal pursuits they probably would already own most of the world! Instead they just make our lives miserable by pulling this kind of a thing. Anyway, I believe they are coming in via something an image type allows to happen. Like redirecting to their website.

I wanted to put in a ME TOO message. I am finding that eBay has this on it. My thoughts are that they are embedding it in to images. Possibly ad images and they are exploiting some hole in the way images are being displayed. My search on eBay was for "laser cut coasters". After the page loaded, I turned away from the computer for a moment and when I looked back at Firefox - it had this urgent message being displayed. Since I don't think eBay is in the business of doing scams, spoofs, or whatever, I am taking it that there is a problem with an algorithm to display images. I have to admit - if the hackers spent half as much time in legal pursuits they probably would already own most of the world! Instead they just make our lives miserable by pulling this kind of a thing. Anyway, I believe they are coming in via something an image type allows to happen. Like redirecting to their website.
fastharry 0 solutions 6 answers

markem said

I wanted to put in a ME TOO message. I am finding that eBay has this on it. My thoughts are that they are embedding it in to images. Possibly ad images and they are exploiting some hole in the way images are being displayed. My search on eBay was for "laser cut coasters". After the page loaded, I turned away from the computer for a moment and when I looked back at Firefox - it had this urgent message being displayed. Since I don't think eBay is in the business of doing scams, spoofs, or whatever, I am taking it that there is a problem with an algorithm to display images. I have to admit - if the hackers spent half as much time in legal pursuits they probably would already own most of the world! Instead they just make our lives miserable by pulling this kind of a thing. Anyway, I believe they are coming in via something an image type allows to happen. Like redirecting to their website.

glad I am not the only one, lol..

''markem [[#answer-919562|said]]'' <blockquote> I wanted to put in a ME TOO message. I am finding that eBay has this on it. My thoughts are that they are embedding it in to images. Possibly ad images and they are exploiting some hole in the way images are being displayed. My search on eBay was for "laser cut coasters". After the page loaded, I turned away from the computer for a moment and when I looked back at Firefox - it had this urgent message being displayed. Since I don't think eBay is in the business of doing scams, spoofs, or whatever, I am taking it that there is a problem with an algorithm to display images. I have to admit - if the hackers spent half as much time in legal pursuits they probably would already own most of the world! Instead they just make our lives miserable by pulling this kind of a thing. Anyway, I believe they are coming in via something an image type allows to happen. Like redirecting to their website. </blockquote> glad I am not the only one, lol..
scgal 0 solutions 5 answers

I just got one here: http://newyork.cbslocal.com/2016/09/22/officer-charged-terence-crutcher/

Not sure if this will help, but I tried to reproduce without luck, so did something on my pc and went back to the link and it diverted to this after a few seconds.

I just got one here: http://newyork.cbslocal.com/2016/09/22/officer-charged-terence-crutcher/ Not sure if this will help, but I tried to reproduce without luck, so did something on my pc and went back to the link and it diverted to this after a few seconds.
cliffontheroad 2 solutions 57 answers

Orange screen is NOT reproducible! (read my post above) but you can try again tomorrow. Images of the "orange screen" do not aid, but the URL might. The last known URL before the orange screen should help track down this problem, facilitated by the web sites themselves - YEA, as if you can get them to help in this endevor. (dig) More complete explaination of what is known so far WAS in this post but I removed same. The CBS site had 4 advertising 'agencies' renting space but the problem ad is like "wack a mole" , yet, thank you SCGAL for posting that URL.

Orange screen is NOT reproducible! (read my post above) but you can try again tomorrow. Images of the "orange screen" do not aid, but the URL might. The last known URL before the orange screen should help track down this problem, facilitated by the web sites themselves - YEA, as if you can get them to help in this endevor. (dig) More complete explaination of what is known so far WAS in this post but I removed same. The CBS site had 4 advertising 'agencies' renting space but the problem ad is like "wack a mole" , yet, thank you SCGAL for posting that URL.

Modified by cliffontheroad

capt0404 0 solutions 3 answers

Was just responding to a message from cliffontheroad about my getting the URGENT UPDATE twice in one day and WHILE filling in the Reply box populated when clicking on Reply in the email an orange URGENT UPDATE tab/window opened!!! I cut and pasted into that Reply box the Page Source information and URL but I took screenshots of View Page Info and will attach it now.

