X
Tippen Sie hierhin, um die Version dieser Website für Mobilgeräte aufzurufen.

Hilfeforum

pop-ups on screen when i click on firefox icon

Veröffentlicht

when i click to open firefox, my homepage comes up for a few seconds. Then other popups appear on screen. look like "brainestoune.com, and another window opens long narrow rectangle window asking for user name and password for something. another window asking to allow. I cannot get these off screen. Can you please help? I figured out I can go to bookmarks and click another website to get around this. Just ran malwarebytes. That didn't work.

                                    Thank you very much for any help you may provide
when i click to open firefox, my homepage comes up for a few seconds. Then other popups appear on screen. look like "brainestoune.com, and another window opens long narrow rectangle window asking for user name and password for something. another window asking to allow. I cannot get these off screen. Can you please help? I figured out I can go to bookmarks and click another website to get around this. Just ran malwarebytes. That didn't work. Thank you very much for any help you may provide
Zitieren

Mehr Details zum System

Anwendung

  • User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0

Weitere Informationen

My_Cheese_Is_Slippin'
  • Top 10 Contributor
52 Lösungen 680 Antworten
Veröffentlicht

Hi maidendallas, Also try the AdwCleaner from Malwarebytes

https://support.malwarebytes.com/docs/DOC-1160

Hi maidendallas, Also try the AdwCleaner from Malwarebytes https://support.malwarebytes.com/docs/DOC-1160
Hat Ihnen das weitergeholfen? 0
Zitieren
FredMcD
  • Top 10 Contributor
4220 Lösungen 58912 Antworten
Veröffentlicht

After the above, Start Firefox in Safe Mode {web link}

A small dialog should appear. Click Start In Safe Mode (not Refresh). Is the problem still there?

After the above, [https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode Start Firefox in Safe Mode] {web link} A small dialog should appear. Click '''Start In Safe Mode''' (not Refresh). Is the problem still there?
Hat Ihnen das weitergeholfen?
Zitieren

Fragesteller

The AdwCleaner did not work or find anything. And when I started in safe mode, I was in safemode with networking but had no connection. Thanks for your help. I am not tech savvy or sure if I am posting on here correctly. So far nothing has worked. Thanks for getting back so quick. Any more ideas?

Thanks again
The AdwCleaner did not work or find anything. And when I started in safe mode, I was in safemode with networking but had no connection. Thanks for your help. I am not tech savvy or sure if I am posting on here correctly. So far nothing has worked. Thanks for getting back so quick. Any more ideas? Thanks again
Hat Ihnen das weitergeholfen?
Zitieren
My_Cheese_Is_Slippin'
  • Top 10 Contributor
52 Lösungen 680 Antworten
Veröffentlicht

Hilfreiche Antwort

Hi maidendallas, I saw something in another thread about 'brainestoune' the other day, but I can't find it now. We were able to remove it.

My anti-virus blocks the website that your link directs it to. It is categorized as a Fake Tech Support Domain. Which is a blanket category that includes ransomware.

I'm surprised that Malwarebytes didn't find it and quarantine it or that AdwCleaner missed it.

What anti-virus software do you use? Does it have a scan tool?

Try running Malwarebytes Threat Scan again. If that doesn't find anything, try the AdwCleaner again.

Be sure Firefox is closed when you run these.

If all of that fails, here is a Malwarebytes Browser Extension that you can try:

https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/

Hi maidendallas, I saw something in another thread about 'brainestoune' the other day, but I can't find it now. We were able to remove it. My anti-virus blocks the website that your link directs it to. It is categorized as a Fake Tech Support Domain. Which is a blanket category that includes ransomware. I'm surprised that Malwarebytes didn't find it and quarantine it or that AdwCleaner missed it. What anti-virus software do you use? Does it have a scan tool? Try running Malwarebytes Threat Scan again. If that doesn't find anything, try the AdwCleaner again. Be sure Firefox is closed when you run these. If all of that fails, here is a Malwarebytes Browser Extension that you can try: https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/
Hat Ihnen das weitergeholfen? 1
Zitieren
My_Cheese_Is_Slippin'
  • Top 10 Contributor
52 Lösungen 680 Antworten
Veröffentlicht
Hi again maidendallas, Here's a link for Norton Power Eraser: https://support.norton.com/sp/en/us/threat-removal-solutions/current/solutions/kb20100824120155EN_EndUserProfile_en_us?inid=hho_supp_search-npe
Hat Ihnen das weitergeholfen?
Zitieren

Fragesteller

I am using Avast antivirus. Maybe I am not sure how to start up in safe mode I did select with networking but said no connection was available. Maybe I'm doing something wrong. I will try these other suggestions this afternoon after work. Just wanted to let you know I will keep checking back and I will let you know my results as soon as I can after work today. Thanks again. Just FYI the very first time I ran malwarebytes, not adware cleaner, it did find and quarantine two items. But that did not fix the problem. That was before I tried the adware cleaner which said no threats were found. I work until about 4 or 5 Central Time. Will post again ASAP. Thank you

I am using Avast antivirus. Maybe I am not sure how to start up in safe mode I did select with networking but said no connection was available. Maybe I'm doing something wrong. I will try these other suggestions this afternoon after work. Just wanted to let you know I will keep checking back and I will let you know my results as soon as I can after work today. Thanks again. Just FYI the very first time I ran malwarebytes, not adware cleaner, it did find and quarantine two items. But that did not fix the problem. That was before I tried the adware cleaner which said no threats were found. I work until about 4 or 5 Central Time. Will post again ASAP. Thank you
Hat Ihnen das weitergeholfen?
Zitieren

Fragesteller

one more thing, when I bring up Firefox and the pop-up comes up on the screen my Avast does pop up and say threat was detected and it did block something. But apparently it's not blocking the brainestoune pop ups. And when I run my Avast scan it does not find anything either.

one more thing, when I bring up Firefox and the pop-up comes up on the screen my Avast does pop up and say threat was detected and it did block something. But apparently it's not blocking the brainestoune pop ups. And when I run my Avast scan it does not find anything either.
Hat Ihnen das weitergeholfen?
Zitieren
My_Cheese_Is_Slippin'
  • Top 10 Contributor
52 Lösungen 680 Antworten
Veröffentlicht

Hi maidendallas,

I'll be happy to look into this some more for you today while you're at work. We'll get this fixed!

