This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

i received a notice to upgrade firefox with this address in the url: http://firefoxfest.co.cc/#redirect. When i downloaded it, firefox didn't upgrade and the downloaded file disappeared. is this a legitimate firefox update url?

  • 4 replies
  • 8 have this problem
  • 1 view
  • Last reply by thejkaz

more options

I received a new tab saying: You're now running Firefox 3.6.7. (I checked afterward and I'm running 3.6.8)

For security reasons, we recommend downloading the latest and greatest version. This is the url of the page: hxxp://firefoxfest.co.cc/#redirect. I clicked on the update button and downloaded the file. I ran the file but nothing happened like it usually does that firefox needed to restart and when i looked for the file that I downloaded, it was gone from the folder I downloaded it to. I haven't noticed this happening in past updates. I am wondering if this is a bogus message and by downloading that file, I now have a trojan on my computer or something. Kaspersky 2010 didn't register any virus but then I notice it had been turned off somehow.

I received a new tab saying: You're now running Firefox 3.6.7. (I checked afterward and I'm running 3.6.8) For security reasons, we recommend downloading the latest and greatest version. This is the url of the page: <del>hxxp://firefoxfest.co.cc/#redirect</del>. I clicked on the update button and downloaded the file. I ran the file but nothing happened like it usually does that firefox needed to restart and when i looked for the file that I downloaded, it was gone from the folder I downloaded it to. I haven't noticed this happening in past updates. I am wondering if this is a bogus message and by downloading that file, I now have a trojan on my computer or something. Kaspersky 2010 didn't register any virus but then I notice it had been turned off somehow.

Modified by cor-el

All Replies (4)

more options

Sorry, but that sounds very bad. Did it look like this one? http://www.f-secure.com/weblog/archives/00001997.html

If Kaspersky is not working, or even if it is, try these tools:

HouseCall : http://housecall.trendmicro.com/

Malwarebytes Anti-malware : http://www.malwarebytes.org/mbam.php

SUPERAntiSpyware : http://www.superantispyware.com/

Fingers crossed that you can clean out whatever you ran.

more options

I also had the same. Was talking on the phone, did not pay much attention and to be honest the page is really well manufactured, so entered admin password and boom. In few sec java started and triggered my suspect, so I checked the processes running and did see a lot of executables. I understood immediately what happened (felt a fool), switched off wireless and made a clean install. In all this my super updated symantec endpoint protection did not detect anything. And no way to clean the system as the virus disabled somehow the antivirus.

more options

Do another virus/spywares scan with Windows Safe Mode. Usually, it can detect virus that were not able to detect or delete in Windows Normal Mode.

more options

Yes, Malware Bytes works in safe mode. It is best to go into safe mode with networking so you can update to the latest database version prior to scan. It can also be installed in safe mode as well. I use it quite often to resolve virus/malware issues for customers.