Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Hierdie gesprek is in die argief. Vra asseblief 'n nuwe vraag as jy hulp nodig het.

Browser Hijack? New tab to hijacked Yahoo/AT&T email login opens when booting Mozilla

  • 2 antwoorde
  • 12 hierdie probleem
  • 1 view
  • Laaste antwoord deur logston

logston
logston
more options

When I boot Mozilla two tabs open rather than one. The second tab is to a hijacked email login page asking for my Yahoo/AT&T email password. This second tab appears every time I boot Mozilla and links to the webpage below. I run Windows XP and have the McAfee suite of security programs that comes with AT&T DSL and have changed my password after it was hacked, but I want to stop the second hijacked tab from appearing, for fear I may mistakenly login there again and disclose my new email password.

https://loginprodx.att.net/commonLogin/igate_edam/controller.do?TAM_OP=login&USERNAME=unauthenticated&ERROR_CODE=0x00000000&ERROR_TEXT=HPDBA0521I%20%20%20Successful%20completion&METHOD=GET&URL=%2FFIM%2Fsps%2FATTidp%2Fsaml20%2Flogininitial%3FRequestBinding%3DHTTPPost%26PartnerId%3Dhttps%3A%2F%2Flogin.yahoo.com%2Fsaml%2F2.0%2Fatt%26Target%3Dhttp%253a%2F%2Fmy.yahoo.com%253f.lts%3D1341414164%3Ftucd567%3Dw&REFERER=&HOSTNAME=loginprodx.att.net&AUTHNLEVEL=&FAILREASON=&PROTOCOL=https&OLDSESSION=

When I boot Mozilla two tabs open rather than one. The second tab is to a hijacked email login page asking for my Yahoo/AT&T email password. This second tab appears every time I boot Mozilla and links to the webpage below. I run Windows XP and have the McAfee suite of security programs that comes with AT&T DSL and have changed my password after it was hacked, but I want to stop the second hijacked tab from appearing, for fear I may mistakenly login there again and disclose my new email password. https://loginprodx.att.net/commonLogin/igate_edam/controller.do?TAM_OP=login&USERNAME=unauthenticated&ERROR_CODE=0x00000000&ERROR_TEXT=HPDBA0521I%20%20%20Successful%20completion&METHOD=GET&URL=%2FFIM%2Fsps%2FATTidp%2Fsaml20%2Flogininitial%3FRequestBinding%3DHTTPPost%26PartnerId%3Dhttps%3A%2F%2Flogin.yahoo.com%2Fsaml%2F2.0%2Fatt%26Target%3Dhttp%253a%2F%2Fmy.yahoo.com%253f.lts%3D1341414164%3Ftucd567%3Dw&REFERER=&HOSTNAME=loginprodx.att.net&AUTHNLEVEL=&FAILREASON=&PROTOCOL=https&OLDSESSION=

All Replies (2)

cor-el
cor-el
  • Top 25 Contributor
  • Moderator
more options

Check the home page setting:

It is possible that there is a problem with the files sessionstore.js and sessionstore.bak in the Firefox Profile Folder.

Delete the sessionstore.js file and possible sessionstore-##.js files with a number and sessionstore.bak in the Firefox Profile Folder.

Deleting sessionstore.js will cause App Tabs and Tab Groups and open and closed (undo) tabs to get lost, so you will have to create them again (make a note or bookmark them).

logston
logston Vraag-eienaar
more options

Many thanks for your reply. I deleted all of the sessionstore files I could find, but perhaps there are others that are hidden that I would have missed. I also made sure that I have only one home page, which is my legitimate Yahoo AT&T email login page. Unfortunately, the second tab with the "hacked" Yahoo AT&T email login page continues to appear every time I boot Mozilla.

I tried the Blocksite add-on for Mozilla and entered the web address of the second hacked tab, but when I re-booted Mozilla it caused problems with the loading of my legitimate Yahoo AT&T email login page. So I am back where I started.