Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Avatar for Username

Iskanje po podpori

Izogibajte se prevarantski tehnični podpori. Nikoli vam ne bomo naročili, da pokličete telefonsko številko ali nam pošljete osebne podatke. Sumljivo dejavnost prijavite z gumbom »Prijavi zlorabo«.

Več o tem

Ta tema je arhivirana. Postavite prosim novo vprašanje, če potrebujete pomoč.

I have a url replacemnt issue which brings up a bogus virus alert. Can you help ?

  • 2 odgovora
  • 1 ima to težavo
  • 2 ogleda
  • Zadnji odgovor od FredMcD

tstiebler
tstiebler
more options

At random times a url is being substituted for my home page url (my.xfinity.com). It brings up a bogus virus alert claiming to be from Microsoft, saying I should call a phone number (sorry, i didn't save the phone number). I have tried running Avast, Super Anti-Spyware and Malware Bytes scans but the 'alert' message eventually comes back again. The following urls were in history around the time of the last occurrence: http://security-risk-013x1aw04.stream/guest/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://server2.cptrackswl.com/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://9tevj.redirectvoluum.com/redirect?target=BASE64aHR0cDovL3NlcnZlcjIuY3B0cmFja3N3bC5jb20vP2E9QVomcGFnZXg9MTMmczE9ZXFZU09OanZRck85czVTOTY4ZWJPdWdoU2JFSW56eTUzSG1GV1RsWUhOS0IzZVpuVTgzNzZRamwwYy1lWks4dk1QVzREdkNrb1FLQ05ubVc3ZEtuV0ElMkMlMkMmb3M9V2luZG93cyZicm93c2VyPUZpcmVmb3gmaXNwPUNvbWNhc3QlMjBDYWJsZSUyMENvbW11bmljYXRpb25zJTIwaW5jLiZpcD03My4yNDcuMjA4LjE5Mg&ts=1501086425376&hash=SHnLNeTDkVOw2RF-YsftfMCSzDKb_mmqCLI4OD5jrcc&rm=DJ http://9tevj.voluumtrk.com/834e735f-85ea-4434-9e51-59b9535a84a9?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 http://hotspeedmovewild.com/index40A.php?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 https://publisherhub.plaimedia.com/nlp/index.php?subid=4444444&url=http://ypoha.voluumtrk.com/cb08dc7c-2774-4ee3-93d9-41bfa9ca05d8 https://volumtrk3.solidcpm.com/3318183.js?pubid=gumgum_11645&domain=my.xfinity.com&t=AwRZWkFeb3h1eWgFDkVCVEN2ZXd3aQYHRl9VXXt4c3t1ARcnJQ%3D%3D

At random times a url is being substituted for my home page url (my.xfinity.com). It brings up a bogus virus alert claiming to be from Microsoft, saying I should call a phone number (sorry, i didn't save the phone number). I have tried running Avast, Super Anti-Spyware and Malware Bytes scans but the 'alert' message eventually comes back again. The following urls were in history around the time of the last occurrence: http://security-risk-013x1aw04.stream/guest/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://server2.cptrackswl.com/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://9tevj.redirectvoluum.com/redirect?target=BASE64aHR0cDovL3NlcnZlcjIuY3B0cmFja3N3bC5jb20vP2E9QVomcGFnZXg9MTMmczE9ZXFZU09OanZRck85czVTOTY4ZWJPdWdoU2JFSW56eTUzSG1GV1RsWUhOS0IzZVpuVTgzNzZRamwwYy1lWks4dk1QVzREdkNrb1FLQ05ubVc3ZEtuV0ElMkMlMkMmb3M9V2luZG93cyZicm93c2VyPUZpcmVmb3gmaXNwPUNvbWNhc3QlMjBDYWJsZSUyMENvbW11bmljYXRpb25zJTIwaW5jLiZpcD03My4yNDcuMjA4LjE5Mg&ts=1501086425376&hash=SHnLNeTDkVOw2RF-YsftfMCSzDKb_mmqCLI4OD5jrcc&rm=DJ http://9tevj.voluumtrk.com/834e735f-85ea-4434-9e51-59b9535a84a9?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 http://hotspeedmovewild.com/index40A.php?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 https://publisherhub.plaimedia.com/nlp/index.php?subid=4444444&url=http://ypoha.voluumtrk.com/cb08dc7c-2774-4ee3-93d9-41bfa9ca05d8 https://volumtrk3.solidcpm.com/3318183.js?pubid=gumgum_11645&domain=my.xfinity.com&t=AwRZWkFeb3h1eWgFDkVCVEN2ZXd3aQYHRl9VXXt4c3t1ARcnJQ%3D%3D

Vsi odgovori (2)

philipp
philipp
  • Moderator
more options

hi, this is often a scam tactic that we suspect is coming form "malvertising" (=ads placed on legitimate websites that redirect you to this fraudulent message), so using an adblocking addon like https://addons.mozilla.org/firefox/addon/ublock-origin/ would help with that.

FredMcD
FredMcD
more options

But just to be sure,

Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.