X
Tap here to go to the mobile version of the site.

Support Forum

How to handle "Dear Firefox user, You are our lucky visitor" popup

Posted

Every now an then, since about a year ago, when I try to open a link from Google search results in FF, a web-page appears instead in the form of a virus (but it's not) with a popup window saying "Dear Firefox user, You are our lucky visitor ..." After that, I have to restart FF, otherwise this "thing" goes on. This last time I copied the URL (unfortunately, I didn't take a screenshot!), which was http://vacationdestination.org/maintenance/-/price/-/Deal848. However, it seems it's a fake one, since I could not open it again. (not even just 'http://vacationdestination.org'). I have done a virus check and nothing was detected. Also, opening FF in safe mode doesn't help, since as I said this "thing" is quite occasional and *not repeatable*. I would like please to know if someone has had *the same exact problem* and has solved it. Please don't reply by giving general suggestions like "open in safe mode", "do a virus scan" etc.

Every now an then, since about a year ago, when I try to open a link from Google search results in FF, a web-page appears instead in the form of a virus (but it's not) with a popup window saying "Dear Firefox user, You are our lucky visitor ..." After that, I have to restart FF, otherwise this "thing" goes on. This last time I copied the URL (unfortunately, I didn't take a screenshot!), which was http://vacationdestination.org/maintenance/-/price/-/Deal848. However, it seems it's a fake one, since I could not open it again. (not even just 'http://vacationdestination.org'). I have done a virus check and nothing was detected. Also, opening FF in safe mode doesn't help, since as I said this "thing" is quite occasional and *not repeatable*. I would like please to know if someone has had *the same exact problem* and has solved it. Please don't reply by giving general suggestions like "open in safe mode", "do a virus scan" etc.

Modified by aspis

Chosen solution

Thank you all. I consider this question closed.

Read this answer in context 0

Additional System Details

Installed Plug-ins

  • Shockwave Flash 29.0 r0

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; rv:59.0) Gecko/20100101 Firefox/59.0

More Information

FredMcD
  • Top 10 Contributor
4195 solutions 58551 answers

Those are ads and have nothing to do with Mozilla or its programs.

Go to the Mozilla Add-ons Web Page {web Link} (There’s a lot of good stuff here) and search for a good ad / pop-up blocker.


A way out of a trap page is to (force it if needed) Close Firefox. Wait about 20 seconds for Firefox to finish closing. Right-click on the Firefox icon and select Open New Window. +++++++++++++++++++++++++++++++++ Sometimes this works. If it opens, close it by Menu > File > Exit. This will flush out that web page from the Session Store.

Those are ads and have nothing to do with Mozilla or its programs. Go to the [https://addons.mozilla.org/en-US/firefox/ Mozilla Add-ons Web Page] {web Link} (There’s a lot of good stuff here) and search for a good ad / pop-up blocker. ---------------- A way out of a trap page is to (force it if needed) '''Close Firefox. ''' Wait about 20 seconds for Firefox to finish closing. Right-click on the Firefox icon and select '''Open New Window. ''' +++++++++++++++++++++++++++++++++ Sometimes this works. If it opens, close it by '''Menu > File > Exit. ''' This will flush out that web page from the '''Session Store. '''

Question owner

I have made it clear and asked please not to reply in general but only if you know about this particular case. But of course, there are always people that are not listening.

I have made it clear and asked please not to reply in general but only if you know about this particular case. But of course, there are always people that are not listening.

Modified by aspis

FredMcD
  • Top 10 Contributor
4195 solutions 58551 answers

aspis said

I would like please to know if someone has had *the same exact problem* and has solved it

aspis said

I have made it clear and asked please not to reply in general but only if you know about this particular case. But of course, there are always people that are not listening.

Could you make up your mind, please?

''aspis [[#question-1215133|said]]'' <blockquote> I would like please to know if someone has had *the same exact problem* and has solved it </blockquote> ''aspis [[#answer-1104771|said]]'' <blockquote> I have made it clear and asked please not to reply in general but only if you know about this particular case. But of course, there are always people that are not listening. </blockquote> Could you make up your mind, please?
Murphy 20 solutions 264 answers

aspis said

I have made it clear and asked please not to reply in general but only if you know about this particular case. But of course, there are always people that are not listening.

As these scammers/hackers will change their URL on an almost daily basis: no two cases are exactly the same - but their methods are. And in all of these case the reply that FredMcD gave you, is the correct reply.

