X
點擊此處開啟此網站的行動版。

技術支援討論區

addonbrowser.com/video-flash-download-manager, hijacked tabs. How do I remove it?

已張貼

Upon starting Firefox. (64.0 (64-bit), Ubuntu 16.04), an Addon, which I thought I had -but is not listed in my addons-, "{link to malware removed} , asked to send notifications. I usually deny, but as I mentioned, I thought I had this add-on installed, so I accepted. It then opened these tabs:

     1.  https://win-big-bonus-here.com/?u=7pfk605&o=e93bvvr&t=1577914_proads_gambling.
     2.  https://www.amazon.com/s/ref=nb_sb_ss_c_1_20?url=search-alias%3Daps&field-                keywords=Genius+surface+pro+3+charger&sprefix=surface+pro+3+charger.

I don't have this addon listed, either in my installed addons, or as an available addon. Where did it come from? And how do I get rid of it?

Upon starting Firefox. (64.0 (64-bit), Ubuntu 16.04), an Addon, which I thought I had -but is not listed in my addons-, "{link to malware removed} , asked to send notifications. I usually deny, but as I mentioned, I thought I had this add-on installed, so I accepted. It then opened these tabs: 1. https://win-big-bonus-here.com/?u=7pfk605&o=e93bvvr&t=1577914_proads_gambling. 2. https://www.amazon.com/s/ref=nb_sb_ss_c_1_20?url=search-alias%3Daps&field- keywords=Genius+surface+pro+3+charger&sprefix=surface+pro+3+charger. I don't have this addon listed, either in my installed addons, or as an available addon. Where did it come from? And how do I get rid of it?

由 Matt 於 修改

被選擇的解決方法

Thank you all for your replies. Cor-el, a couple of those "abouts"- were a little over my head. Hopefully, I can learn how to use those "serviceworkers" and "websockets" things.

  But, yes, I did get those notifications again, but only 2 more times upon starting Firefox.  After that it's not happened any more.   Totally baffles me!  If it re-occurs, I will definitely post again.  Again, thank you all.

-Apeman

apeman said

Upon starting Firefox. (64.0 (64-bit), Ubuntu 16.04), an Addon, which I thought I had -but is not listed in my addons-, "{link to malware removed} , asked to send notifications. I usually deny, but as I mentioned, I thought I had this add-on installed, so I accepted. It then opened these tabs: 1. https://win-big-bonus-here.com/?u=7pfk605&o=e93bvvr&t=1577914_proads_gambling. 2. https://www.amazon.com/s/ref=nb_sb_ss_c_1_20?url=search-alias%3Daps&field- keywords=Genius+surface+pro+3+charger&sprefix=surface+pro+3+charger. I don't have this addon listed, either in my installed addons, or as an available addon. Where did it come from? And how do I get rid of it?
從原來的回覆中察看解決方案 0

額外的系統細節

已安裝的外掛程式

  • Shockwave Flash 32.0 r0

應用程式

  • User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:64.0) Gecko/20100101 Firefox/64.0

更多資訊

FredMcD
  • Top 10 Contributor
4267 個解決方法 59836 個答案

I tried the link you posted, and my anti-virus sounded off;

Category: Intrusion Prevention Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Destination Address,Source Address,Traffic Description 12/13/2018 6:42:03 PM,High,An intrusion attempt by reddleops.pro was blocked.,Blocked,No Action Required,Web Attack: Fake Tech Support Domains 2,No Action Required,No Action Required,"reddleops.pro (199.80.54.115, 443)","FRED-PC (172.16.40.148, 62819)",reddleops.pro (199.80.54.115),"TCP, https" Network traffic from reddleops.pro matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME3\PROGRAM FILES (X86)\MOZILLA FIREFOX 54\FIREFOX.EXE.

I tried the link you posted, and my anti-virus sounded off; Category: Intrusion Prevention Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Destination Address,Source Address,Traffic Description 12/13/2018 6:42:03 PM,High,An intrusion attempt by reddleops.pro was blocked.,Blocked,No Action Required,Web Attack: Fake Tech Support Domains 2,No Action Required,No Action Required,"reddleops.pro (199.80.54.115, 443)","FRED-PC (172.16.40.148, 62819)",reddleops.pro (199.80.54.115),"TCP, https" Network traffic from <b>reddleops.pro</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME3\PROGRAM FILES (X86)\MOZILLA FIREFOX 54\FIREFOX.EXE.
FredMcD
  • Top 10 Contributor
4267 個解決方法 59836 個答案

I called for more help. Go to your programs folder and remove anything newly installed.

