Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

On Monday the 3rd of March, around 5pm UTC (9am PT) users may experience a brief period of downtime while one of our underlying services is under maintenance.

Avatar for Username

Търсене в помощните статии

Избягвайте измамите при поддръжката. Никога няма да ви помолим да се обадите или изпратите SMS на телефонен номер или да споделите лична информация. Моля, докладвайте подозрителна активност на "Докладване за злоупотреба".

Научете повече

Тази тема беше архивирана. Моля, задайте нов въпрос ако имате нужда от помощ.

I have a url replacemnt issue which brings up a bogus virus alert. Can you help ?

  • 2 отговора
  • 1 има този проблем
  • 1 изглед
  • Последен отговор от FredMcD

tstiebler
tstiebler
more options

At random times a url is being substituted for my home page url (my.xfinity.com). It brings up a bogus virus alert claiming to be from Microsoft, saying I should call a phone number (sorry, i didn't save the phone number). I have tried running Avast, Super Anti-Spyware and Malware Bytes scans but the 'alert' message eventually comes back again. The following urls were in history around the time of the last occurrence: http://security-risk-013x1aw04.stream/guest/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://server2.cptrackswl.com/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://9tevj.redirectvoluum.com/redirect?target=BASE64aHR0cDovL3NlcnZlcjIuY3B0cmFja3N3bC5jb20vP2E9QVomcGFnZXg9MTMmczE9ZXFZU09OanZRck85czVTOTY4ZWJPdWdoU2JFSW56eTUzSG1GV1RsWUhOS0IzZVpuVTgzNzZRamwwYy1lWks4dk1QVzREdkNrb1FLQ05ubVc3ZEtuV0ElMkMlMkMmb3M9V2luZG93cyZicm93c2VyPUZpcmVmb3gmaXNwPUNvbWNhc3QlMjBDYWJsZSUyMENvbW11bmljYXRpb25zJTIwaW5jLiZpcD03My4yNDcuMjA4LjE5Mg&ts=1501086425376&hash=SHnLNeTDkVOw2RF-YsftfMCSzDKb_mmqCLI4OD5jrcc&rm=DJ http://9tevj.voluumtrk.com/834e735f-85ea-4434-9e51-59b9535a84a9?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 http://hotspeedmovewild.com/index40A.php?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 https://publisherhub.plaimedia.com/nlp/index.php?subid=4444444&url=http://ypoha.voluumtrk.com/cb08dc7c-2774-4ee3-93d9-41bfa9ca05d8 https://volumtrk3.solidcpm.com/3318183.js?pubid=gumgum_11645&domain=my.xfinity.com&t=AwRZWkFeb3h1eWgFDkVCVEN2ZXd3aQYHRl9VXXt4c3t1ARcnJQ%3D%3D

At random times a url is being substituted for my home page url (my.xfinity.com). It brings up a bogus virus alert claiming to be from Microsoft, saying I should call a phone number (sorry, i didn't save the phone number). I have tried running Avast, Super Anti-Spyware and Malware Bytes scans but the 'alert' message eventually comes back again. The following urls were in history around the time of the last occurrence: http://security-risk-013x1aw04.stream/guest/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://server2.cptrackswl.com/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://9tevj.redirectvoluum.com/redirect?target=BASE64aHR0cDovL3NlcnZlcjIuY3B0cmFja3N3bC5jb20vP2E9QVomcGFnZXg9MTMmczE9ZXFZU09OanZRck85czVTOTY4ZWJPdWdoU2JFSW56eTUzSG1GV1RsWUhOS0IzZVpuVTgzNzZRamwwYy1lWks4dk1QVzREdkNrb1FLQ05ubVc3ZEtuV0ElMkMlMkMmb3M9V2luZG93cyZicm93c2VyPUZpcmVmb3gmaXNwPUNvbWNhc3QlMjBDYWJsZSUyMENvbW11bmljYXRpb25zJTIwaW5jLiZpcD03My4yNDcuMjA4LjE5Mg&ts=1501086425376&hash=SHnLNeTDkVOw2RF-YsftfMCSzDKb_mmqCLI4OD5jrcc&rm=DJ http://9tevj.voluumtrk.com/834e735f-85ea-4434-9e51-59b9535a84a9?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 http://hotspeedmovewild.com/index40A.php?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 https://publisherhub.plaimedia.com/nlp/index.php?subid=4444444&url=http://ypoha.voluumtrk.com/cb08dc7c-2774-4ee3-93d9-41bfa9ca05d8 https://volumtrk3.solidcpm.com/3318183.js?pubid=gumgum_11645&domain=my.xfinity.com&t=AwRZWkFeb3h1eWgFDkVCVEN2ZXd3aQYHRl9VXXt4c3t1ARcnJQ%3D%3D

Всички отговори (2)

philipp
philipp
  • Moderator
more options

hi, this is often a scam tactic that we suspect is coming form "malvertising" (=ads placed on legitimate websites that redirect you to this fraudulent message), so using an adblocking addon like https://addons.mozilla.org/firefox/addon/ublock-origin/ would help with that.

FredMcD
FredMcD
more options

But just to be sure,

Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.