Avatar for Username

Zoeken in Support

Vermijd ondersteuningsscams. We zullen u nooit vragen een telefoonnummer te bellen, er een sms naar te sturen of persoonlijke gegevens te delen. Meld verdachte activiteit met de optie ‘Misbruik melden’.

Meer info

Deze conversatie is gearchiveerd. Stel een nieuwe vraag als u hulp nodig hebt.

I have a url replacemnt issue which brings up a bogus virus alert. Can you help ?

  • 2 antwoorden
  • 1 heeft dit probleem
  • 2 weergaven
  • Laatste antwoord van FredMcD

tstiebler
tstiebler
more options

At random times a url is being substituted for my home page url (my.xfinity.com). It brings up a bogus virus alert claiming to be from Microsoft, saying I should call a phone number (sorry, i didn't save the phone number). I have tried running Avast, Super Anti-Spyware and Malware Bytes scans but the 'alert' message eventually comes back again. The following urls were in history around the time of the last occurrence: http://security-risk-013x1aw04.stream/guest/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://server2.cptrackswl.com/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://9tevj.redirectvoluum.com/redirect?target=BASE64aHR0cDovL3NlcnZlcjIuY3B0cmFja3N3bC5jb20vP2E9QVomcGFnZXg9MTMmczE9ZXFZU09OanZRck85czVTOTY4ZWJPdWdoU2JFSW56eTUzSG1GV1RsWUhOS0IzZVpuVTgzNzZRamwwYy1lWks4dk1QVzREdkNrb1FLQ05ubVc3ZEtuV0ElMkMlMkMmb3M9V2luZG93cyZicm93c2VyPUZpcmVmb3gmaXNwPUNvbWNhc3QlMjBDYWJsZSUyMENvbW11bmljYXRpb25zJTIwaW5jLiZpcD03My4yNDcuMjA4LjE5Mg&ts=1501086425376&hash=SHnLNeTDkVOw2RF-YsftfMCSzDKb_mmqCLI4OD5jrcc&rm=DJ http://9tevj.voluumtrk.com/834e735f-85ea-4434-9e51-59b9535a84a9?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 http://hotspeedmovewild.com/index40A.php?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 https://publisherhub.plaimedia.com/nlp/index.php?subid=4444444&url=http://ypoha.voluumtrk.com/cb08dc7c-2774-4ee3-93d9-41bfa9ca05d8 https://volumtrk3.solidcpm.com/3318183.js?pubid=gumgum_11645&domain=my.xfinity.com&t=AwRZWkFeb3h1eWgFDkVCVEN2ZXd3aQYHRl9VXXt4c3t1ARcnJQ%3D%3D

At random times a url is being substituted for my home page url (my.xfinity.com). It brings up a bogus virus alert claiming to be from Microsoft, saying I should call a phone number (sorry, i didn't save the phone number). I have tried running Avast, Super Anti-Spyware and Malware Bytes scans but the 'alert' message eventually comes back again. The following urls were in history around the time of the last occurrence: http://security-risk-013x1aw04.stream/guest/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://server2.cptrackswl.com/?a=AZ&pagex=13&s1=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA%2C%2C&os=Windows&browser=Firefox&isp=Comcast%20Cable%20Communications%20inc.&ip=73.247.208.192 http://9tevj.redirectvoluum.com/redirect?target=BASE64aHR0cDovL3NlcnZlcjIuY3B0cmFja3N3bC5jb20vP2E9QVomcGFnZXg9MTMmczE9ZXFZU09OanZRck85czVTOTY4ZWJPdWdoU2JFSW56eTUzSG1GV1RsWUhOS0IzZVpuVTgzNzZRamwwYy1lWks4dk1QVzREdkNrb1FLQ05ubVc3ZEtuV0ElMkMlMkMmb3M9V2luZG93cyZicm93c2VyPUZpcmVmb3gmaXNwPUNvbWNhc3QlMjBDYWJsZSUyMENvbW11bmljYXRpb25zJTIwaW5jLiZpcD03My4yNDcuMjA4LjE5Mg&ts=1501086425376&hash=SHnLNeTDkVOw2RF-YsftfMCSzDKb_mmqCLI4OD5jrcc&rm=DJ http://9tevj.voluumtrk.com/834e735f-85ea-4434-9e51-59b9535a84a9?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 http://hotspeedmovewild.com/index40A.php?eps=eqYSONjvQrO9s5S968ebOughSbEInzy53HmFWTlYHNKB3eZnU8376Qjl0c-eZK8vMPW4DvCkoQKCNnmW7dKnWA,,&F=*&G=&H=0.035 https://publisherhub.plaimedia.com/nlp/index.php?subid=4444444&url=http://ypoha.voluumtrk.com/cb08dc7c-2774-4ee3-93d9-41bfa9ca05d8 https://volumtrk3.solidcpm.com/3318183.js?pubid=gumgum_11645&domain=my.xfinity.com&t=AwRZWkFeb3h1eWgFDkVCVEN2ZXd3aQYHRl9VXXt4c3t1ARcnJQ%3D%3D

Alle antwoorden (2)

philipp
philipp
  • Moderator
more options

hi, this is often a scam tactic that we suspect is coming form "malvertising" (=ads placed on legitimate websites that redirect you to this fraudulent message), so using an adblocking addon like https://addons.mozilla.org/firefox/addon/ublock-origin/ would help with that.

FredMcD
FredMcD
more options

But just to be sure,

Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.