Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Have been receiving important down load now from queidwhoreslag.net using your logo is this legitimate ?

more options

The entire screen fills with your logo and the statement that it is URGENT to take this down load action but the download is not from you guys it is queidwhoreslag.net - doesn't sound authentic to me. Is this legitimate ? Thank you

Chosen solution

No Mozilla Firefox does not use that method

It is Malware.

Please do not open or run such files. If downloaded do not click on the file in the download folder as it will probably run.

The correct way to update is from the Firefox menu. Please see

We are trying to track down what sites theses come from. The page you see is you said from queidwhoreslag.net however what we need is the details of the popup or advert not that splashscreen. (There have been suggestions a time delay could be involved, so that would make it dificult to figure out.). The lonk you posted will have been personalosed and will be from a temporary site, other users following those links do not see the fake updates.

if you do see an ad with this in it please try to follow these instructions and let us know the url {address) you discover.

{#c16}If ... affected users) could tell us what the ad URLs are, that would be helpful.
They would need to right-click on the ad image, choose "This Frame -> View Frame Info", and copy/paste the following info:
General tab: Address (URL)
Media tab: Location (URL) of each item in the list of media in that frame.
This will help us isolate the affected ad networks so we can contact them and inform them of the malware.
Thanks!

Please also report the sites these fake updates come from there are two places to report them

  1. virustotal.com the AV industry will follow the reports there
  2. https://www.stopbadware.org/report-badware {That feeds into the Firefox blocklisting) add a note about Firefox fake update, and report as a drive by download.

There is the possibility you already have malware and it may be worthwhile to scan with all the tools mentioned in

I do wonder if many of the people see this because there already have adware or malware on their computers. if you have clicked on or run the update you may have malware that is particularly difficult to detect and remove. If so please also run this tool to remove any kovter trojan

There are some suggestions ublock origin may prevent these popups. Personally I have been using windows without ublock origin to try to catch these but so far have not seen any.

Read this answer in context 👍 0

All Replies (2)

more options

Chosen Solution

No Mozilla Firefox does not use that method

It is Malware.

Please do not open or run such files. If downloaded do not click on the file in the download folder as it will probably run.

The correct way to update is from the Firefox menu. Please see

We are trying to track down what sites theses come from. The page you see is you said from queidwhoreslag.net however what we need is the details of the popup or advert not that splashscreen. (There have been suggestions a time delay could be involved, so that would make it dificult to figure out.). The lonk you posted will have been personalosed and will be from a temporary site, other users following those links do not see the fake updates.

if you do see an ad with this in it please try to follow these instructions and let us know the url {address) you discover.

{#c16}If ... affected users) could tell us what the ad URLs are, that would be helpful.
They would need to right-click on the ad image, choose "This Frame -> View Frame Info", and copy/paste the following info:
General tab: Address (URL)
Media tab: Location (URL) of each item in the list of media in that frame.
This will help us isolate the affected ad networks so we can contact them and inform them of the malware.
Thanks!

Please also report the sites these fake updates come from there are two places to report them

  1. virustotal.com the AV industry will follow the reports there
  2. https://www.stopbadware.org/report-badware {That feeds into the Firefox blocklisting) add a note about Firefox fake update, and report as a drive by download.

There is the possibility you already have malware and it may be worthwhile to scan with all the tools mentioned in

I do wonder if many of the people see this because there already have adware or malware on their computers. if you have clicked on or run the update you may have malware that is particularly difficult to detect and remove. If so please also run this tool to remove any kovter trojan

There are some suggestions ublock origin may prevent these popups. Personally I have been using windows without ublock origin to try to catch these but so far have not seen any.

more options

Thank you. If it appears again I will attempt to get all of the information you requested. Hope you have a great day.