''aspis [[#answer-1104771|said]]'' <blockquote> I have made it clear and asked please not to reply in general but only if you know about this particular case. But of course, there are always people that are not listening. </blockquote> As these scammers/hackers will change their URL on an almost daily basis: no two cases are exactly the same - but their methods are. And in ''all'' of these case the reply that FredMcD gave you, is the correct reply.
Tyler Downer
  • Top 25 Contributor
  • Moderator
1525 solutions 10623 answers

The best thing you can do is to install a reputable ad blocker (such as ublock origin), run Windows Defender, keep Windows and Firefox up to date, and run a free malwarebytes scan from time to time. Be careful what you click too.

The best thing you can do is to install a reputable ad blocker (such as ublock origin), run Windows Defender, keep Windows and Firefox up to date, and run a free malwarebytes scan from time to time. Be careful what you click too.
cor-el
  • Top 10 Contributor
  • Moderator
17352 solutions 156825 answers

What kind of virus check did you do?

Best is to scan with a lot of programs because each program detects different malware. All these programs have free versions.

Did you check the connection settings in case you inadvertently use a proxy?

  • Options/Preferences -> General -> Network: Connection -> Settings

If you do not need to use a proxy to connect to internet then try to select "No Proxy" if "Use the system proxy settings" or one of the others do not work properly.

You can also consider to block third-party cookies and possibly enable Tracking Protection.

Otherwise you can use a content blocking extension, but be aware that such an extension can block wanted content, so always check what is blocked in case of issues.

Make sure you update each program to get the latest version of their databases before doing a scan.

You can also do a check for a rootkit infection with TDSSKiller.


https://support.kaspersky.com/viruses/utility

See also:

What kind of virus check did you do? Best is to scan with a lot of programs because each program detects different malware. All these programs have free versions. *https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware Did you check the connection settings in case you inadvertently use a proxy? *Options/Preferences -> General -> Network: Connection -> Settings If you do not need to use a proxy to connect to internet then try to select "No Proxy" if "Use the system proxy settings" or one of the others do not work properly. You can also consider to block third-party cookies and possibly enable Tracking Protection. *https://support.mozilla.org/en-US/kb/tracking-protection-firefox Otherwise you can use a content blocking extension, but be aware that such an extension can block wanted content, so always check what is blocked in case of issues. *https://addons.mozilla.org/firefox/addon/ublock-origin/ Make sure you update each program to get the latest version of their databases before doing a scan. *Malwarebytes' Anti-Malware:<br>http://www.malwarebytes.org/mbam.php *AdwCleaner:<br>http://www.bleepingcomputer.com/download/adwcleaner/<br>http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml *SuperAntispyware:<br>http://www.superantispyware.com/ *Microsoft Safety Scanner:<br>https://www.microsoft.com/security/scanner/en-us/default.aspx *Windows Defender:<br>https://windows.microsoft.com/en-us/windows/using-defender *Spybot Search & Destroy:<br>http://www.safer-networking.org/en/index.html *Kasperky Free Security Scan:<br>https://www.kaspersky.com/security-scan You can also do a check for a rootkit infection with TDSSKiller. *Anti-rootkit utility TDSSKiller:<br>https://support.kaspersky.com/viruses/disinfection/5350 <br>https://support.kaspersky.com/viruses/utility See also: *"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked

Chosen Solution

Thank you all. I consider this question closed.

Thank you all. I consider this question closed.

Question owner

I have to add this in order to make things easier and less alarming on the issue: I just realized that this popup comes from "crap" pages, you know, the description of which contains only keywords and key-sentences. They are just "fishing" (not phishing). They also fill the history of the specific Tab (not the whole FF history) with their URL so that you cannot get back to the previous page. Nothing to fear as long as you do not follow them! Just close the tab (No need to restart FF if other tabs are opened). I believe this concludes the issue now.

I have to add this in order to make things easier and less alarming on the issue: I just realized that this popup comes from "crap" pages, you know, the description of which contains only keywords and key-sentences. They are just "fishing" (not phishing). They also fill the history of the specific Tab (not the whole FF history) with their URL so that you cannot get back to the previous page. Nothing to fear as long as you do not follow them! Just close the tab (No need to restart FF if other tabs are opened). I believe this concludes the issue now.

Modified by aspis