Hilfe durchsuchen

Vorsicht vor Support-Betrug: Wir fordern Sie niemals auf, eine Telefonnummer anzurufen, eine SMS an eine Telefonnummer zu senden oder persönliche Daten preiszugeben. Bitte melden Sie verdächtige Aktivitäten über die Funktion „Missbrauch melden“.

Learn More

Issue is infection of FireFox for access to my BANK, scanning does not find any issue.

  • 29 Antworten
  • 3 haben dieses Problem
  • 5 Aufrufe
  • Letzte Antwort von Shadow110

more options

Accessed my bank on line as usual for about the last fifteen (15) YEARS and after entering my access code and password plus a security question, with all ICONS and clickable items to give me access another LOGIN box came up for another login with none of the icons required were shown as before. They all were shown as a vertical rectangle with an X inside, I halted there and removed that webpage. Took my desktop off line to start to investigate my system as well as many scans including RootKit scans finding NOTHING. Very security conscious with over 25 years of not ever having this issue nor anything like this.

Before retirement was the Manager of a small/medium sized computer system for the Federal Government with approximately eighty (80) million dollars worth of Test Equipment for Calibration and maintenance for the U.S. Air Force World Wide at our Type II PMEL (Precision Measurement Equipment Laboratory) for about ten (10) years.

I know this is a problem on my desktop as I also have a laptop and it works as they both should, got my access to my bank and took care of business. To keep this as short as possible will await any questions you may want to ask. One last pont, am not schooled in any knowledge that I have, just from the "shool-of-hard-knocks" starting out working in BTOS (Boroughs Task Operating System) and what knowledge gained from that work was transferred over to Microsoft's DOS and Windows.

TIA, CU L8R, NTLS "LoneWanderer" Win7 Professional SP1 64bit (desktop) Dell Inspiron 960, Win7 Home Premium SP1 64 bit (laptop) Dell 1564 AND have had several system that were built up by some of the local Computer shops running DOS3,3 through my current system. Journeyman Electronics Technician with over 65 years experience.

Accessed my bank on line as usual for about the last fifteen (15) YEARS and after entering my access code and password plus a security question, with all ICONS and clickable items to give me access another LOGIN box came up for another login with none of the icons required were shown as before. They all were shown as a vertical rectangle with an X inside, I halted there and removed that webpage. Took my desktop off line to start to investigate my system as well as many scans including RootKit scans finding NOTHING. Very security conscious with over 25 years of not ever having this issue nor anything like this. Before retirement was the Manager of a small/medium sized computer system for the Federal Government with approximately eighty (80) million dollars worth of Test Equipment for Calibration and maintenance for the U.S. Air Force World Wide at our Type II PMEL (Precision Measurement Equipment Laboratory) for about ten (10) years. I know this is a problem on my desktop as I also have a laptop and it works as they both should, got my access to my bank and took care of business. To keep this as short as possible will await any questions you may want to ask. One last pont, am not schooled in any knowledge that I have, just from the "shool-of-hard-knocks" starting out working in BTOS (Boroughs Task Operating System) and what knowledge gained from that work was transferred over to Microsoft's DOS and Windows. TIA, CU L8R, NTLS "LoneWanderer" Win7 Professional SP1 64bit (desktop) Dell Inspiron 960, Win7 Home Premium SP1 64 bit (laptop) Dell 1564 AND have had several system that were built up by some of the local Computer shops running DOS3,3 through my current system. Journeyman Electronics Technician with over 65 years experience.

Alle Antworten (20)

more options

Just to make sure your system is safe,

You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.


Many site issues can be caused by corrupt cookies or cache.

  • Clear the Cache and
  • Remove Cookies

Warning ! ! This will log you out of sites you're logged in to. You may also lose any settings for that website.

Type about:preferences<enter> in the address bar.

  • Cookies; Select Privacy. Under History, select

Firefox will Use Custom Settings. Press the button on the right side called Show Cookies. Use the search bar to look for the site. Note; There may be more than one entry. Remove All of them.

  • Cache; Select Advanced > Network.

[v57+] Select Privacy. Across from Cached Web Content, Press Clear Now.

