This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

198.7.61.117, Firefox.exe.

breremk
breremk
more options

I recently installed Malwarebytes Anti-malware software. Whenever I access Firefox, I get the message that Malewarebytes blocked access to a potentially malicious website identified as 198.6.61.117 Firefox.exe. What is this and is it harmful. I do not notice any change to the way Firefox performs.

I recently installed Malwarebytes Anti-malware software. Whenever I access Firefox, I get the message that Malewarebytes blocked access to a potentially malicious website identified as 198.6.61.117 Firefox.exe. What is this and is it harmful. I do not notice any change to the way Firefox performs.

All Replies (2)

RickHoekstra1997
RickHoekstra1997
more options

maby turn you add-on off at the firefox menu

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

Well, that's a very different story between those two IP addresses.

198.6.61.117 is part of a range assigned to Symantec Corporation, publisher of Norton security products. Unlikely to be dangerous. http://whois.arin.net/rest/net/NET-198-6-32-0-1/pft

198.7.61.117 is part of a range assigned to Leaseweb US, which could be hosting a wide range of companies/software. http://whois.arin.net/rest/net/NET-198-7-56-0-1/pft

The latter seems to host px.pluginhandler.info, which is implicated in adware that may ride along with free software. KEEP IT BLOCKED.

Then check out this past thread for more information on the struggle it may be to root it out if you notice adware or malware symptoms: i want to get rid of this thing (http://px.pluginhandler.info/x1) it appears obligatory on every site i log on.