[SOLVED]virus attack or Spam messages from firefox

Mona5 · 2024-03-16 07:00:09

Hello Guys Sorry to bother you i am newbie and don't know how to react to this and i don't know where to start sorry to make a new topic of it.

i get weird spam notification from my firefox browser it's very on my nerves when i check it from notification logs it's says from firefox it's started from yesterday between 10 or 11 AM.

but I think maybe it's a virus or malware i don't know which is which but i get this annoying message that is very wired and i don't know how to track it's origin if it's a virus.

I installed clamav antivirus (with it's (default) original malware detection database with freshclam command) from arch linux packages before this happen but where to search virus how to take care of it when i find it
and it's possible one of site i opened got under attack (which i think it's not the case because i only have arch forums open and i get this spams) (however one of site i liked and have it open entire of time as pin in firefox when i get that notification was down like it was under some kind of attack and ping or whois traceroute tracepath (it told me the site was unaccessable or something) was working when i use them for that specific site and the notifications i get some of them was against that site ideology but know i get it even only have arch wiki open in firefox without any pin tab or something)
that site have many enemy from inside and outside of my country.

I think even it's notification might not came from firefox ( i only have ADguard ad blocker as a plugin in my firefox).
maybe a virus send this notification with firefox name i don't know how to treat it where to start how to track it and how to remove it maybe it's from the attack on that site i don't know a thing about this.

the notification that show to me are system notifications have a button named "Activate"(and it's not active means not clickable) on xfce4 environment

and messages like "what is this"(with a weird fish picture or without it) "8 pair of movies" "Instant nightmare fuel" "FREE VALORANT SKIN /use tenz2024" and some of them are anti-government message and some of them are to buy or rent a villa in my country and etc (when i have access to internet).

when i go to notification Settings in applications tab it's show "Firefox web browser "with 26(now 27) number of i believe spam or virus notification.

i used pacman -Suy for update all my package and after i installed some new packages
the new package i installed are: obsidian (mind mapping program with some plugins with needed packages like electron28, c-ares), Zsh , pv , wget , clamav , arch-install-scripts , freeplane

after that that i start to have problem with this spams. i use ufw and Gufw for firewall( i don't know how to use firewalls i use Gufw to block incoming network).

============================================================================================================================
a new thing I find that when i closed firefox there was no spam

after i open the firefox it's start giving spam notifications again

Last edited by Mona5 (2024-03-17 06:03:41)

Lone_Wolf · 2024-03-16 10:38:38

Sounds like it could be push notifications.
goto Edit > Settings > Privacy & Security > permissions > notfications > settings and check the sites listed there.

Mona5 · 2024-03-17 06:03:04

Hello Lone_Wolf
push notifications?
I read something about it inside Firefox but i didn't think that would be it because i rarely give site allowed permission for notification
I went there

Lone_Wolf wrote:

goto Edit > Settings > Privacy & Security > permissions > notfications > settings

and a website that had access to to my notifications

(the site was wowroms.com Please don't ask why i was there short story that archlinux gave me so much than windows that my greed consumed me and i wanted for more)

Thanks for your helps at first i thought that it was a virus attack i didn't know some site can send notification even if they aren't open
I went to see the site but site was not accessible with my browser but when I think about it I remember I had access to the site before the spams.it's server is up and running and give ping to me but a blank (html) body is showed to me i used that site before but now it seems like i don't have access to it anymore.and even when it's notifications is allowed it won't give me spams notification seems like the site is completely down.

I checked with sitechecker.pro to see if site is running or not it gave me that the site is down.it's output is down here

Web Site URL: https://wowroms.com/

• Service status: Down
• Ip address: -
• Response time: -
• Response code: 500

Sorry for trouble Lone_Wolf if i had searched enough in internet and kept my cool you didn't have to bother answering my silly post.

Thank You very much Lone_Wolf

Arch Linux

#1 2024-03-16 07:00:09

[SOLVED]virus attack or Spam messages from firefox

#2 2024-03-16 10:38:38

Re: [SOLVED]virus attack or Spam messages from firefox

#3 2024-03-17 06:03:04

Re: [SOLVED]virus attack or Spam messages from firefox

Board footer