If there is still a problem, Start Firefox in Safe Mode https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode

A small dialog should appear. Click Start In Safe Mode (not Refresh). Did this help?

While you are in safe mode;

Try disabling graphics hardware acceleration in Firefox. Since this feature was added to Firefox it has gradually improved but there are still a few glitches.

How to disable Hardware Acceleration {web link}

more options

FredMcD, Excuse me please, I know you are not aware of my abilities on these systems. Am not trained by any schooling, just a curious animal that wants to learn all that is possible. In my bio on your site is a very brief background on myself. One point that is not there is my training and education on Electronics starts at about the age of five (5) and my instructor is my Father. At about the age of ten (10) built my own battery operated radio, no case just the bare frame (wood) inclucing glass tubes. There is more, not necessary.

I have known that not any single anti virus, malware, et ceteras, cannot scan for ALL possible programs that are out there. The more scanners and a wide variety will do a better job and come closer to the 100% mark. I use µSoft's (symbol "mu" for Micro) Security Essentials, MalwarbiteeAntiMalware Premium, SpyBotSearch & Destroy, TrendMicro's HouseCall AND two (2) fire walls, and some other that monitor any activity and can blocvk selected software by me. I know this is not recommended, it is my system and has done wonders for my system for over 25 years. Also work within 'about:config' often and find that to be very helpful. Have not worked with specific areas such as your suggestion, will do what you advise, Thank YOU so very much for being the very first one to recommend doing this action from 'about:config' this has been used by me since it's very first creation.

More to follow after my work on my other system (desot0-).

TIA, CU L8R, 'd' "LoneWanderer"

more options

Can you provide the Bank link so others can see what it is doing?

more options

If you haven't already, you may want to change your password on the site using a trusted system. Just in case.

more options

This is not up to me, need to contact my bank first to get permission. They are very security conscious and may not or need some time to connect with their security department. If they approve then I can provide for you, also I understand why you ask that. I will also provide a ScrnSht of what I am getting on my system, if the approval goes throught.

TIA, CU L8R, 'd' "LoneWanderer"

WestEnd said

Can you provide the Bank link so others can see what it is doing?
more options

jscher2000,

As mentioned in a lengthy message about my self, very security conscious and YES! that was done and neglected to also list KeyScrambler Pd version is also on my system.

BAG! TIA, CU L8R, 'd' NTLS "LoneWanderer"


jscher2000 said

If you haven't already, you may want to change your password on the site using a trusted system. Just in case.
more options

Greetings from the GREAT Country of TEXAS,

Following your directions, SafeMode operation all has been done by using your directions and the Cookies did not have any saved, empty. The Cache had 250 MB and it has been cleared.

Another item discovered this morning "C:\Users\LimitedUserName\AppData\Roaming\Mozilla\FireFox\Profiles\ there are two (2) profiles the first I created when installing FireFox the second one I do not from where it came. If that second profile is removed the next time starting FF it is recreated and is NOT using my bookmarks all as though it is a second user and I am the "TIGGER" (THE only ONE) on this system. This may assist you some what.

TIA, CU L8R, 'd' NTLS "LoneWanderer"

more options

WestEnd,

Excuse me for not including your name in the above message. I was told that I cannot give the web link I use, but; you may Google or Yahoo for their site and that is Security Service FCU. From what I found this morn where the 'profile.ini' file had be changed to show the two (2) different accounts and was directed to the other account, that was attempting to steal my access.

TIA, CU L8R, 'd' NTLS "LoneWanderer"

more options

How is showing the website a problem? It's not giving your account info out here. What your saying to use Google or Yahoo is nonsense here. If help is wanted the site not a direct link to your account is asked so other can see what is showing up. This sounds alot like goose chase then anything else.

more options

NTLS said

Another item discovered this morning "C:\Users\LimitedUserName\AppData\Roaming\Mozilla\FireFox\Profiles\ there are two (2) profiles the first I created when installing FireFox the second one I do not from where it came. If that second profile is removed the next time starting FF it is recreated and is NOT using my bookmarks all as though it is a second user...

How are you removing the profile? Try using the about:profiles page first before deleting the folder:

Inside Firefox, type or paste about:profiles in the address bar and press Enter/Return to load it.

