X
Tap here to go to the mobile version of the site.

Support Forum

scam update request

Posted

I was on the site Airliners.net and a small box appeared in the lower left hand corner with the Mozilla Firefox icon and saying Browser Update Available. When I click on Help and check for updates it states I am on the most current version 23.0.1.

There are two buttons at the bottom of the box. The first is Download, the second, Install. Download goes to: http://lax1.ib.adnxs.com/click?ea2E7pLIEUB5rYTuksgRQAAAAAAAAPA_ea2E7pLIEUB5rYTuksgRQEmtQC3B8RVQ3VfBRd0iJQjCfTdSAAAAAFWdGgAdAgAAHQIAAAIAAABEDHUAZFIEAAAAAQBVU0QAVVNEACwB-gCpZAAAGnQAAgMCAQIAAIgA3CKGhQAAAAA./cnd=%21bgZhOwjn9XIQxJjUAxjkpBEgAw../referrer=http%3A%2F%2Fib.adnxs.com%2Ftt%3Fid%3D1603980%26size%3D300x250/clickenc=http%3A%2F%2Fwww.browser-fast.com%2FFirefox

Install goes to: http://lax1.ib.adnxs.com/click?ea2E7pLIEUB5rYTuksgRQAAAAAAAAPA_ea2E7pLIEUB5rYTuksgRQEmtQC3B8RVQ3VfBRd0iJQjCfTdSAAAAAFWdGgAdAgAAHQIAAAIAAABEDHUAZFIEAAAAAQBVU0QAVVNEACwB-gCpZAAAGnQAAgMCAQIAAIgA3CKGhQAAAAA./cnd=%21bgZhOwjn9XIQxJjUAxjkpBEgAw../referrer=http%3A%2F%2Fib.adnxs.com%2Ftt%3Fid%3D1603980%26size%3D300x250/clickenc=http%3A%2F%2Fwww.browser-fast.com%2FFirefox

I was on the site Airliners.net and a small box appeared in the lower left hand corner with the Mozilla Firefox icon and saying Browser Update Available. When I click on Help and check for updates it states I am on the most current version 23.0.1. There are two buttons at the bottom of the box. The first is Download, the second, Install. Download goes to: http://lax1.ib.adnxs.com/click?ea2E7pLIEUB5rYTuksgRQAAAAAAAAPA_ea2E7pLIEUB5rYTuksgRQEmtQC3B8RVQ3VfBRd0iJQjCfTdSAAAAAFWdGgAdAgAAHQIAAAIAAABEDHUAZFIEAAAAAQBVU0QAVVNEACwB-gCpZAAAGnQAAgMCAQIAAIgA3CKGhQAAAAA./cnd=%21bgZhOwjn9XIQxJjUAxjkpBEgAw../referrer=http%3A%2F%2Fib.adnxs.com%2Ftt%3Fid%3D1603980%26size%3D300x250/clickenc=http%3A%2F%2Fwww.browser-fast.com%2FFirefox Install goes to: http://lax1.ib.adnxs.com/click?ea2E7pLIEUB5rYTuksgRQAAAAAAAAPA_ea2E7pLIEUB5rYTuksgRQEmtQC3B8RVQ3VfBRd0iJQjCfTdSAAAAAFWdGgAdAgAAHQIAAAIAAABEDHUAZFIEAAAAAQBVU0QAVVNEACwB-gCpZAAAGnQAAgMCAQIAAIgA3CKGhQAAAAA./cnd=%21bgZhOwjn9XIQxJjUAxjkpBEgAw../referrer=http%3A%2F%2Fib.adnxs.com%2Ftt%3Fid%3D1603980%26size%3D300x250/clickenc=http%3A%2F%2Fwww.browser-fast.com%2FFirefox

Chosen solution

Thanks for the report! Scan your computer for malware, Troubleshoot Firefox issues caused by malware and I've reported this sites.

