X
Tap here to go to the mobile version of the site.
Scheduled maintenance: Thursday, April 2, between 3pm and 5pm UTC. This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn’t solve your issue and you want to ask a question, we have our support community waiting to help you at @firefox on Twitter

Support Forum

Security alert

Posted

I was browsing last night and attempted to access imdb.com when my page was redirected to the page shown in the image attached. On this computer I am using Windows Defender as the active security service and Spybot S&D as passive protection. OS is Windows 10 Pro version 1607. It goes without stating that I immediately aborted the download option presented.

Edit: Image attached.

I was browsing last night and attempted to access imdb.com when my page was redirected to the page shown in the image attached. On this computer I am using Windows Defender as the active security service and Spybot S&D as passive protection. OS is Windows 10 Pro version 1607. It goes without stating that I immediately aborted the download option presented. Edit: Image attached.
Attached screenshots

Modified by ZeroGeined

Chosen solution

This is not from Mozilla or the Firefox web browser. The fake firefox-patch.exe and firefox-patch.js files can install things like trojans, viruses, unwanted software or to download additional stuff onto Windows based on past reports if the user runs them. The random name of the websites alone should raise a flag that it was not legit.

The Firefox updates have not changed as they are done internally in Firefox (with a .mar type of file) whether on Windows, Mac OSX or Linux (since Firefox 1.5 almost eleven years ago) or by download from mozilla.org like say www.mozilla.org/firefox/all/

You could try using a adblocker extension like uBlock Origin to block theses fake ads if you keep getting them. https://addons.mozilla.org/firefox/addon/ublock-origin/

Unfortunately this has gone on for a while now with one or two new sites reported every so often though not as much in last couple weeks. https://support.mozilla.org/en-US/forums/contributors/712056/

Even if you were to download this firefox-patch.js file it is not a risk unless you were to try and run it.

https://support.mozilla.org/en-US/kb/i-found-fake-firefox-update

Read this answer in context 1

Additional System Details

Installed Plug-ins

  • Shockwave Flash 23.0 r0
  • 5.1.50901.0

Application

  • Firefox 49.0.2
  • User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:49.0) Gecko/20100101 Firefox/49.0
  • Support URL: https://support.mozilla.org/1/firefox/49.0.2/WINNT/en-US/

Extensions

  • Asynchronous Plugin Rendering 2.0 (asyncrendering@mozilla.org)
  • Multi-process staged rollout 1.3 (e10srollout@mozilla.org)
  • Pocket 1.0.4 (firefox@getpocket.com)
  • Web Compat 1.0 (webcompat@mozilla.org)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: NVIDIA NVS 310
  • adapterDescription2:
  • adapterDeviceID: 0x107d
  • adapterDeviceID2:
  • adapterDrivers: nvd3dumx,nvwgf2umx,nvwgf2umx,nvwgf2umx nvd3dum,nvwgf2um,nvwgf2um,nvwgf2um
  • adapterDrivers2:
  • adapterRAM: 512
  • adapterRAM2:
  • adapterSubsysID: 094e10de
  • adapterSubsysID2:
  • adapterVendorID: 0x10de
  • adapterVendorID2:
  • crashGuards: []
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 10.0.14393.351
  • driverDate: 7-22-2015
  • driverDate2:
  • driverVersion: 10.18.13.5362
  • driverVersion2:
  • failures: [u'CP+[GFX1-]: Failed to allocate a surface due to invalid size (CDT) Size(0,0)']
  • featureLog: {u'fallbacks': [], u'features': [{u'status': u'available', u'description': u'Compositing', u'name': u'HW_COMPOSITING', u'log': [{u'status': u'available', u'type': u'default'}]}, {u'status': u'available', u'description': u'Direct3D11 Compositing', u'name': u'D3D11_COMPOSITING', u'log': [{u'status': u'available', u'type': u'default'}]}, {u'status': u'disabled', u'description': u'Direct3D9 Compositing', u'name': u'D3D9_COMPOSITING', u'log': [{u'status': u'disabled', u'message': u'Disabled by default', u'type': u'default'}]}, {u'status': u'available', u'description': u'Direct2D', u'name': u'DIRECT2D', u'log': [{u'status': u'available', u'type': u'default'}]}, {u'status': u'available', u'description': u'Direct3D11 hardware ANGLE', u'name': u'D3D11_HW_ANGLE', u'log': [{u'status': u'available', u'type': u'default'}]}]}
  • indices: [0]
  • info: {u'AzureCanvasAccelerated': 0, u'AzureCanvasBackend': u'direct2d 1.1', u'AzureFallbackCanvasBackend': u'cairo', u'ApzWheelInput': 1, u'AzureContentBackend': u'direct2d 1.1'}
  • isGPU2Active: False
  • numAcceleratedWindows: 2
  • numTotalWindows: 2
  • supportsHardwareH264: Yes; Using D3D11 API
  • webglRenderer: Google Inc. -- ANGLE (NVIDIA NVS 310 Direct3D11 vs_5_0 ps_5_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Modified Preferences

Misc

  • User JS: Yes
  • Accessibility: No
James
  • Moderator
1603 solutions 11348 answers

Chosen Solution

This is not from Mozilla or the Firefox web browser. The fake firefox-patch.exe and firefox-patch.js files can install things like trojans, viruses, unwanted software or to download additional stuff onto Windows based on past reports if the user runs them. The random name of the websites alone should raise a flag that it was not legit.