Find the unwanted profile and click the Remove button below it. Hopefully then if you delete its folder, Firefox will no longer re-create it.

more options

'WestEnd, I told them what you wanted and they asked why and I explained what the issue is, was then told by that person I was speaking with, then asked her supervisor and they told me NO, so what are you asking for? They said to tell you to search for their site either GOOGLE it or use Yahoo! using the name I gave in my previous message to you. Here is their number 800 229 0158 and select the "My Bank" selection from their menu, I do not know what else to provide for you. They told me only members or possible members are all that can access their website.

TIA, CU L8R, 'd' NTLS "LoneWanderer"

Edited to add some correct words to make better wording for you. NTLS

WestEnd said

How is showing the website a problem? It's not giving your account info out here. What your saying to use Google or Yahoo is nonsense here. If help is wanted the site not a direct link to your account is asked so other can see what is showing up. This sounds alot like goose chase then anything else.

Geändert am von user1111081

more options

jscher2000,

The only way known by me is to edit the profiles.ini file removing the unauthorized profile and then removing it from my system. What you have provided does not remove any of the four (4) that are now on my system all IDed as ~.default and that is not removable as you told me to do when selecting a profile. NONE of the four (4) are my original with my bookmarks backup folder, My original has been remove by some unauthorized software some where on my system. Do you have any clues where I may find what is doing this to my system? I have remove FireFox from my system and downloaded a fresh copy before posting this to the forums and my original backup of bookmarks was in my profile, now there is not any such animal found on my system.

TIA, CU L8R, 'd' NTLS "LoneWanderer"

jscher2000 said

NTLS said
Another item discovered this morning "C:\Users\LimitedUserName\AppData\Roaming\Mozilla\FireFox\Profiles\ there are two (2) profiles the first I created when installing FireFox the second one I do not from where it came. If that second profile is removed the next time starting FF it is recreated and is NOT using my bookmarks all as though it is a second user...

How are you removing the profile? Try using the about:profiles page first before deleting the folder:

Inside Firefox, type or paste about:profiles in the address bar and press Enter/Return to load it.

Find the unwanted profile and click the Remove button below it. Hopefully then if you delete its folder, Firefox will no longer re-create it.

more options

NTLS said

WestEnd, Excuse me for not including your name in the above message. I was told that I cannot give the web link I use, but; you may Google or Yahoo for their site and that is Security Service FCU.

NTLS said

'WestEnd, I told them what you wanted and they asked why and I explained what the issue is, was then told the person I speaking with asked her supervisor and they told me NO so what are you asking for? They said to tell you to search for their sifte either GOOGLE ir or use Yahoo! using the name I gave in my previous message to you. Here is their number 800 229 0158 and select the "My Bank" selection from their menu, I do not know what else to provide for you. They told me only members or possible members are all that can access their website.

Based on that phone number and Security Service FCU your bank site is https://www.ssfcu.org/ as that was what was being asked for in case somebody can find out related issues that may help solve your problem.

You were not being asked for account info or a direct link to your account or such.

btw this is a forum and not email so quotes on a forum normally goes above the reply and not below like you may do in emails.

more options

NTLS said

jscher2000, Excuse me, I made an error within the below message, those four (4) profiles are NOT within the "C:\Users\LimitedUser\AppData\Roaming\Mozilla\FireFox\Profiles" as reported by me. They are within "C:\Users\AppData\Local\Temp\Mozilla\Firefox\Profiles" and the four (4) of them are within this last path. NOT the one titled "Roaming" that was my error in not watching where clicking my mouse. The above information is correct and my original Bookmarks folder is within the first path above. Please forgive me for this mistake, I am becoming confused and hope not doing this to you. UPDATED above as most correct. TIA, CU L8R, 'd' NTLS "LoneWanderer" The only way known by me is to edit the profiles.ini file removing the unauthorized profile and then removing it from my system. What you have provided does not remove any of the four (4) that are now on my system all IDed as ~.default and that is not removable as you told me to do when selecting a profile. NONE of the four (4) are my original with my bookmarks backup folder, My original has been remove by some unauthorized software some where on my system. Do you have any clues where I may find what is doing this to my system? I have remove FireFox from my system and downloaded a fresh copy before posting this to the forums and my original backup of bookmarks was in my profile, now there is not any such animal found on my system. TIA, CU L8R, 'd' NTLS "LoneWanderer" jscher2000 said
NTLS said
Another item discovered this morning "C:\Users\LimitedUserName\AppData\Roaming\Mozilla\FireFox\Profiles\ there are two (2) profiles the first I created when installing FireFox the second one I do not from where it came. If that second profile is removed the next time starting FF it is recreated and is NOT using my bookmarks all as though it is a second user...

