stargirl29

yes, are you still with me? i sent the website to you in a PM last wednesday.

hi, no, that URL isn't the one for the site that's in question. that must be where the popup originates from. i hadn't even noticed that when i made the screenshot. i've been trying to get the popup to appear again but unfortunately it's sporadic in it's appearance. it only appears if i've not visited the site in a while. or if one is a new visitor. is it possible that i can send you the link to the website in a private message? i'd rather not post the website here since it's not mine and i don't want others to think of it negatively because of the popups.

Hi, i guess you did not read all of my comments. i posted that article on monday for you. it's not only a firefox issue. it also happens in Chrome and if i'm on my ipad or desktop computer.

hi, no it is not a problem with syncing. i don't sync my devices. and it happens with other people who visit the website as well. it is a scam problem. my question is, is there a way to prevent it. the website owner has assured me that his website has been scanned and doesn't contain any virusus or malware.

Hi, i have run the fix and here is the fixlog. however the problem still persists when i visit the website in question. i believe the problem is a web based problem as i stated earlier. here is a link that explains the problem but i guess there's no way to prevent it? all visitors to the particular website receive the message, not just me. i can send the link to the website in private if that will help see what's going on. i don't want to post the website in public to give it negative advertising. https://www.onlinethreatalerts.com/article/2018/4/29/beware-of-google-free-samsung-galaxy-s9-visitor-browser-opinion-survey-scam/ Fixlog.txt

Hi Nasdaq, here are the two files. I'm sorry it took me a little longer than anticipated. Addition.txt FRST.txt

hi, thank you. i'm sorry i didn't get a chance to reply here earlier. i will run the scan and post the results here tomorrow. didn't have time to do it today.

Hi, i am getting an "i won something" popup (on chrome on ipad) or an "opinion survey" on my desktop computer on firefox when i visit one particular website. i am only asking here because i am concerned that my desktop computer might have gotten a virus or adware from this website. i'm not so concerned about my ipad for now. i realize that for ipad questions i need to post in a different section. besides determining if my computer is infected, i would like to know if this problem is with the website that's infected, or if it's a browser/scam issue. i thought it was simply a browser issue with scammers on my ipad until i got the opinion survey on firefox on my desktop computer as well. i'm running Windows 7, 64 bit. firefox browser. i have run malwarebytes on my computer, and no threats were found. the owner of the website has assured me that he has scanned his website and found no threats on the website either. while i think the problem is browser related, i would like to know for sure. it's becoming such an issue that people are no longer wanting to visit the website when i post a link to it. the website is owned by a friend of mine, and he has said that he scanned the website itself and found nothing malicious. i've attached a screenshot of the popup i'm getting on my desktop computer on firefox. sorry it's in Dutch, but it says "Dear Firefox user, you are the lucky visitor for today. fill in this short survey and as a thank you, we give you a chance to win a samsung galaxy S9!

yeah i'm still around. but i haven't done anything. i'm just using the google servers for now because i have no other ideas what i should do.

hi! i apologize for the delay in replying.... i contacted norton support via their chat. i only had a chance to do that yesterday. after going through two agents at two different times i was connected to their virus removal department. but the agent there didn't think it was a virus. he said the problem occurs when the DNS on the computer isn't configured correctly. now i still don't know why my DNS isn't configured correctly, when i didn't change anything on it. but he said that using the google DNS or my husband's DNS should be fine. i still don't know why or how mine isn't configured correctly though! one step closer to solving it. but i guess it wasn't anything to do with malware after all? or could malware have caused something like that to happen? coincidentally i looked up DNS and found DNS Advantage listed on this page on how to change a computer's DNS https://www.computerhope.com/issues/ch001161.htm

hi, yes, still here. sorry just had a busy weekend and haven't had a chance to contact norton yet. i'll try to do that tomorrow.

looking at your previous comment, is it my ISP DNS that's the problem or Norton DNS server causing the issue? is there a way to get a new IP address from Norton Connect Safe or reset them?

hi, i contacted my internet service provider. they suggested resetting the modem to factory settings, which i did. but that doesn't seem to have fixed the problem. they said they didn't have any other solutions for the problem and suggested i take the computer to a repair shop. before i do that, did you have any other suggestions?

Ziggo is my ISP but those aren't the numbers in the DNS settings when i changed to the google server. and what i've changed back to today. i wanted to test to see if i would have the problems again and of course the problem started as soon as i changed the DNS address. mine is set to primary 199.85.126.10 and alternate 199.85.127.10

ask who, my internet service provider or norton? can the dns server really be an issue if my husband's computer upstairs on the same wifi network works with no issues?

well i guess that stopped the problem as far as i can tell, unless it spontaneously comes back tomorrow. but now what should i do? i don't want to be on the google dns forever. i should be able to use my own ip. does this help figure out what's causing or caused the problem?

i've changed it to the google dns server. it does seem a bit better. though i think i need to use it for a while this afternoon to make sure. i was even able to download the TFC and run it.

i had to type in certmgr.msc just certmgr didn't work. here's the screenshots. i included the untrusted ones too.

i've noticed one other thing this afternoon. when i clicked on "advanced" at the bottom when i get the insecure connection message, i see the full text that says: "www.facebook.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. The certificate is only valid for search.dnsadvantage.com. Error code: SEC_ERROR_UNKNOWN_ISSUER" is there such a thing as search. dnsadvantage.com virus? i've found a few things suggesting such on google. btw, i seem to be having increased problems with the message today and images not showing....it's odd that it seems so sporadic. some days better than others. i even got the malicious content warning when going to youtube today. sorry still haven't tried getting that blue screen again...i wanted to get this project done today first in case something goes horribly wrong when i try again.

sorry, been working on a project, haven't had a chance to try again. but i will later this afternoon. in the meantime, i did find this. is this a possible solution? it looked like an older article though, from 2016 though, so i wasn't sure... https://knowledge.symantec.com/kb/index?page=content&id=SO5275

i got the blue screen message when trying to download it (with norton still on). it was right after norton told me it wasn't safe. i'm beginning to wonder if it wouldn't be easier just to dona clean install of Windows at tjis point and start from scratch lol.

sorry i had a class yesterday so i didn't have time to try again... today just for the heck of it i tried downloading it normally without disabling norton again... i got the same message, then i got a blue screen. i was going to take a picture of the blue screen but it went away before i could. blue screen of death? it said something about preparing files for crash dump but that's all i had time to read on it... then when the computer restarted, i got the following message about Dropbox:

i couldn't do the scan earlier at the time you posted the Temp File cleaner because it was dinner time. i finally got back on the computer just now, but i didn't run the scan first thing. so i don't know if i messed anything up. but all day everything had been working good with facebook but now i get that insecure message connection again. and i tried downloading the temp file cleaner and i get a message that norton has blocked a suspicious site... see screenshots attached.

surprisingly it found 7 more threats... here's the logs... JRT.txt AdwCleaner[C0].txt

i just checked. the computer time is fine. (it was 2:36pm here when i checked). the same time showed on both places. and it's selected to "this computer is set to automatically synchronize with 'time.windows.com'". here's a screenshot of the BIOS.