The Firefox updates have not changed as they are done internally in Firefox (with a .mar type of file) whether on Windows, Mac OSX or Linux (since Firefox 1.5 almost eleven years ago) or by download from mozilla.org like say www.mozilla.org/firefox/all/

You could try using a adblocker extension like uBlock Origin to block theses fake ads if you keep getting them. https://addons.mozilla.org/firefox/addon/ublock-origin/

Unfortunately this has gone on for a while now with one or two new sites reported every so often though not as much in last couple weeks. https://support.mozilla.org/en-US/forums/contributors/712056/

Even if you were to download this firefox-patch.js file it is not a risk unless you were to try and run it.

https://support.mozilla.org/en-US/kb/i-found-fake-firefox-update

'''This is not from Mozilla or the Firefox web browser'''. The fake firefox-patch.exe and firefox-patch.js files can install things like trojans, viruses, unwanted software or to download additional stuff onto Windows based on past reports if the user runs them. The random name of the websites alone should raise a flag that it was not legit. The Firefox updates have not changed as they are done internally in Firefox (with a .mar type of file) whether on Windows, Mac OSX or Linux (since Firefox 1.5 almost eleven years ago) or by download from mozilla.org like say www.mozilla.org/firefox/all/ You could try using a adblocker extension like uBlock Origin to block theses fake ads if you keep getting them. https://addons.mozilla.org/firefox/addon/ublock-origin/ Unfortunately this has gone on for a while now with one or two new sites reported every so often though not as much in last couple weeks. https://support.mozilla.org/en-US/forums/contributors/712056/ Even if you were to download this firefox-patch.js file it is not a risk unless you were to try and run it. https://support.mozilla.org/en-US/kb/i-found-fake-firefox-update

Modified by James

FredMcD
  • Top 10 Contributor
4391 solutions 61620 answers

http://imdb.com/ is a good site.

You may have ad / mal-ware. Further information can be found in the Troubleshoot Firefox issues caused by malware article.

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

http://imdb.com/ is a good site. You may have ad / mal-ware. Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article. Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.
James
  • Moderator
1603 solutions 11348 answers

FredMcD said

You may have ad / mal-ware. Further information can be found in the Troubleshoot Firefox issues caused by malware article. Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

This malicious ad has not been determined to be caused by any form of malware and the person or group behind this even targets Chrome users on Windows with a similar fake urgent Chrome update Ad.

Still not a bad idea to scan Windows every so often.

''FredMcD [[#answer-933863|said]]'' <blockquote> You may have ad / mal-ware. Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article. Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up. </blockquote> This malicious ad has not been determined to be caused by any form of malware and the person or group behind this even targets Chrome users on Windows with a similar fake urgent Chrome update Ad. Still not a bad idea to scan Windows every so often.

Question owner

Thank you James and FredMcD. It was not clear to me as to how to submit pages as fraudulent / malicious. I posted this here to bring attention to this page specifically so that the appropriate actions can be taken. I have encountered a few pages where Firefox will warn of a possible malicious website and warn me before attempting to access the page. I perform regular weekly scans on my computer as I use it to access other computers to provide support.

Thank you James and FredMcD. It was not clear to me as to how to submit pages as fraudulent / malicious. I posted this here to bring attention to this page specifically so that the appropriate actions can be taken. I have encountered a few pages where Firefox will warn of a possible malicious website and warn me before attempting to access the page. I perform regular weekly scans on my computer as I use it to access other computers to provide support.
James
  • Moderator
1603 solutions 11348 answers

ZeroGeined said

I posted this here to bring attention to this page specifically so that the appropriate actions can be taken. I have encountered a few pages where Firefox will warn of a possible malicious website and warn me before attempting to access the page.

Taking action or blocking these sites is a bit pointless since the sites are disposable in being used for about a day or so for the fake updates for Firefox (and Chrome).

''ZeroGeined [[#answer-933963|said]]'' <blockquote>I posted this here to bring attention to this page specifically so that the appropriate actions can be taken. I have encountered a few pages where Firefox will warn of a possible malicious website and warn me before attempting to access the page.</blockquote> Taking action or blocking these sites is a bit pointless since the sites are disposable in being used for about a day or so for the fake updates for Firefox (and Chrome).

Question owner

James said
Taking action or blocking these sites is a bit pointless since the sites are disposable in being used for about a day or so for the fake updates for Firefox (and Chrome).

Understood. Thank you.

''James [[#answer-934036|said]]''<blockquote> Taking action or blocking these sites is a bit pointless since the sites are disposable in being used for about a day or so for the fake updates for Firefox (and Chrome). </blockquote> Understood. Thank you.

Modified by ZeroGeined