I called for more help. Go to your programs folder and remove anything newly installed.
James
  • Top 25 Contributor
  • Moderator
1600 個解決方法 11316 個答案

Fred, this is Linux and not the Windows you use.

apeman, what Extensions do you have listed as installed in Firefox even though you say none seem to have a similar name.

I do not use Ubuntu but I would think Ubuntu would not include such an extension with their Firefox package or separate Firefox related packages in package manager.

Firefox from www.mozilla.org/firefox/all certainly does not come with this video download extension.

Fred, this is '''Linux''' and not the Windows you use. apeman, what Extensions do you have listed as installed in Firefox even though you say none seem to have a similar name. I do not use Ubuntu but I would think Ubuntu would not include such an extension with their Firefox package or separate Firefox related packages in package manager. Firefox from www.mozilla.org/firefox/all certainly does not come with this video download extension.

由 James 於 修改

cor-el
  • Top 10 Contributor
  • Moderator
17567 個解決方法 158896 個答案

Do you keep getting tabs or was this a one time action?

You can check the Notifications under "Options/Preferences -> Privacy & Security -> Permissions".

Do you keep getting tabs or was this a one time action? You can check the Notifications under "Options/Preferences -> Privacy & Security -> Permissions".
cor-el
  • Top 10 Contributor
  • Moderator
17567 個解決方法 158896 個答案

You can see all registered service workers on these pages: about:serviceworkers and about:debugging#workers You can check WebSockets via this page: about:networking#websockets See also serviceworker.txt in the profile folder.

You can see all registered service workers on these pages: <b>about:serviceworkers</b> and <b>about:debugging#workers</b> You can check WebSockets via this page: <b>about:networking#websockets</b> See also serviceworker.txt in the profile folder.

選擇的解決方法

Thank you all for your replies. Cor-el, a couple of those "abouts"- were a little over my head. Hopefully, I can learn how to use those "serviceworkers" and "websockets" things.

  But, yes, I did get those notifications again, but only 2 more times upon starting Firefox.  After that it's not happened any more.   Totally baffles me!  If it re-occurs, I will definitely post again.  Again, thank you all.

-Apeman

apeman said

Upon starting Firefox. (64.0 (64-bit), Ubuntu 16.04), an Addon, which I thought I had -but is not listed in my addons-, "{link to malware removed} , asked to send notifications. I usually deny, but as I mentioned, I thought I had this add-on installed, so I accepted. It then opened these tabs: 1. https://win-big-bonus-here.com/?u=7pfk605&o=e93bvvr&t=1577914_proads_gambling. 2. https://www.amazon.com/s/ref=nb_sb_ss_c_1_20?url=search-alias%3Daps&field- keywords=Genius+surface+pro+3+charger&sprefix=surface+pro+3+charger. I don't have this addon listed, either in my installed addons, or as an available addon. Where did it come from? And how do I get rid of it?
Thank you all for your replies. Cor-el, a couple of those "abouts"- were a little over my head. Hopefully, I can learn how to use those "serviceworkers" and "websockets" things. But, yes, I did get those notifications again, but only 2 more times upon starting Firefox. After that it's not happened any more. Totally baffles me! If it re-occurs, I will definitely post again. Again, thank you all. -Apeman ''apeman [[#question-1243654|said]]'' <blockquote> Upon starting Firefox. (64.0 (64-bit), Ubuntu 16.04), an Addon, which I thought I had -but is not listed in my addons-, "{link to malware removed} , asked to send notifications. I usually deny, but as I mentioned, I thought I had this add-on installed, so I accepted. It then opened these tabs: 1. https://win-big-bonus-here.com/?u=7pfk605&o=e93bvvr&t=1577914_proads_gambling. 2. https://www.amazon.com/s/ref=nb_sb_ss_c_1_20?url=search-alias%3Daps&field- keywords=Genius+surface+pro+3+charger&sprefix=surface+pro+3+charger. I don't have this addon listed, either in my installed addons, or as an available addon. Where did it come from? And how do I get rid of it? </blockquote>