Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Kiki61

macrumors member
Original poster
Aug 19, 2012
41
3
A couple of days ago, I started getting a popup screen that said " Do you want to allow downloads on XXXXXXX.safeframe.google.com."

I've seen these before, but usually it has information pertinent to the site I'm visiting. Needless to say, I immediately quit Safari.

However tonight, it happened again, so as before I quit Safari, but this time the Quit command was stopped by a warning popup asking if I still wanted to quit, as my computer was in the process of downloading an "F. txt.js" file. Of course, I said yes, and went to the download folder, and tossed the offending file into the trash, which I immediately deleted. Afterwards, I ran a Malwarebytes scan and it stated that it could not detect any malware present. After that, I started looking around the internet, and found that this appears to be an ongoing problem for many users, and that it appears to be a browser hijacker, but little information beyond that, especially in regards to any lingering effects.

Therefore, I was asking if anyone here had encountered it as well, and just how serious of a threat it might be, as well as what steps I need to take to remove it from my computer and prevent its recurrence.

Thanks.
 
Last edited:
  • Like
Reactions: Chung123
I started getting pop ups asking me if I want to download f.txt.js while browsing on my phone. It’s happened 3 times within the last week. Something to do with ios14? I also googled it and other people have been experiencing this as well. Don’t know what to do either.
 
  • Like
Reactions: Chung123
In my case, it was on my Mac, as I haven't seen it yet on my iPhone (fingers crossed).

Hopefully someone will have an answer.
 
Looks like another broken Google ad is the culprit, it does not seem to be malware just a poorly coded ad on Google's advertising network.
 
  • Like
Reactions: Chung123
I had this browsing this site just now. Needless to say I disallowed Safari from downloading it.
 
Just had this twice on my Mac. It's an old Mac running High Sierra but still has Safari 13.1.2.

I noticed the download button in Safari was blue and clicking on it said, preparing to download f.txt.js I cancelled the downloads.
 
Just had it happened to me three more times, one of them being here as well.

Interestingly, the first few times I ran into it, it didn't try to download anything, but every time since then it has.
 
Last edited:
our adnetwork escalated it to Google. It’s affecting many sites and it’s up to Google to fix it, they’ve just been slow about it.
 
this is finally resolved. Google fixed it.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.