A question about a Firefox popup

[Nelson35]

I keep getting this popup (see pic) when I'm at zynga dot Com playing Farmvile 2. I'll be in the middle of a game and it will just load up out of the blue. I already have the latest version of Firefox installed.

 

[ignatzatsonic]

I've been using Firefox for 6 or 8 years and have never had that popup---or any popup at all, as far as I can recall.

However, you are not alone. You might want to wade through these links:

https://www.google.com/search?hl=en..._occt=any&safe=images&as_filetype=&as_rights=

 

[Barman58]

Zinga dot Com is a known source for malware - if you visit you have to expect these problems This is not a Mozilla screen but a malware produced one following any links here is not something you want to do

 

[MoxieMomma]

Hi:

Yep.
I agree with @Barman58.

Whatever you do, do not click on any links.
If you have done so and/or to be extra careful, especially if you are seeing similar popups under other circumstances, you might want to get a bit of expert help checking the system for malware.
Gaming sites and other "P2P" services are a good way to get infected.
I don't know what you're running for real-time security.
So you may want to beef up your security defenses.

MM

 

[Layback Bear]

Every now and then I get one of those popups using Firefox.
I just close them. I have never ticked to update because I know my Firefox is already updated.
I got those popups from the Windstream (my I.S.P) website for about a week. I presume they fixed it because it no longer pops up.
I have run all kinds of scans afterwards and found nothing; but I do recommend running security scans to make sure.

Jack

 

[Nelson35]

Thanks everybody for the advice. I've never clicked on the link either cause I knew I was up to date and it just looked fishy. I actually e-mailed zynga twice and showed them the screen and they told me to either update my browser or try using Chrome.

 

[Callender]

The domain shown in your screenshot doesn't seem to exist. Personally I would never click those download buttons but instead copy the URL into a text document to see what it is. Additionally use "Inspect Element" to get the link.

Test pop-up blocker here:

Test your pop-up blocker here.

 

[ignatzatsonic]

Thanks for that link, Callender.

I'm using Pale Moon, a fork of Firefox. It passed about 25 of the 27 tests at your link. I'm wondering if any browser will pass all 27?

 

[UsernameIssues]

The domain shown in your screenshot doesn't seem to exist.

Which begs the question of how the website was displayed.

Most of the ".net" URLs, in these recent threads did not exist on the day that the post was made:

https://support.mozilla.org/en-US/questions/1129758

https://community.norton.com/en/forums/fake-urgent-update-page-appears-daily-firefox-despite-nis

Some crawler seems to have harvested the URLs and registered some of the domains within a day or two.

 

[Callender]

Thanks for that link, Callender.

I'm using Pale Moon, a fork of Firefox. It passed about 25 of the 27 tests at your link. I'm wondering if any browser will pass all 27?

Actually none of my browser pass 7 and 8 but using Cyberfox tweaked quite a bit and with Noscript security suite and another cross browser program (can't mention the program as forum rules don't allow discussion of such software) - it does indeed pass all tests.

If you like try installing the Noscript Security Suite and enable/ disable on an as and whenn needed basis. In other words there's mostly no need to worry when browsing trusted sites unless they've been compromised by malicious adverts/ flash banners.

https://addons.mozilla.org/en-US/firefox/addon/noscript/

Can simply allow scripts for trusted domains to make things a little easier.

 

[ignatzatsonic]

Can simply allow scripts for trusted domains to make things a little easier.

I have No Script installed, but I'm not sure I have it configured correctly.

How can I get it to "allow scripts for trusted domains"?

Any other config tips appreciated.

I'm not sure I'm using it right. I constantly find myself poking the red S to "temporarily allow all this page" when I want to view something it's blocking. I don't make it a practice to whitelist individual sites.

As an aside---with the default config on No Script, the only tests I fail are 12 and 22. Not sure why I pass 7 and 8 and you don't.

 

[Nelson35]

The domain shown in your screenshot doesn't seem to exist. Personally I would never click those download buttons but instead copy the URL into a text document to see what it is. Additionally use "Inspect Element" to get the link.

Test pop-up blocker here:

Test your pop-up blocker here.

Hey thanks for that link. Mine passed all but a couple.

 

[Nelson35]

The domain shown in your screenshot doesn't seem to exist.

Which begs the question of how the website was displayed.

Most of the ".net" URLs, in these recent threads did not exist on the day that the post was made:

https://support.mozilla.org/en-US/questions/1129758

https://community.norton.com/en/forums/fake-urgent-update-page-appears-daily-firefox-despite-nis

Some crawler seems to have harvested the URLs and registered some of the domains within a day or two.

That is a good question. I don't have to do anything either, the game can just be sitting there and a new page will load up like the one I posted. There is also another little pop up window that opens with something about java script in it which I didn't catch in this pic. Here it is (I thought I had deleted it, but it was still in my junk folder).

 

[Callender]

Can simply allow scripts for trusted domains to make things a little easier.

I have No Script installed, but I'm not sure I have it configured correctly. How can I get it to "allow scripts for trusted domains"?

Well you have to define trusted domains on a site by site basis. Once trusted they're added to the whitelist but can also be removed from it. However if you don't wan't to whitelist sites then that's no use.

I'm not sure I'm using it right. I constantly find myself poking the red S to "temporarily allow all this page" when I want to view something it's blocking. I don't make it a practice to whitelist individual sites. As an aside---with the default config on No Script, the only tests I fail are 12 and 22. Not sure why I pass 7 and 8 and you don't.

I meant that I don't pass 7 & 8 with Noscript disabled.

Any other config tips appreciated.

Check out the user.js that can be downloaded here:

A comprehensive list of Firefox privacy and security settings - gHacks Tech News

You can inspect the contents using your text editor and choose what to apply.

Then there's ConfigFox (works with non default profiles/ firefox variants)

Note changes made to profile via user.js will be written to prefs.js unless configured not to via ConfigFox > View > Preferences.

Obviously user.js and prefs.js need to be backed up before messing about or ideally create a full profile backup.

 

[UsernameIssues]

The domain shown in your screenshot doesn't seem to exist.

Which begs the question of how the website was displayed.

Most of the ".net" URLs, in these recent threads did not exist on the day that the post was made:

https://support.mozilla.org/en-US/questions/1129758

https://community.norton.com/en/forums/fake-urgent-update-page-appears-daily-firefox-despite-nis

Some crawler seems to have harvested the URLs and registered some of the domains within a day or two.

That is a good question. I don't have to do anything either, the game can just be sitting there and a new page will load up like the one I posted. There is also another little pop up window that opens with something about java script in it which I didn't catch in this pic. Here it is (I thought I had deleted it, but it was still in my junk folder).

That same JS file is mentioned in one of the threads that I linked to.
I would not be too happy that this website can be displayed. The website could do damage to your computer - even if you don't click on any links.