scam update request
I was on the site Airliners.net and a small box appeared in the lower left hand corner with the Mozilla Firefox icon and saying Browser Update Available. When I click on Help and check for updates it states I am on the most current version 23.0.1.
There are two buttons at the bottom of the box. The first is Download, the second, Install. Download goes to: http://lax1.ib.adnxs.com/click?ea2E7pLIEUB5rYTuksgRQAAAAAAAAPA_ea2E7pLIEUB5rYTuksgRQEmtQC3B8RVQ3VfBRd0iJQjCfTdSAAAAAFWdGgAdAgAAHQIAAAIAAABEDHUAZFIEAAAAAQBVU0QAVVNEACwB-gCpZAAAGnQAAgMCAQIAAIgA3CKGhQAAAAA./cnd=%21bgZhOwjn9XIQxJjUAxjkpBEgAw../referrer=http%3A%2F%2Fib.adnxs.com%2Ftt%3Fid%3D1603980%26size%3D300x250/clickenc=http%3A%2F%2Fwww.browser-fast.com%2FFirefox
Install goes to: http://lax1.ib.adnxs.com/click?ea2E7pLIEUB5rYTuksgRQAAAAAAAAPA_ea2E7pLIEUB5rYTuksgRQEmtQC3B8RVQ3VfBRd0iJQjCfTdSAAAAAFWdGgAdAgAAHQIAAAIAAABEDHUAZFIEAAAAAQBVU0QAVVNEACwB-gCpZAAAGnQAAgMCAQIAAIgA3CKGhQAAAAA./cnd=%21bgZhOwjn9XIQxJjUAxjkpBEgAw../referrer=http%3A%2F%2Fib.adnxs.com%2Ftt%3Fid%3D1603980%26size%3D300x250/clickenc=http%3A%2F%2Fwww.browser-fast.com%2FFirefox
Additional System Details
- Shockwave Flash 11.8 r800
- Adobe PDF Plug-In For Firefox and Netscape 10.1.8
- Google Update
- Next Generation Java Plug-in 10.25.2 for Mozilla browsers
- NPRuntime Script Plug-in Library for Java(TM) Deploy
- RealPlayer(tm) LiveConnect-Enabled Plug-In
- RealPlayer Download Plugin
- RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In
- RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In
- RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In
- Picasa plugin
- A component of your photo software powered by RocketLife
- DivX Plus Web Player version 220.127.116.11
- DivX VOD Helper Plug-in
- Windows Presentation Foundation (WPF) plug-in for Mozilla browsers
- User Agent: Mozilla/5.0 (Windows NT 6.0; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0
Thanks for the report! Scan your computer for malware, Troubleshoot Firefox issues caused by malware and I've reported this sites.
Once I left the site where this occured and went back, it did not pop up again. I have scanned my system and found no malware. Returning to the site again, I did not get this popup.
Attached is a screenshot of the upgrade box I talked about in the original post.
http://www.airliners.net/ sets a "slider cookie" on the first load of the homepage, so as to not show the "slider" in the lower left corner of the page more than once per day (if I read the contents of that cookie correctly). That "ad" for the bogus update message may have been slipped into the "advertisement" rotation. That might be why it didn't appear again for you upon a revisit to that page.
Also, at the extreme bottom of that page, take a look at Ad Choices which has Interest Based Advertising Policies giving you a method to opt-out of Targeted Advertising for that domain, and possibly others handled by Demand Media.
Or just use Adblock Plus to block advertisements for all websites.
I frequently visit airliners.net and do not remember ever having an ad pop up in the lower left corner like this Firefox upgrade. Most of the ads are tolerable to me on this site. It was just the fact that this ad was in a different spot, when I tried to close the ad, it told me I was on release 23.0.1 which was not current and would not let me close or navigate away. That is when I collected as much info on the popup so I could post it here. Thanks for your feedback "the-edmeister"!
Is that the position (Realtime labeled ad) on the webpage that the false update appeared?
I get the exact same Realtime slide-out ad when I first visit that airliners.net main page with a different Profile that has no adblocker, and after clearing all cookies, closing Firefox, then re-opening Firefox and loading that page from history. The ad starts to "slide-out" after clicking on link on the main page, and as the new window for an advertisement is opening.
Happens for me with Firefox 20, 21, 22, in addition to Firefox 23, each with their own Profile.