Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

Avatar for Username

Etsi tuesta

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Lue lisää

Ketju on arkistoitu. Esitä kysymys, jos tarvitset apua.

I have a url replacemnt issue which brings up a bogus virus alert. Can you help ?

  • 2 vastausta
  • 1 henkilöllä on sama ongelma
  • 1 näyttö
  • Viimeisin kirjoittaja FredMcD

tstiebler
tstiebler
more options

At random times a url is being substituted for my home page url (my.xfinity.com). It brings up a bogus virus alert claiming to be from Microsoft, saying I should call a phone number (sorry, i didn't save the phone number). I have tried running Avast, Super Anti-Spyware and Malware Bytes scans but the 'alert' message eventually comes back again. The following urls were in history around the time of the last occurrence: http://security-risk-013x1aw04.stream/guest/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://server2.cptrackswl.com/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://9tevj.redirectvoluum.com/redirect?target=BASE64aHR0cDovL3NlcnZlcjIuY3B0cmFja3N3bC5jb20vP2E9QVomcGFnZXg9MTMmczE9ZXFZU09OanZRck85czVTOTY4ZWJPdWdoU2JFSW56eTUzSG1GV1RsWUhOS0IzZVpuVTgzNzZRamwwYy1lWks4dk1QVzREdkNrb1FLQ05ubVc3ZEtuV0ElMkMlMkMmb3M9V2luZG93cyZicm93c2VyPUZpcmVmb3gmaXNwPUNvbWNhc3QlMjBDYWJsZSUyMENvbW11bmljYXRpb25zJTIwaW5jLiZpcD03My4yNDcuMjA4LjE5Mg&ts=1501086425376&hash=SHnLNeTDkVOw2RF-YsftfMCSzDKb_mmqCLI4OD5jrcc&rm=DJ http://9tevj.voluumtrk.com/834e735f-85ea-4434-9e51-59b9535a84a9?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 http://hotspeedmovewild.com/index40A.php?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 https://publisherhub.plaimedia.com/nlp/index.php?subid=4444444&url=http://ypoha.voluumtrk.com/cb08dc7c-2774-4ee3-93d9-41bfa9ca05d8 https://volumtrk3.solidcpm.com/3318183.js?pubid=gumgum_11645&domain=my.xfinity.com&t=AwRZWkFeb3h1eWgFDkVCVEN2ZXd3aQYHRl9VXXt4c3t1ARcnJQ%3D%3D

At random times a url is being substituted for my home page url (my.xfinity.com). It brings up a bogus virus alert claiming to be from Microsoft, saying I should call a phone number (sorry, i didn't save the phone number). I have tried running Avast, Super Anti-Spyware and Malware Bytes scans but the 'alert' message eventually comes back again. The following urls were in history around the time of the last occurrence: http://security-risk-013x1aw04.stream/guest/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://server2.cptrackswl.com/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://9tevj.redirectvoluum.com/redirect?target=BASE64aHR0cDovL3NlcnZlcjIuY3B0cmFja3N3bC5jb20vP2E9QVomcGFnZXg9MTMmczE9ZXFZU09OanZRck85czVTOTY4ZWJPdWdoU2JFSW56eTUzSG1GV1RsWUhOS0IzZVpuVTgzNzZRamwwYy1lWks4dk1QVzREdkNrb1FLQ05ubVc3ZEtuV0ElMkMlMkMmb3M9V2luZG93cyZicm93c2VyPUZpcmVmb3gmaXNwPUNvbWNhc3QlMjBDYWJsZSUyMENvbW11bmljYXRpb25zJTIwaW5jLiZpcD03My4yNDcuMjA4LjE5Mg&ts=1501086425376&hash=SHnLNeTDkVOw2RF-YsftfMCSzDKb_mmqCLI4OD5jrcc&rm=DJ http://9tevj.voluumtrk.com/834e735f-85ea-4434-9e51-59b9535a84a9?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 http://hotspeedmovewild.com/index40A.php?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 https://publisherhub.plaimedia.com/nlp/index.php?subid=4444444&url=http://ypoha.voluumtrk.com/cb08dc7c-2774-4ee3-93d9-41bfa9ca05d8 https://volumtrk3.solidcpm.com/3318183.js?pubid=gumgum_11645&domain=my.xfinity.com&t=AwRZWkFeb3h1eWgFDkVCVEN2ZXd3aQYHRl9VXXt4c3t1ARcnJQ%3D%3D

Kaikki vastaukset (2)

philipp
philipp
  • Moderator
more options

hi, this is often a scam tactic that we suspect is coming form "malvertising" (=ads placed on legitimate websites that redirect you to this fraudulent message), so using an adblocking addon like https://addons.mozilla.org/firefox/addon/ublock-origin/ would help with that.

FredMcD
FredMcD
more options

But just to be sure,

Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.