How to handle "Dear Firefox user, You are our lucky visitor" popup
Every now an then, since about a year ago, when I try to open a link from Google search results in FF, a web-page appears instead in the form of a virus (but it's not) with a popup window saying "Dear Firefox user, You are our lucky visitor ..." After that, I have to restart FF, otherwise this "thing" goes on. This last time I copied the URL (unfortunately, I didn't take a screenshot!), which was http://vacationdestination.org/maintenance/-/price/-/Deal848. However, it seems it's a fake one, since I could not open it again. (not even just 'http://vacationdestination.org'). I have done a virus check and nothing was detected. Also, opening FF in safe mode doesn't help, since as I said this "thing" is quite occasional and *not repeatable*. I would like please to know if someone has had *the same exact problem* and has solved it. Please don't reply by giving general suggestions like "open in safe mode", "do a virus scan" etc.
Modified by aspis
Chosen solution
Thank you all. I consider this question closed.
Read this answer in context 👍 0All Replies (8)
Those are ads and have nothing to do with Mozilla or its programs.
Go to the Mozilla Add-ons Web Page {web Link} (There’s a lot of good stuff here) and search for a good ad / pop-up blocker.
A way out of a trap page is to (force it if needed) Close Firefox. Wait about 20 seconds for Firefox to finish closing. Right-click on the Firefox icon and select Open New Window. +++++++++++++++++++++++++++++++++ Sometimes this works. If it opens, close it by Menu > File > Exit. This will flush out that web page from the Session Store.
I have made it clear and asked please not to reply in general but only if you know about this particular case. But of course, there are always people that are not listening.
Modified by aspis
aspis said
I would like please to know if someone has had *the same exact problem* and has solved it
aspis said
I have made it clear and asked please not to reply in general but only if you know about this particular case. But of course, there are always people that are not listening.
Could you make up your mind, please?
aspis said
I have made it clear and asked please not to reply in general but only if you know about this particular case. But of course, there are always people that are not listening.
As these scammers/hackers will change their URL on an almost daily basis: no two cases are exactly the same - but their methods are. And in all of these case the reply that FredMcD gave you, is the correct reply.
The best thing you can do is to install a reputable ad blocker (such as ublock origin), run Windows Defender, keep Windows and Firefox up to date, and run a free malwarebytes scan from time to time. Be careful what you click too.
What kind of virus check did you do?
Best is to scan with a lot of programs because each program detects different malware. All these programs have free versions.
Did you check the connection settings in case you inadvertently use a proxy?
- Options/Preferences -> General -> Network: Connection -> Settings
If you do not need to use a proxy to connect to internet then try to select "No Proxy" if "Use the system proxy settings" or one of the others do not work properly.
You can also consider to block third-party cookies and possibly enable Tracking Protection.
Otherwise you can use a content blocking extension, but be aware that such an extension can block wanted content, so always check what is blocked in case of issues.
Make sure you update each program to get the latest version of their databases before doing a scan.
- Malwarebytes' Anti-Malware:
http://www.malwarebytes.org/mbam.php - AdwCleaner:
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml - SuperAntispyware:
http://www.superantispyware.com/ - Microsoft Safety Scanner:
https://www.microsoft.com/security/scanner/en-us/default.aspx - Windows Defender:
https://windows.microsoft.com/en-us/windows/using-defender - Spybot Search & Destroy:
http://www.safer-networking.org/en/index.html - Kasperky Free Security Scan:
https://www.kaspersky.com/security-scan
You can also do a check for a rootkit infection with TDSSKiller.
- Anti-rootkit utility TDSSKiller:
https://support.kaspersky.com/viruses/disinfection/5350
https://support.kaspersky.com/viruses/utility
See also:
- "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked
Chosen Solution
Thank you all. I consider this question closed.
I have to add this in order to make things easier and less alarming on the issue: I just realized that this popup comes from "crap" pages, you know, the description of which contains only keywords and key-sentences. They are just "fishing" (not phishing). They also fill the history of the specific Tab (not the whole FF history) with their URL so that you cannot get back to the previous page. Nothing to fear as long as you do not follow them! Just close the tab (No need to restart FF if other tabs are opened). I believe this concludes the issue now.
Modified by aspis