X
Tap here to go to the mobile version of the site.

Support Forum

Is this a valid patch from firefox: https://oteezekartenwelt.org/3011652418415/066531f1e5d1dc2b447849219b6c1644/9f56322104fb17f4eaad0684c1e78176.html

Posted

Three times recently I have gotten a firefox looking screen saying "critical download", Twice shortly after Norton pop-up saying Norton had blocked "Web attack 41". Is this a valid patch or is it malware getting past Norton?

Three times recently I have gotten a firefox looking screen saying "critical download", Twice shortly after Norton pop-up saying Norton had blocked "Web attack 41". Is this a valid patch or is it malware getting past Norton?

Modified by 1rmartin

Quote

Additional System Details

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; BRI/2; rv:11.0) like Gecko

More Information

jscher2000
  • Top 10 Contributor
6443 solutions 52775 answers

Helpful Reply

Trust Norton on this one, as you can see it's a highly questionable website address.

For about a year there has been an active campaign of malware distribution using a new site every day with a stolen Firefox logo on an orange background. You are right to be skeptical.

When you get a popup to save or cancel a download, Firefox has already started downloading the file to the Windows TEMP folder. Presumably that's why Norton is reporting a bad file even if you haven't acted on the dialog yet. So it's good news that the file was quarantined/deleted.

More generally:

To report a new malware distribution site, see: I found a fake Firefox update.

To clean a system which got infected through a fake update or "patch", see: Troubleshoot Firefox issues caused by malware. (Start with Malwarebytes Anti-Malware)

To minimize exposure to ad-driven malware redirects, consider an ad blocking extension such as: https://addons.mozilla.org/firefox/addon/ublock-origin/

Trust Norton on this one, as you can see it's a highly questionable website address. For about a year there has been an active campaign of malware distribution using a new site every day with a stolen Firefox logo on an orange background. You are right to be skeptical. When you get a popup to save or cancel a download, Firefox has already started downloading the file to the Windows TEMP folder. Presumably that's why Norton is reporting a bad file even if you haven't acted on the dialog yet. So it's good news that the file was quarantined/deleted. More generally: To report a new malware distribution site, see: [[I found a fake Firefox update]]. To clean a system which got infected through a fake update or "patch", see: [[Troubleshoot Firefox issues caused by malware]]. (Start with Malwarebytes Anti-Malware) To minimize exposure to ad-driven malware redirects, consider an ad blocking extension such as: https://addons.mozilla.org/firefox/addon/ublock-origin/
Was this helpful to you? 4
Quote
Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.