hi rdwray, unfortunately this is a scam tactic that is trying to trick you into installing malware, so don't download or execute this kind of stuff! only download firefox from its official location at mozilla.org - in addition updates are handled automatically by firefox so you don't have to download anything (you can initiate a check for updates in the firefox menu ≡ > help ? > about firefox).

in case this is caused by rogue advertisements on legitimate websites, you could install an adblocking extension in firefox: https://addons.mozilla.org/firefox/addon/ublock-origin/

you might also want to run a full scan of your system with the security software already in place and different tools like the free version of malwarebytes, adwcleaner & kaspersky security scan in order to make sure that there isn't already some sort of malware active on your system that triggers these false alerts.

Troubleshoot Firefox issues caused by malware

I just wanted to verify that this was a scam. I take it that you do not think that Windows Defender is adequate - right/wrong? thanks...

BTW: This happened after I upgraded from 44 to 47, seems like 47 may be marked. I am going to downgrade back to 44.

malwarebytes is not free: This is a subscription product with a fee of $24.95 per year.

seems to be an issue with adwcleaner: https://toolslib.net/forum/viewthread/3974/

Kaspersky may be alright.

these messages are triggered by rogue advertisements on websites totally independent of the version you are using, downgrading is a bad idea, because this will actually make you vulnerable: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/

malwarebytes has a free version that lacks the real-time protection feature, which isn't relevant for the recommended one-time scan anyway & adwcleaner is a reliable and often used tool... those two programs have more of a focus on browser hijackers, which often aren't recognised by traditional AV products.

I will look into your suggestions. The website I was on was legitimate abc.news.go.com - they may have got hacked; nothing safe any more. God bless.

rdwray said

I just wanted to verify that this was a scam. ... BTW: This happened after I upgraded from 44 to 47, seems like 47 may be marked. I am going to downgrade back to 44.

It is known about https://support.mozilla.org/en-US/forums/contributors/712056

Not really targeting Firefox 47.0 specifically as users using say Firefox 45.0 have reported encountering these sites. It is targeting Firefox useragents on Windows since there is no point targeting Mac OSX and Linux users since .exe files is not used.

It's like opening an email and it has an attachment from "somebody", you don't open the attachment, you go to spamcop.net and issue a spam report. The same thing holds true with this type of problem. I went to the service provider (abuse@EUROPEDNS.com) for the website and issued an abuse report.

Got to put a wall in from of these hackers every chance you get.

Is this file malware? I continue to get this item but it won't execute, maybe thankfully.

https://ahghumotorradundreisen.org/2001248453848/1467759767758873/firefox-patch .exe

moderator broke the hyperlink - violation of forum rules to post a link directly to an executable file like that and poor forum etiquette to do so in any forum

A word of caution, if you don't recognize the source or person, delete it or go somewhere that you know will have the answer; that is why I came here before even downloading the same file.

Got a new attempt on this issue and I just did a intense virus and malware scan on my PC and no issues were found. I also uninstalled Mozilla Maintenance Service. Waiting to see if it happens again.

How often does Mozilla Maintenance Service run?

Hi rdwray, the Mozilla Mozilla Maintenance Service doesn't pop up websites on strange servers and doesn't ever give you a .exe download.

Can you figure out from your history which site that fake patch tab might have launched from? One theory is that it comes from a bad ad in a page but it would be helpful to "name names" (or paste links) to the sites that are causing it.

Why uninstall the Mozilla Maint Service ?

That is helping to easily install the genuine Mozilla Firefox updates that keep you safe & secure

• What is the Mozilla Maintenance Service?

P.S. I have been using Firefox on Windows recently, without blockers, in an attempt to grab this, but have not yet encountered any of these fake updates myself.

jscher2000 said

Hi rdwray, the Mozilla Mozilla Maintenance Service doesn't pop up websites on strange servers and doesn't ever give you a .exe download. Can you figure out from your history which site that fake patch tab might have launched from? One theory is that it comes from a bad ad in a page but it would be helpful to "name names" (or paste links) to the sites that are causing it.

Read the beginning of this thread. The website is now dead but they just open up another one. Don't know what is in the file and I am not going to find out.

John99 said

Why uninstall the Mozilla Maint Service ? That is helping to easily install the genuine Mozilla Firefox updates that keep you safe & secure

• What is the Mozilla Maintenance Service?

I don't want Mozilla controlling my computer, I do that because some of the updates dump the addons that I have worked so hard to build. Mozilla has some problems with their attitude and want to take over your life like Microsoft.

rdwray said

jscher2000 said

Can you figure out from your history which site that fake patch tab might have launched from? One theory is that it comes from a bad ad in a page but it would be helpful to "name names" (or paste links) to the sites that are causing it.

Read the beginning of this thread. The website is now dead but they just open up another one. Don't know what is in the file and I am not going to find out.

I'm asking about the site(s) you were visiting BEFORE the malware site launched, which might point to the ad network which is generating the pop-ups. I don't think you have mentioned any of them so far.

rdwray said

I will look into your suggestions. The website I was on was legitimate abc.news.go.com - they may have got hacked; nothing safe any more. God bless.

I guess that is http://abcnews.go.com/

Just wanted to update: I did some checking on three different websites that this fraud was coming from and they all belonged to an individual out of Texas. The good news is that all the websites have been removed and I personally have not seen any more popups.

The Lord is Good.

The websites being used for this fake urgent Firefox update scam have been disposable as one or two new sites gets reported each day and not mentioned again later.