Potential security risk?
Dear Sir or Madam,
My name is Michael Staudt and I would like to get support form you in the following matter. For about one week now I get some strange, reappearing sites mentioned in my chronic – even though I have never opened these addresses in tabs myself. Please see the addresses (CAUTION PLEASE) and the screen shot attached.
„https://syscsrv.com/vhtrs/?wm=%7Eu%3E%5Bp&pub=wu%3E%5Bp&ci=%3BL%5Bu3Nv%3De4nC%7C%5CE%2Cuh%60UQTXau%259Nl%2FV%7DK%25Z2s&ppos=ww9Gi&l=K%5B&ve=8NWp&an=Zo%7C&id=41957816409559210160666061561591261080&its=9F%5Bu%2AMo5c%3BbA%7EQD%3BumPWbV%60&cup=o%2C%3FRpArIX6%7D5%7Dr%2Aq%5Ed452%2B57kSt-%600ia%22O7aEC86B%3E2%291%3APi%2B%60z%40RvH%7C%60jl%22%22r_%29%2C%2F9VXYs3QvbuAwO..fR%3E1C%22rbev%247%219X%3EKk%21Fz%3ApR&phash=2ba37b6dce3f679ad18d0b8774c510f9132da35022d5abe0bf35e1b6d3d95db7“
and an omious new tab with the address: „http://127.0.0.1:42842/lp?u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“
I tried to search the internet for „syscsrv“ as a potential thread and I have found some entries in forums of people who seem to have the same issue. However, in the forums there were no solutions for the issue mentioned. Are these two addresses potentially dangerous/ malicious or are these potentially firefox bugs?
Thank you for your help.
Yours sincerely, Michael Staudt
All Replies (1)
Hi,
What extensions do you have installed?
Regarding the new tab, please note that http://127.0.0.1 is an IP address in your local network, most likely your device. So that address is referring to something from your computer, the question is why it has been opened. I suspect an extension (see the question above), but it may be also a third-party program.