This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Is this an occurance of malicious software??

  • 4 replies
  • 17 have this problem
  • 2 views
  • Last reply by Techn1976

mattymo
mattymo
more options

During a google image search, I clicked on an image result, and once the image loaded my browser was re-directed to http://firefoxparts.co.cc/ the page seemed suspect as the grammar on the tab was poor. "firefox needs update" The page advises that Flash needs updating and tries to get you to DL a 204 kb binary file called firefox-update.exe from the above url.

Just wanted to report it as I believe it may be a source of malicious software. Firefox usually brings updates through launch not during google image search.


I have also reported this as web forgery under the help option in firefox.

During a google image search, I clicked on an image result, and once the image loaded my browser was re-directed to http://firefoxparts.co.cc/ the page seemed suspect as the grammar on the tab was poor. "firefox needs update" The page advises that Flash needs updating and tries to get you to DL a 204 kb binary file called firefox-update.exe from the above url. Just wanted to report it as I believe it may be a source of malicious software. Firefox usually brings updates through launch not during google image search. I have also reported this as web forgery under the help option in firefox.

All Replies (4)

rjohnson19
rjohnson19
more options

Yes, this is a very common forgery of the Firefox update page, don't download or run any executables from that page.

You can report these pages yourself: When on the page, use Help -> Report Web Forgery and fill out the form to report the attack site to Google.

Thanks for the report. The original page with the image you wanted was probably compromised to redirect to the malicious forgery.

CAD_guy
CAD_guy
more options

I have the same problem as mattymo above. My redirect took me to http://ffsupport.uni.cc/ and I noticed (too late I'm afraid) the bad grammar - "firefox needs update" - as well.

I was redirected to this site when I Googled "world time zones" and clicked on one of the map images (http://www.buytitleistgolfballs.com/affiliate_country.php?t=the-official-world-time-clock-time-zone ).

the-edmeister
the-edmeister
  • Moderator
more options

You didn't install or run that firefox-update.exe file?

Techn1976
Techn1976
more options

i got the same problem here...

DONT install...

http://www.google.co.uk/search?hl=&q=January+2011&sourceid=navclient-ff&rlz=1B3GGHP_en-GBGB412&ie=UTF-8

by clicking on the 4th pic...


from ff i got this

http://www.google.co.uk/imgres?imgurl=http://www.printable2011calendar.com/samples/2011-01.png&imgrefurl=http://www.necroford.ru/forum/Themes/default/languages/Tags.english-win1251.php%3Fnews%3Djanuary-2011-calendar&h=281&w=364&sz=16&tbnid=voYXberqL9Vt1M:&tbnh=93&tbnw=121&prev=/images%3Fq%3DJanuary%2B2011&zoom=1&q=January+2011&hl=&usg=__jxVIvZASyBR9M1xLHX_YsCGaSHg=&sa=X&ei=yf4cTeqRBoW7hAeR24i3Dg&ved=0CC4Q9QEwBA

anf from ie, was redirected to:

http://94.244.80.117/index.php?2pI3b=VND28MM6R3SZ7M0Z7&8Bk=9BI8G969&RT58=PAVeKUw7UBkuXT4iXT5FQ&k7L=FtMw0id1UHIC&C2Z=Q3XJ33B0&Z2=lA8ViQ2CwtsAWR%2BGHBiGwQAejdmK&Hw04n=UW&g1=wgpZmpFYC0AYlJ8VQlSbl&F71M=TJ6BU560CKWW9&6A2u=FG&Q4PF4=Y9SO5T7N716Y2TV8GC46BDXQGU8JOESEX99LBJzROSBIkUi5D&o6=dgNX8zDSl5fGp3Ol1FfXB3dwUMe34EYkc2KUM%3D#8

Modified by Techn1976