Was just responding to a message from cliffontheroad about my getting the URGENT UPDATE twice in one day and WHILE filling in the Reply box populated when clicking on Reply in the email an orange URGENT UPDATE tab/window opened!!! I cut and pasted into that Reply box the Page Source information and URL but I took screenshots of View Page Info and will attach it now.
cliffontheroad 2 solutions 57 answers

was this the first orange screen today? Delays are permitted and that would explain why the OrngScrn appeared while you were in a post-reply. These support pages do not carry advertising, so I am curious what other tabs you had open at the time of the OS. because of the new-tab, I think other "windows" can be dismissed.

You did cause 2 new thoughts; these OS sites were all HTTPS and no checking has been done with Commodo CA.

2nd is cookie storage (thank you again), your screen says a cookie was saved. Anything worth while in it?

was this the first orange screen today? Delays are permitted and that would explain why the OrngScrn appeared while you were in a post-reply. These support pages do not carry advertising, so I am curious what other tabs you had open at the time of the OS. because of the new-tab, I think other "windows" can be dismissed. You did cause 2 new thoughts; these OS sites were all HTTPS and no checking has been done with Commodo CA. 2nd is cookie storage (thank you again), your screen says a cookie was saved. Anything worth while in it?
capt0404 0 solutions 3 answers

Yes, it was the first orange screen today but I have one almost every day - that or the box that magaically opens with something along the lines of "You have chosen to save this file". I'm getting better at being aware of what is going on when this happens and this time I had only two other tabs/windows open both referring to the NY Times video of the Keith Scott shooting: http://www.nytimes.com/?WT.z_jog=1&hF=t&vS=undefined [ and] http://www.nytimes.com/video/us/100000004667027/video-keith-scott-police-shooting-charlotte.html?smid=pl-share

As for the cookie that was saved: Don't know how to tell if "Anything worth while in it?" Just went back and looked at my cookies and nothing was recognizable-there were so many. CLeared my cookies and the next time it happens, I'll have a look see.

It'll come up again: What do you need me to look at and document?

Yes, it was the first orange screen today but I have one almost every day - that or the box that magaically opens with something along the lines of "You have chosen to save this file". I'm getting better at being aware of what is going on when this happens and this time I had only two other tabs/windows open both referring to the NY Times video of the Keith Scott shooting: http://www.nytimes.com/?WT.z_jog=1&hF=t&vS=undefined [ and] http://www.nytimes.com/video/us/100000004667027/video-keith-scott-police-shooting-charlotte.html?smid=pl-share As for the cookie that was saved: Don't know how to tell if "Anything worth while in it?" Just went back and looked at my cookies and nothing was recognizable-there were so many. CLeared my cookies and the next time it happens, I'll have a look see. It'll come up again: What do you need me to look at and document?

Modified by capt0404

cliffontheroad 2 solutions 57 answers

Tools -> Page info -> Security -> Display Cookies

You can do this anytime from anyplace even if the Security info says "no" because in the display which follows, you will type in all or even part of the web site. If bad guys site was "orangetoday.org", if U haven't cleared cookies, they are there. Six lines of info R shown. Content might be the longest; can 'cut-n-paste' (reverse video and copy. I can explain this step) Is there good info? Is there a patern? BTW, "expires" is typically time cookie was saved but several years ahead.

Due to the delay which was mentioned, to help with this, we all have to be a little slower in our clicking. When I went to that NYTimes site, I saw DoubleClick and Google program names, then a pause, then Moatads. A problem is that some pgms/routines are commonly used as may not be a good finger-pointer. I have Flash blocked, but another problem is that the sites/advertisers are continually active supplying new ads (which will be a reason for public outcry and boycott someday.)

Besides Capt0404, if U R reading this, U can look at your own cookies and help note differences. Me, I'm still working on my roof.