How are you removing the profile? Try using the about:profiles page first before deleting the folder:

Inside Firefox, type or paste about:profiles in the address bar and press Enter/Return to load it.

Find the unwanted profile and click the Remove button below it. Hopefully then if you delete its folder, Firefox will no longer re-create it.

more options

NTLS said

those four (4) profiles are NOT within the "C:\Users\LimitedUser\AppData\Roaming\Mozilla\FireFox\Profiles" as reported by me. They are within "C:\Users\AppData\Local\Temp\Mozilla\Firefox\Profiles" and the four (4) of them are within this last path.

Each profile has a corresponding "temp" folder under

C:\Users\username\AppData\Local\Mozilla\Firefox\Profiles

That is used for cache and other files Firefox can live without. Feel free to delete anything there.

more options

Gentlemen,

Please excuse me for sending confusing data as I have spent the entire day taking a Lady friend to medical apoinments and having to listen to all of her issues and problems. Have told her not to say anything to me while driving, she cannot keep her mouth closed. That has been my day. I know this is not any assistance to you, thought you may understand some of my issues.

jscher2000,

Of those four (4) profiles found under "~\Local\Temp\" the last one at the bottom of the list in that subfolder is the one presently installed within the "~\Roaming\" folder as the second entry yet is being used as the default.

TIA, CU L8R, 'd' NTL "LoneWanderer"

more options

James,

Excuse me, I have always TOP posted my replies so it is seen first when viewed, this is the very FIRST time I have been told to do just the opposite, this will be my last TOP posting on your website. I hold membership in about fifty (50) forums and this is the first time to get this data, EXCUSE ME!

TIA, CU L8R, 'd' NTLS "LoneWanderer"

James said

NTLS said
WestEnd, Excuse me for not including your name in the above message. I was told that I cannot give the web link I use, but; you may Google or Yahoo for their site and that is Security Service FCU.

NTLS said

'WestEnd, I told them what you wanted and they asked why and I explained what the issue is, was then told the person I speaking with asked her supervisor and they told me NO so what are you asking for? They said to tell you to search for their sifte either GOOGLE ir or use Yahoo! using the name I gave in my previous message to you. Here is their number 800 229 0158 and select the "My Bank" selection from their menu, I do not know what else to provide for you. They told me only members or possible members are all that can access their website.

Based on that phone number and Security Service FCU your bank site is https://www.ssfcu.org/ as that was what was being asked for in case somebody can find out related issues that may help solve your problem.

You were not being asked for account info or a direct link to your account or such.

btw this is a forum and not email so quotes on a forum normally goes above the reply and not below like you may do in emails.

more options

Just realized a 'screen shot' cannot be sent to you as it is my infected system and am using a laptop to communicate with you. Do Not want to copy the Screen Shot to a mini SD chip and then maybe contaminate my laptop. That is my only means of transacting any business on line.

'd' NTLS

more options

Using the "about:config" and searching for profile found six (6) entries top |http://profile.accounts.firefox.com/v1 ; | ~.confirm.automigration "Type" boolean "Value" true ; ~.manage_only_at_launch "Type" boolean "Value" false ; ~.migration_behavior integer "Value" 0 ; ~.migration_directory "Type" - string "Value" (Empty space) ; ~.seconds_until_defunct "Type" integer "Value" 1

Even using Admin access there are not any other Profiles listed, only the default and that cannot be removed.

'd' NTLS "LoneWanderer"

more options

Good Nite, until tomorrow, maybe?

'd' NTLS "LoneWanderer"

  1. 1
  2. 2