X
Tap here to go to the mobile version of the site.

Support Forum

I switched from FF32 bit to FF64 bit and now it won't allow me to see a site I've been visiting for years.

Posted

Hi All. First time using this community help function. I recently replaced FF 32 bit for the 64 bit version and deleted the 32 bit version from my computer. Right after the new install, one particular site started getting blocked by Symantic Security Suite. When I click on http://www.early911sregistry.org, the screen refreshes, but I get a message: "Unable to connect

Firefox can’t establish a connection to the server at www.early911sregistry.org.

   The site could be temporarily unavailable or too busy. Try again in a few moments.
   If you are unable to load any pages, check your computer’s network connection.
   If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web."
At this point, Symantic gives me the message: "An intrusion attempt by www.early911sregistry.org has been blocked.  Then it says: "Norton blocked an attack by: Web Attack JSCoinminer Download 6."

I've been using the above site for perhaps 5 years and have never had a problem. As well, the site is readily available on my other computer, which is using FF 32.

Hi All. First time using this community help function. I recently replaced FF 32 bit for the 64 bit version and deleted the 32 bit version from my computer. Right after the new install, one particular site started getting blocked by Symantic Security Suite. When I click on http://www.early911sregistry.org, the screen refreshes, but I get a message: "Unable to connect Firefox can’t establish a connection to the server at www.early911sregistry.org. The site could be temporarily unavailable or too busy. Try again in a few moments. If you are unable to load any pages, check your computer’s network connection. If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web." At this point, Symantic gives me the message: "An intrusion attempt by www.early911sregistry.org has been blocked. Then it says: "Norton blocked an attack by: Web Attack JSCoinminer Download 6." I've been using the above site for perhaps 5 years and have never had a problem. As well, the site is readily available on my other computer, which is using FF 32.

Chosen solution

jscher, Thanks for the speedy reply. Shortly after my initial post, I talked with the technicians at Symantic. They took control of my computer, spent about a half hour, trying to figure it out, and gave up. I spent some more time surfing the Symantic site and downloaded and ran a program they call Norton Power Eraser, which identified my having an older version of Java. Then on a Mozilla page I found that FF 64 doesn't support Java, so I removed it from my computer, and low and behold, FF now displays that web site. So, the problem is solved. Thanks again for your help.

Read this answer in context 0
Quote

Additional System Details

Installed Plug-ins

  • Shockwave Flash 27.0 r0

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0

More Information

jscher2000
  • Top 10 Contributor
7298 solutions 59418 answers

Helpful Reply

Hmm, the message from your security software is very interesting. Maybe some script in the site only tries to run the "coin miner" script on 64-bit browsers.

(That's a script to use your CPU to generate bitcoin or other virtual currency for someone else's benefit. It's a parasite.)

In case the site has been compromised, you may want to let them know about the message.

Meanwhile, to defend against coin mining scripts, I have read that the uBlock Origin extension, better known as an ad blocker, can prevent Firefox from loading them.

https://addons.mozilla.org/firefox/addon/ublock-origin/

If you install that and then visit the site, do you still get the same symptoms?

Hmm, the message from your security software is very interesting. Maybe some script in the site only tries to run the "coin miner" script on 64-bit browsers. (That's a script to use your CPU to generate bitcoin or other virtual currency for someone else's benefit. It's a parasite.) In case the site has been compromised, you may want to let them know about the message. Meanwhile, to defend against coin mining scripts, I have read that the uBlock Origin extension, better known as an ad blocker, can prevent Firefox from loading them. https://addons.mozilla.org/firefox/addon/ublock-origin/ If you install that and then visit the site, do you still get the same symptoms?
Was this helpful to you? 1
Quote

Chosen Solution

jscher, Thanks for the speedy reply. Shortly after my initial post, I talked with the technicians at Symantic. They took control of my computer, spent about a half hour, trying to figure it out, and gave up. I spent some more time surfing the Symantic site and downloaded and ran a program they call Norton Power Eraser, which identified my having an older version of Java. Then on a Mozilla page I found that FF 64 doesn't support Java, so I removed it from my computer, and low and behold, FF now displays that web site. So, the problem is solved. Thanks again for your help.

jscher, Thanks for the speedy reply. Shortly after my initial post, I talked with the technicians at Symantic. They took control of my computer, spent about a half hour, trying to figure it out, and gave up. I spent some more time surfing the Symantic site and downloaded and ran a program they call Norton Power Eraser, which identified my having an older version of Java. Then on a Mozilla page I found that FF 64 doesn't support Java, so I removed it from my computer, and low and behold, FF now displays that web site. So, the problem is solved. Thanks again for your help.
Was this helpful to you? 0
Quote
degnmozilla 1 solutions 9 answers

As of today, 3/24/18, I keep getting web attacks with FIrefox on all websites visited, attacks which are being blocked by my firewall, Symantec's "Norton Security":

Intrusion type: "JSCoinminer Download 8", as per Symantec's description Attacker URL: thrillingos.herokuapp.com/mozilla/best-ytb-down/content/analytics Happens through: "C:\ Program Files (x86)\Mozilla Firefox\firefox.exe", although I use a 64-bit version of Firefox on Windows 7 (SP1), 64-bit.

Since it has "Mozilla" in the URL, does Mozilla know anything about this?

Happens on all websites, including, but not limited to, www.nytimes.com, www.washingtonpost.com.

As of today, 3/24/18, I keep getting web attacks with FIrefox on all websites visited, attacks which are being blocked by my firewall, Symantec's "Norton Security": Intrusion type: "JSCoinminer Download 8", as per Symantec's description Attacker URL: thrillingos.herokuapp.com/mozilla/best-ytb-down/content/analytics Happens through: "C:\ Program Files (x86)\Mozilla Firefox\firefox.exe", although I use a 64-bit version of Firefox on Windows 7 (SP1), 64-bit. Since it has "Mozilla" in the URL, does Mozilla know anything about this? Happens on all websites, including, but not limited to, www.nytimes.com, www.washingtonpost.com.
Was this helpful to you?
Quote
jscher2000
  • Top 10 Contributor
7298 solutions 59418 answers

Hi degnmozilla, most like it's either (1) you are loading a page that contains a coin miner script or (2) one of your extensions contains such a script.

If the following doesn't help, please start a new thread since this one is "solved":

You can view, disable, and often remove unwanted or unknown extensions on the Add-ons page. Either:

  • Ctrl+Shift+a (Mac: Command+Shift+a)
  • "3-bar" menu button (or Tools menu) > Add-ons
  • type or paste about:addons in the address bar and press Enter/Return

In the left column of the Add-ons page, click Extensions. Then cast a critical eye over the list on the right side. Any extensions Firefox installs for built-in features are hidden from this page, so everything listed here is your choice (and your responsibility) to manage. Anything suspicious or that you just do not remember installing or why? If in doubt, disable (or remove).

Hi degnmozilla, most like it's either (1) you are loading a page that contains a coin miner script or (2) one of your extensions contains such a script. If the following doesn't help, please start a new thread since this one is "solved": You can view, disable, and often remove unwanted or unknown extensions on the Add-ons page. Either: * Ctrl+Shift+a (Mac: Command+Shift+a) * "3-bar" menu button (or Tools menu) > Add-ons * type or paste '''about:addons''' in the address bar and press Enter/Return In the left column of the Add-ons page, click Extensions. Then cast a critical eye over the list on the right side. Any extensions Firefox installs for built-in features are hidden from this page, so everything listed here is your choice (and your responsibility) to manage. Anything suspicious or that you just do not remember installing or why? If in doubt, disable (or remove).
Was this helpful to you?
Quote
Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.