firefox-patch.js save to disk. Can anyone use this?
I was able to save this annoying pop-up to a formatted DVD-R. Can anyone use this in order to get rid of it. It appears to possibly be a trojan. Keep up the good work.
Chosen solution
Hi GreyStick, yes, this is a known problem being pushed by advertisements on various sites. The file is a dangerous script that involves Windows administration tools to embed malware on your system. I don't know whether the firefox_patch.js that you captured is the same one others users have reported, but it's probably very similar.
Unfortunately, Firefox doesn't have any built-in download blocking protection, other than site-based blocking through the phishing and malware protection feature. Because the malware is using new sites every day or every other day, the built-in filter can't keep up.
So users are needing to fall back on good security practices and their regular security software. I think numerous people are thinking about a more proactive solution, but it's going to take time.
Meanwhile, one step you could consider to prevent Windows from running .js files as administrative scripts, is to direct them to open in a text editor (such as Notepad) instead.
The exact method for this depends on your version of Windows, but all recent versions should have a control panel where you can specify the program you want to open different kinds of files by their file extension. I have attached a screen shot from Windows 7, for example.
The following article has a thorough explanation and lots of screen shots. Note: If you don't have a .js file available to right-click, you may need to create one to follow its steps. http://www.computerworld.com/article/3090146/windows-pcs/blocking-javascript-can-stop-some-windows-malware.html
Read this answer in context 👍 3എല്ലാ മറുപടികളും (3)
If you get a pop-up message asking to update Firefox or plugins or scanning for malware then such a message is likely a scam and you should never respond to such an alert to avoid getting infected with malware.
- Only update Firefox via "Help > About" or by downloading and installing Firefox from the Mozilla server and never via a pop-up or link on a web page.
- plugins should only be updated via the plugin itself or by visiting the home page of the plugin.
See also:
Chosen Solution
Hi GreyStick, yes, this is a known problem being pushed by advertisements on various sites. The file is a dangerous script that involves Windows administration tools to embed malware on your system. I don't know whether the firefox_patch.js that you captured is the same one others users have reported, but it's probably very similar.
Unfortunately, Firefox doesn't have any built-in download blocking protection, other than site-based blocking through the phishing and malware protection feature. Because the malware is using new sites every day or every other day, the built-in filter can't keep up.
So users are needing to fall back on good security practices and their regular security software. I think numerous people are thinking about a more proactive solution, but it's going to take time.
Meanwhile, one step you could consider to prevent Windows from running .js files as administrative scripts, is to direct them to open in a text editor (such as Notepad) instead.
The exact method for this depends on your version of Windows, but all recent versions should have a control panel where you can specify the program you want to open different kinds of files by their file extension. I have attached a screen shot from Windows 7, for example.
The following article has a thorough explanation and lots of screen shots. Note: If you don't have a .js file available to right-click, you may need to create one to follow its steps. http://www.computerworld.com/article/3090146/windows-pcs/blocking-javascript-can-stop-some-windows-malware.html
Hello, if this question is not forgotten, can you share that .js with me via pastebin.com unlisted permanent paste and send me the link via what mozilla.org offers (PM)?