Tools -> Page info -> Security -> Display Cookies You can do this anytime from anyplace even if the Security info says "no" because in the display which follows, you will type in all or even part of the web site. If bad guys site was "orangetoday.org", if U haven't cleared cookies, they are there. Six lines of info R shown. Content might be the longest; can 'cut-n-paste' (reverse video and copy. I can explain this step) Is there good info? Is there a patern? BTW, "expires" is typically time cookie was saved but several years ahead. Due to the delay which was mentioned, to help with this, we all have to be a little slower in our clicking. When I went to that NYTimes site, I saw DoubleClick and Google program names, then a pause, then Moatads. A problem is that some pgms/routines are commonly used as may not be a good finger-pointer. I have Flash blocked, but another problem is that the sites/advertisers are continually active supplying new ads (which will be a reason for public outcry and boycott someday.) Besides Capt0404, if U R reading this, U can look at your own cookies and help note differences. Me, I'm still working on my roof.

Modified by cliffontheroad

cliffontheroad 2 solutions 57 answers

New idea, especially if the OS comes regularly. We have been doing a 'page back' on the OS but maybe that is false. If a window can open a new tab, maybe the cause is the original window which has pushed into the stack a false site/page AND to then open the OS site. Unfortuately what I have surmised is that javascript can kill entries/history.

The M$FT pgm procexp.exe might help. It's a supercharge tashmgr, with 'threads' being robust with ever changing info. I found no help, and when I see a dozen connections to my modem, I panic. What is reality? I've given up on THAT search.

New idea, especially if the OS comes regularly. We have been doing a 'page back' on the OS but maybe that is false. If a window can open a new tab, maybe the cause is the original window which has pushed into the stack a false site/page AND to then open the OS site. Unfortuately what I have surmised is that javascript can kill entries/history. The M$FT pgm procexp.exe might help. It's a supercharge tashmgr, with 'threads' being robust with ever changing info. I found no help, and when I see a dozen connections to my modem, I panic. What is reality? I've given up on THAT search.

Modified by cliffontheroad

tippywi 0 solutions 5 answers

kgenung said

I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not?
''kgenung [[#question-1129758|said]]'' <blockquote> I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not? </blockquote>
tippywi 0 solutions 5 answers

I, too, have been having this problem for a couple of months. I just had another popup this AM. I did copy the address for you. PLEASE help!!!! I've tried everything to get rid of it but it is persistent.

https://didaibluegreenowner.net/948790868644/b481bd71c4ad01f0258cac03a000cc12.html

I, too, have been having this problem for a couple of months. I just had another popup this AM. I did copy the address for you. PLEASE help!!!! I've tried everything to get rid of it but it is persistent. https://didaibluegreenowner.net/948790868644/b481bd71c4ad01f0258cac03a000cc12.html
cliffontheroad 2 solutions 57 answers

Solution stated elsewhere is to install an adBlocker. Thank you for your submission, and you get a gold star for finding this thread which I thought had fallen off the edge of the earth. My (that is MY) suggestion to fix this has been to uninstall FF completely and install a new version. Yes it will cause a loss but so far has worked. If the phony patch/update has been loaded, my suggestion there has been to restore windows 7 from a restore point prior to the phony-download. I write this here because it is my last hurrah. The fault of the orange page happening is the ad-agencies who sell to, and the web sites which allow this 'left turn to the orange screen.' Additional fault IMO lies with google/doubleclick/microsoft through the utilities they provide for targeted advertising. The research I have done I would freely send someone who wants to continue and has the time. Some of it is interesting, but since the site (you mentioned) only stays up for a day, the 'where were you/what were you doing' is perhaps more important than the URL of the orange screen and popup. Still, thank you.

Solution stated elsewhere is to install an adBlocker. Thank you for your submission, and you get a gold star for finding this thread which I thought had fallen off the edge of the earth. My (that is MY) suggestion to fix this has been to uninstall FF completely and install a new version. Yes it will cause a loss but so far has worked. If the phony patch/update has been loaded, my suggestion there has been to restore windows 7 from a restore point prior to the phony-download. I write this here because it is my last hurrah. The fault of the orange page happening is the ad-agencies who sell to, and the web sites which allow this 'left turn to the orange screen.' Additional fault IMO lies with google/doubleclick/microsoft through the utilities they provide for targeted advertising. The research I have done I would freely send someone who wants to continue and has the time. Some of it is interesting, but since the site (you mentioned) only stays up for a day, the 'where were you/what were you doing' is perhaps more important than the URL of the orange screen and popup. Still, thank you.