Read this answer in context 5

Additional System Details

Installed Plug-ins

  • Shockwave Flash 11.8 r800
  • Adobe PDF Plug-In For Firefox and Netscape 10.1.8
  • npsitesafety
  • Google Update
  • GEPlugin
  • Next Generation Java Plug-in 10.25.2 for Mozilla browsers
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • RealPlayer(tm) LiveConnect-Enabled Plug-In
  • RealPlayer Download Plugin
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • 5.1.20513.0
  • RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In
  • RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In
  • RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In
  • Picasa plugin
  • A component of your photo software powered by RocketLife
  • DivX Plus Web Player version 2.2.2.14
  • DivX VOD Helper Plug-in
  • NPWLPG
  • Windows Presentation Foundation (WPF) plug-in for Mozilla browsers

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.0; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0

More Information

Tyler Downer
  • Top 25 Contributor
  • Administrator
  • Moderator
1271 solutions 8404 answers

Chosen Solution

Thanks for the report! Scan your computer for malware, Troubleshoot Firefox issues caused by malware and I've reported this sites.

Thanks for the report! Scan your computer for malware, [[Troubleshoot Firefox issues caused by malware]] and I've reported this sites.

Helpful Reply

Once I left the site where this occured and went back, it did not pop up again. I have scanned my system and found no malware. Returning to the site again, I did not get this popup.

Attached is a screenshot of the upgrade box I talked about in the original post.

Thanks.

Once I left the site where this occured and went back, it did not pop up again. I have scanned my system and found no malware. Returning to the site again, I did not get this popup. Attached is a screenshot of the upgrade box I talked about in the original post. Thanks.
the-edmeister
  • Top 10 Contributor
  • Moderator
4080 solutions 30810 answers

http://www.airliners.net/ sets a "slider cookie" on the first load of the homepage, so as to not show the "slider" in the lower left corner of the page more than once per day (if I read the contents of that cookie correctly). That "ad" for the bogus update message may have been slipped into the "advertisement" rotation. That might be why it didn't appear again for you upon a revisit to that page.

Also, at the extreme bottom of that page, take a look at Ad Choices which has Interest Based Advertising Policies giving you a method to opt-out of Targeted Advertising for that domain, and possibly others handled by Demand Media.

Or just use Adblock Plus to block advertisements for all websites.

http://www.airliners.net/ sets a "slider cookie" on the first load of the homepage, so as to not show the "slider" in the lower left corner of the page more than once per day (if I read the contents of that cookie correctly). That "ad" for the bogus update message may have been slipped into the "advertisement" rotation. That might be why it didn't appear again for you upon a revisit to that page. Also, at the extreme bottom of that page, take a look at '''Ad Choices''' which has '''Interest Based Advertising Policies''' giving you a method to '''''opt-out''''' of Targeted Advertising for that domain, and possibly others handled by Demand Media. Or just use Adblock Plus to block advertisements for all websites.

Question owner

I frequently visit airliners.net and do not remember ever having an ad pop up in the lower left corner like this Firefox upgrade. Most of the ads are tolerable to me on this site. It was just the fact that this ad was in a different spot, when I tried to close the ad, it told me I was on release 23.0.1 which was not current and would not let me close or navigate away. That is when I collected as much info on the popup so I could post it here. Thanks for your feedback "the-edmeister"!

I frequently visit airliners.net and do not remember ever having an ad pop up in the lower left corner like this Firefox upgrade. Most of the ads are tolerable to me on this site. It was just the fact that this ad was in a different spot, when I tried to close the ad, it told me I was on release 23.0.1 which was not current and would not let me close or navigate away. That is when I collected as much info on the popup so I could post it here. Thanks for your feedback "the-edmeister"!
the-edmeister
  • Top 10 Contributor
  • Moderator
4080 solutions 30810 answers

Is that the position (Realtime labeled ad) on the webpage that the false update appeared?

Is that the position (Realtime labeled ad) on the webpage that the false update appeared?
the-edmeister
  • Top 10 Contributor
  • Moderator
4080 solutions 30810 answers

I get the exact same Realtime slide-out ad when I first visit that airliners.net main page with a different Profile that has no adblocker, and after clearing all cookies, closing Firefox, then re-opening Firefox and loading that page from history. The ad starts to "slide-out" after clicking on link on the main page, and as the new window for an advertisement is opening.

Happens for me with Firefox 20, 21, 22, in addition to Firefox 23, each with their own Profile.

I get the exact same Realtime slide-out ad when I first visit that airliners.net main page with a different Profile that has no adblocker, and after clearing all cookies, closing Firefox, then re-opening Firefox and loading that page from history. The ad starts to "slide-out" after clicking on link on the main page, and as the new window for an advertisement is opening. Happens for me with Firefox 20, 21, 22, in addition to Firefox 23, each with their own Profile.