Danger level 7
Type:

FF AntiVirus Save

Recently, we came across a fake alert targeted at Mozilla Firefox users; it is called FF AntiVirus Save. The researchers think the threat might be encountered by careless users who download setup files and other data available on torrent or other possibly malicious web pages. Unlike technical scams, FF AntiVirus Save asks to update the browser manually to make it more secure for you to search the Internet. In reality, the installer received from the fake alert could install a suspicious extension that may collect information related to your browsing habits or even display pop-ups, sponsored links, banners, and other doubtful advertisements from various third parties. Needless to say, we recommend against installing a tool that could bring you trouble. Thus, if you notice the false message asking you to update your Mozilla Firefox manually, you should get rid of it with no hesitation. To help users eliminate the warning faster, we have prepared removal instructions available at the end of this article.

As explained, at the beginning of the text, FF AntiVirus Save should be only after Mozilla Firefox users, although it is possible there could be versions for other browsers too; it is just we have not encountered them yet. Also, besides malicious installers on torrent and other file-sharing web pages the fake alert could get in when clicking doubtful pop-up ads, pressing fake download buttons, etc. Clearly, to keep away from similar threats, in the future, users should be more careful when browsing the Internet and double check content they interact with. As an extra precaution, researchers recommend choosing a reliable antimalware tool. It would stand guard and warn the user when something goes from. Do not forget to update it when it is possible. Updates are essential to such tools because new malicious software is being created all the time and to be able to recognize newer threats the antimalware tools need to be updated.

The victim receiving FF AntiVirus Save fake alert should be redirected to a site called guardedsearchingext.xyz. Users with more experience should quickly notice how odd it is to see a message from Mozilla Firefox on a site that has nothing to do with this product. Moreover, the website’s title does not make any sense as it contains words like “guarded searching” and some random letters (“ext”) at the end. Plus, the site’s extension .xyz is rather unusual too, especially for a legitimate company. Therefore, we believe these details alone should ring warning bells to any user who has at least some knowledge about computer scams and threats. Nevertheless, if you do not pay close attention to such details, you might realize something is wrong with this message from looking at the website displaying it. It has a blue background, a Mozilla Firefox logo on top and a warning saying “Firefox requires a manual update” a bit below it. You might notice a sentence with a grammatical mistake as the first letter of word “Internet” is written in lowercase. The fact, it asks for a manual update is extremely irregular too.

Another thing that may catch your eye is the fact your browser might stop you from installing FF AntiVirus Save fake alert’s suggested software if you click the installation button. Besides, instead of update, the installation button places a new extension on user’s browser. Our researchers say, such a tool could be used to collect information like search keywords, clicked ads, visited web pages, and so on. Later on, such data might be analyzed to create targeted advertising and could be shared with unknown third parties. What’s more, as said earlier if FF AntiVirus Save installed extensions shows any advertising content it is possible it may come from malicious sources, which means clicking it could endanger the system. Under such circumstances, we advise users not to waste any time with this fake alert and get rid of it before anything bad happens. To eliminate it manually you could use the removal instructions available below. Plus, it might be a good idea to scan the system with a reliable antimalware tool to see if there are no other suspicious or possibly malicious data on the computer.

Remove FF AntiVirus Save

  1. Press F11 to exit the full-screen mode.
  2. Try to close the browser normally (by clicking the X button).
  3. Provided it cannot be closed tap Ctrl+Alt+Delete.
  4. Pick Task Manager and choose the Processes tab.
  5. Identify your browser’s process.
  6. Select it and click End Task.
  7. Exit the Task Manager.

Restore your browser

Internet Explorer

  1. Tap Alt+X and open Internet Options.
  2. Open the Advanced tab and click Reset.
  3. Choose Delete personal settings.
  4. Select Reset again and tap Close.

Mozilla Firefox

  1. Click the Help icon.
  2. Choose Troubleshooting information.
  3. Select Refresh Firefox.
  4. Click Refresh Firefox again and press Finish.

Google Chrome

  1. Tap Alt+F and go to Settings.
  2. Scroll below and choose Advanced.
  3. Slide down again and press Reset.
  4. Click the Reset button.
Download Spyware Removal Tool to Remove* FF AntiVirus Save
  • Quick & tested solution for FF AntiVirus Save removal.
  • 100% Free Scan for Windows
disclaimer
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.