• Sign in to Neowin Faster!

    Create an account on Neowin to contribute and support the site.

Really anoying Add poped up while sitting on the main page

Recommended Posts

Intersect    237

While browsing the front page of Neowin a rather anoying add took place of the tab I was on, the computer is virus/malware/spyware free

I was unable to close the tab.  When interacting with cancel buttons the browser went into full screen mode. The only way I Could exit was to endTask the browser and not restore the previous session

 

the URL and Screen shot of what happend are attached

I have not posted clickable links for the safty of the other members of this site,

Can some one look into this please,

image.thumb.png.47dce49ef34e2a77ef5456a28db57bb9.pngneowinadd.thumb.PNG.54ba2a2fa64b4b7e8adefbe5909b03fa.PNG

image.png

  • Like 1

Share this post


Link to post
Share on other sites
techbeck    6,463
Posted (edited)
7 minutes ago, Intersect said:

While browsing the front page of Neowin a rather anoying add took place of the tab I was on, the computer is virus/malware/spyware free

I was unable to close the tab.  When interacting with cancel buttons the browser went into full screen mode. The only way I Could exit was to endTask the browser and not restore the previous session

 

the URL and Screen shot of what happend are attached

I have not posted clickable links for the safty of the other members of this site,

Can some one look into this please,

 

Looks the same to this.  Sure it is not your PC?

https://malwaretips.com/blogs/remove-firefox-requires-a-manual-update/

 

And what I searched for to find this....

https://www.google.com/search?q=blue+screen+popup+firefox+requires+a+manual+update+to+the+current+version&ie=utf-8&oe=utf-8&client=firefox-b-1

Share this post


Link to post
Share on other sites
Intersect    237

yep 100% sure its not the laptop  it was very recently (ie) today with malwarebytes enterprise edtion that i get as part of a perk from work

mcafee livesafe is fully uptodate as well  no issues have been detected

 

Share this post


Link to post
Share on other sites
techbeck    6,463
1 minute ago, Intersect said:

yep 100% sure its not the laptop  it was very recently (ie) today with malwarebytes enterprise edtion that i get as part of a perk from work

mcafee livesafe is fully uptodate as well  no issues have been detected

 

Well, from the links and search, looks like malware to me.  And this is a redirect malware that will infect IE, FF, and Chrome.

Share this post


Link to post
Share on other sites
Intersect    237

thanks for the feedback, but I am confident that my system is clean. I don't browse for torrents and other areas of the net that stuff like this comes from.  so god knows where its come from.  this is not the 1st time that adds on neowin have delivered iffy content.  Crome is not installed and never has been and I have double checked the installed programs via WMIC  and add remove programs and there are no nefarious items listed.

Share this post


Link to post
Share on other sites
Joe User    455
Posted (edited)

It's not malware. It's a Javascript page to try and get you to install malware. 

 

https://malwaretips.com/blogs/remove-firefox-requires-a-manual-update/

 

The “Firefox requires a manual update” alert is displayed by malicious or hacked websites to force the users into installing malicious Firefox add-ons. The alerts generated by the malicious sites will display the following message

 

Most likely it's coming from the advertising company that they use here. 

  • Like 1

Share this post


Link to post
Share on other sites
techbeck    6,463
Just now, Joe User said:

It's not malware. It's a Javascript page to try and get you to install malware. 

 

https://malwaretips.com/blogs/remove-firefox-requires-a-manual-update/

 

The “Firefox requires a manual update” alert is displayed by malicious or hacked websites to force the users into installing malicious Firefox add-ons. The alerts generated by the malicious sites will display the following message

extensions/addons like this are classified as malware.  basically software designed to do something malicious.  In this case, link to another site to download more junk.

Share this post


Link to post
Share on other sites
Joe User    455
1 minute ago, techbeck said:

extensions/addons like this are classified as malware.  basically software designed to do something malicious.  In this case, link to another site to download more junk.

This is a phishing attack. MBAM doesn't always catch those.

 

Share this post


Link to post
Share on other sites
Intersect    237

i am aware of what the site attempted to do,  I am not worried as my browsing sessions are allways sandboxed,  it was just an observation that I thought the site should be aware of

Share this post


Link to post
Share on other sites
Joe User    455
1 minute ago, Intersect said:

i am aware of what the site attempted to do,  I am not worried as my browsing sessions are allways sandboxed,  it was just an observation that I thought the site should be aware of

I agree, this is on Neowin to fix. It's not your computer.

 

  • Like 1

Share this post


Link to post
Share on other sites
Marujan    43

1) remove proxy

2)remove addons

3)install chrome

Share this post


Link to post
Share on other sites
techbeck    6,463
2 minutes ago, Joe User said:

I agree, this is on Neowin to fix. It's not your computer.

 

https://whois.icann.org/en/lookup?name=ffcontendev.cool

 

Newly registered domain it looks like.  probably will be gone soon.

Share this post


Link to post
Share on other sites
Intersect    237

blocked the .cool domain and have updated the malwarebytes policys on the Management console at work.

 thanks for the contributions guys  :beer: for all that deserve it

  • Like 1

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.