Is this a valid patch from firefox: https://oteezekartenwelt.org/3011652418415/066531f1e5d1dc2b447849219b6c1644/9f56322104fb17f4eaad0684c1e78176.html
Three times recently I have gotten a firefox looking screen saying "critical download", Twice shortly after Norton pop-up saying Norton had blocked "Web attack 41". Is this a valid patch or is it malware getting past Norton?
Modified by 1rmartin
Additional System Details
- User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; BRI/2; rv:11.0) like Gecko
Trust Norton on this one, as you can see it's a highly questionable website address.
For about a year there has been an active campaign of malware distribution using a new site every day with a stolen Firefox logo on an orange background. You are right to be skeptical.
When you get a popup to save or cancel a download, Firefox has already started downloading the file to the Windows TEMP folder. Presumably that's why Norton is reporting a bad file even if you haven't acted on the dialog yet. So it's good news that the file was quarantined/deleted.
To report a new malware distribution site, see: I found a fake Firefox update.
To clean a system which got infected through a fake update or "patch", see: Troubleshoot Firefox issues caused by malware. (Start with Malwarebytes Anti-Malware)
To minimize exposure to ad-driven malware redirects, consider an ad blocking extension such as: https://addons.mozilla.org/firefox/addon/ublock-origin/