Intersect Posted July 10, 2018 Share Posted July 10, 2018 (edited) While browsing the front page of Neowin a rather anoying add took place of the tab I was on, the computer is virus/malware/spyware free I was unable to close the tab. When interacting with cancel buttons the browser went into full screen mode. The only way I Could exit was to endTask the browser and not restore the previous session the URL and Screen shot of what happend are attached I have not posted clickable links for the safty of the other members of this site, Can some one look into this please, Edited January 22, 2020 by Jason S. thread title edited for accuracy DentedAphid7 1 Share Link to comment Share on other sites More sharing options...
techbeck Posted July 10, 2018 Share Posted July 10, 2018 (edited) 7 minutes ago, Intersect said: While browsing the front page of Neowin a rather anoying add took place of the tab I was on, the computer is virus/malware/spyware free I was unable to close the tab. When interacting with cancel buttons the browser went into full screen mode. The only way I Could exit was to endTask the browser and not restore the previous session the URL and Screen shot of what happend are attached I have not posted clickable links for the safty of the other members of this site, Can some one look into this please, Looks the same to this. Sure it is not your PC? https://malwaretips.com/blogs/remove-firefox-requires-a-manual-update/ And what I searched for to find this.... https://www.google.com/search?q=blue+screen+popup+firefox+requires+a+manual+update+to+the+current+version&ie=utf-8&oe=utf-8&client=firefox-b-1 Link to comment Share on other sites More sharing options...
Intersect Posted July 10, 2018 Author Share Posted July 10, 2018 yep 100% sure its not the laptop it was very recently (ie) today with malwarebytes enterprise edtion that i get as part of a perk from work mcafee livesafe is fully uptodate as well no issues have been detected Link to comment Share on other sites More sharing options...
techbeck Posted July 10, 2018 Share Posted July 10, 2018 1 minute ago, Intersect said: yep 100% sure its not the laptop it was very recently (ie) today with malwarebytes enterprise edtion that i get as part of a perk from work mcafee livesafe is fully uptodate as well no issues have been detected Well, from the links and search, looks like malware to me. And this is a redirect malware that will infect IE, FF, and Chrome. Link to comment Share on other sites More sharing options...
Intersect Posted July 10, 2018 Author Share Posted July 10, 2018 thanks for the feedback, but I am confident that my system is clean. I don't browse for torrents and other areas of the net that stuff like this comes from. so god knows where its come from. this is not the 1st time that adds on neowin have delivered iffy content. Crome is not installed and never has been and I have double checked the installed programs via WMIC and add remove programs and there are no nefarious items listed. Link to comment Share on other sites More sharing options...
Joe User Posted July 10, 2018 Share Posted July 10, 2018 (edited) It's not malware. It's a Javascript page to try and get you to install malware. https://malwaretips.com/blogs/remove-firefox-requires-a-manual-update/ The “Firefox requires a manual update” alert is displayed by malicious or hacked websites to force the users into installing malicious Firefox add-ons. The alerts generated by the malicious sites will display the following message Most likely it's coming from the advertising company that they use here. Brandon H 1 Share Link to comment Share on other sites More sharing options...
techbeck Posted July 10, 2018 Share Posted July 10, 2018 Just now, Joe User said: It's not malware. It's a Javascript page to try and get you to install malware. https://malwaretips.com/blogs/remove-firefox-requires-a-manual-update/ The “Firefox requires a manual update” alert is displayed by malicious or hacked websites to force the users into installing malicious Firefox add-ons. The alerts generated by the malicious sites will display the following message extensions/addons like this are classified as malware. basically software designed to do something malicious. In this case, link to another site to download more junk. Link to comment Share on other sites More sharing options...
Joe User Posted July 10, 2018 Share Posted July 10, 2018 1 minute ago, techbeck said: extensions/addons like this are classified as malware. basically software designed to do something malicious. In this case, link to another site to download more junk. This is a phishing attack. MBAM doesn't always catch those. Link to comment Share on other sites More sharing options...
Intersect Posted July 10, 2018 Author Share Posted July 10, 2018 i am aware of what the site attempted to do, I am not worried as my browsing sessions are allways sandboxed, it was just an observation that I thought the site should be aware of Link to comment Share on other sites More sharing options...
Joe User Posted July 10, 2018 Share Posted July 10, 2018 1 minute ago, Intersect said: i am aware of what the site attempted to do, I am not worried as my browsing sessions are allways sandboxed, it was just an observation that I thought the site should be aware of I agree, this is on Neowin to fix. It's not your computer. DentedAphid7 1 Share Link to comment Share on other sites More sharing options...
Marujan Posted July 10, 2018 Share Posted July 10, 2018 1) remove proxy 2)remove addons 3)install chrome Link to comment Share on other sites More sharing options...
techbeck Posted July 10, 2018 Share Posted July 10, 2018 2 minutes ago, Joe User said: I agree, this is on Neowin to fix. It's not your computer. https://whois.icann.org/en/lookup?name=ffcontendev.cool Newly registered domain it looks like. probably will be gone soon. Link to comment Share on other sites More sharing options...
Intersect Posted July 10, 2018 Author Share Posted July 10, 2018 blocked the .cool domain and have updated the malwarebytes policys on the Management console at work. thanks for the contributions guys for all that deserve it Barney T. 1 Share Link to comment Share on other sites More sharing options...
Recommended Posts