Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Avatar for Username

Поиск в Поддержке

Избегайте мошенников, выдающих себя за службу поддержки. Мы никогда не попросим вас позвонить, отправить текстовое сообщение или поделиться личной информацией. Сообщайте о подозрительной активности, используя функцию «Пожаловаться».

Подробнее

Эта тема была архивирована. Если вам нужна помощь, задайте новый вопрос.

I have a url replacemnt issue which brings up a bogus virus alert. Can you help ?

  • 2 ответа
  • 1 имеет эту проблему
  • 2 просмотра
  • Последний ответ от FredMcD

tstiebler
tstiebler
more options

At random times a url is being substituted for my home page url (my.xfinity.com). It brings up a bogus virus alert claiming to be from Microsoft, saying I should call a phone number (sorry, i didn't save the phone number). I have tried running Avast, Super Anti-Spyware and Malware Bytes scans but the 'alert' message eventually comes back again. The following urls were in history around the time of the last occurrence: http://security-risk-013x1aw04.stream/guest/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://server2.cptrackswl.com/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://9tevj.redirectvoluum.com/redirect?target=BASE64aHR0cDovL3NlcnZlcjIuY3B0cmFja3N3bC5jb20vP2E9QVomcGFnZXg9MTMmczE9ZXFZU09OanZRck85czVTOTY4ZWJPdWdoU2JFSW56eTUzSG1GV1RsWUhOS0IzZVpuVTgzNzZRamwwYy1lWks4dk1QVzREdkNrb1FLQ05ubVc3ZEtuV0ElMkMlMkMmb3M9V2luZG93cyZicm93c2VyPUZpcmVmb3gmaXNwPUNvbWNhc3QlMjBDYWJsZSUyMENvbW11bmljYXRpb25zJTIwaW5jLiZpcD03My4yNDcuMjA4LjE5Mg&ts=1501086425376&hash=SHnLNeTDkVOw2RF-YsftfMCSzDKb_mmqCLI4OD5jrcc&rm=DJ http://9tevj.voluumtrk.com/834e735f-85ea-4434-9e51-59b9535a84a9?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 http://hotspeedmovewild.com/index40A.php?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 https://publisherhub.plaimedia.com/nlp/index.php?subid=4444444&url=http://ypoha.voluumtrk.com/cb08dc7c-2774-4ee3-93d9-41bfa9ca05d8 https://volumtrk3.solidcpm.com/3318183.js?pubid=gumgum_11645&domain=my.xfinity.com&t=AwRZWkFeb3h1eWgFDkVCVEN2ZXd3aQYHRl9VXXt4c3t1ARcnJQ%3D%3D

At random times a url is being substituted for my home page url (my.xfinity.com). It brings up a bogus virus alert claiming to be from Microsoft, saying I should call a phone number (sorry, i didn't save the phone number). I have tried running Avast, Super Anti-Spyware and Malware Bytes scans but the 'alert' message eventually comes back again. The following urls were in history around the time of the last occurrence: http://security-risk-013x1aw04.stream/guest/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://server2.cptrackswl.com/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://9tevj.redirectvoluum.com/redirect?target=BASE64aHR0cDovL3NlcnZlcjIuY3B0cmFja3N3bC5jb20vP2E9QVomcGFnZXg9MTMmczE9ZXFZU09OanZRck85czVTOTY4ZWJPdWdoU2JFSW56eTUzSG1GV1RsWUhOS0IzZVpuVTgzNzZRamwwYy1lWks4dk1QVzREdkNrb1FLQ05ubVc3ZEtuV0ElMkMlMkMmb3M9V2luZG93cyZicm93c2VyPUZpcmVmb3gmaXNwPUNvbWNhc3QlMjBDYWJsZSUyMENvbW11bmljYXRpb25zJTIwaW5jLiZpcD03My4yNDcuMjA4LjE5Mg&ts=1501086425376&hash=SHnLNeTDkVOw2RF-YsftfMCSzDKb_mmqCLI4OD5jrcc&rm=DJ http://9tevj.voluumtrk.com/834e735f-85ea-4434-9e51-59b9535a84a9?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 http://hotspeedmovewild.com/index40A.php?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 https://publisherhub.plaimedia.com/nlp/index.php?subid=4444444&url=http://ypoha.voluumtrk.com/cb08dc7c-2774-4ee3-93d9-41bfa9ca05d8 https://volumtrk3.solidcpm.com/3318183.js?pubid=gumgum_11645&domain=my.xfinity.com&t=AwRZWkFeb3h1eWgFDkVCVEN2ZXd3aQYHRl9VXXt4c3t1ARcnJQ%3D%3D

Все ответы (2)

philipp
philipp
  • Moderator
more options

hi, this is often a scam tactic that we suspect is coming form "malvertising" (=ads placed on legitimate websites that redirect you to this fraudulent message), so using an adblocking addon like https://addons.mozilla.org/firefox/addon/ublock-origin/ would help with that.

FredMcD
FredMcD
more options

But just to be sure,

Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.