Have a great day.

Hi maidendallas, I'll be happy to look into this some more for you today while you're at work. We'll get this fixed! Have a great day.
Hat Ihnen das weitergeholfen?
Zitieren
FredMcD
  • Top 10 Contributor
4220 Lösungen 58912 Antworten
Veröffentlicht

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.
Hat Ihnen das weitergeholfen?
Zitieren
McCoy
  • Top 10 Contributor
520 Lösungen 4878 Antworten
Veröffentlicht

Hilfreiche Antwort

The same name ("brainstoune") came up here :

https://support.mozilla.org/en-US/questions/1260300

No search results for that name ......

The same name ("brainstoune") came up here : https://support.mozilla.org/en-US/questions/1260300 No search results for that name ......
Hat Ihnen das weitergeholfen? 1
Zitieren
My_Cheese_Is_Slippin'
  • Top 10 Contributor
52 Lösungen 680 Antworten
Veröffentlicht

Thank you McCoy,

My cheese was starting to slide off over that one.

I chased out "brainstoune" to "go.pub2srv" with the help of the Malwarebytes Extension. They are notorious for PUP's and adware.

I'm sure that we can help maidendallas with this.

Thanks

Thank you McCoy, My cheese was starting to slide off over that one. I chased out "brainstoune" to "go.pub2srv" with the help of the Malwarebytes Extension. They are notorious for PUP's and adware. I'm sure that we can help maidendallas with this. Thanks

Geändert am von My_Cheese_Is_Slippin'

Hat Ihnen das weitergeholfen?
Zitieren
McCoy
  • Top 10 Contributor
520 Lösungen 4878 Antworten
Veröffentlicht

My_Cheese_Is_Slippin said

I chased out "brainstoune" to go.pub2srv.com with the help of the Malwarebytes Extension.

Don't let anybody click on that link (which I made unclickable here), cause it leads to "cobalten. com", which is a redirect virus .....

See : https://www.2-viruses.com/remove-cobalten-com-redirect

''My_Cheese_Is_Slippin [[#answer-1226408|said]]'' <blockquote> I chased out "brainstoune" to go.pub2srv''.''com with the help of the Malwarebytes Extension. </blockquote> Don't let anybody click on that link (which I made unclickable here), cause it leads to "cobalten''.'' com", which is a redirect virus ..... See : https://www.2-viruses.com/remove-cobalten-com-redirect
Hat Ihnen das weitergeholfen?
Zitieren

Fragesteller

Ok I'm back. First off you guys are awesome. I didn't expect anyone to be so willing to help. I appreciate it so much.

 Seems to be fixed!!  I got home, read your replies then I ran malwarebytes again. It found and quarantined "pup.optionalremoteinjectionFF.  Then I ran Adwarecleaner and it did not find any threats. I've been closing and reopening firefox.  Restarted PC and opened firefox. Turned PC off and on and opened firefox. The popup seems to gone! I say seems because I thought it was gone once and it came right back. Hope it stays gone this time. I will definitely let you know if it comes back. Don't know why it didn't work last night? Maybe I had firefox open? I don't remember. 
  Can't thank you enough!!   
 So does that item it quarantined look familiar to you guys?
Ok I'm back. First off you guys are awesome. I didn't expect anyone to be so willing to help. I appreciate it so much. Seems to be fixed!! I got home, read your replies then I ran malwarebytes again. It found and quarantined "pup.optionalremoteinjectionFF. Then I ran Adwarecleaner and it did not find any threats. I've been closing and reopening firefox. Restarted PC and opened firefox. Turned PC off and on and opened firefox. The popup seems to gone! I say seems because I thought it was gone once and it came right back. Hope it stays gone this time. I will definitely let you know if it comes back. Don't know why it didn't work last night? Maybe I had firefox open? I don't remember. Can't thank you enough!! So does that item it quarantined look familiar to you guys?
Hat Ihnen das weitergeholfen?
Zitieren
My_Cheese_Is_Slippin'
  • Top 10 Contributor
52 Lösungen 680 Antworten
Veröffentlicht

That's Great!

You should look for any extensions that might have "cobalten" "go.pub2srv" "brainestoune" or anything else that you don't remember adding and remove them.

Do the same in Windows apps.

I've been using the Malwarebytes extension for Firefox. It works as well or maybe a little faster than Malwarebytes Premium. You should add it and try it out. I think you'll be impressed.

Let us know if we can help with anything else.

That's Great! You should look for any extensions that might have "cobalten" "go.pub2srv" "brainestoune" or anything else that you don't remember adding and remove them. Do the same in Windows apps. I've been using the Malwarebytes extension for Firefox. It works as well or maybe a little faster than Malwarebytes Premium. You should add it and try it out. I think you'll be impressed. Let us know if we can help with anything else.
Hat Ihnen das weitergeholfen?
Zitieren
My_Cheese_Is_Slippin'
  • Top 10 Contributor
52 Lösungen 680 Antworten
Veröffentlicht

Oh yeah,

The item "pup.optionalremoteinjectionFF" is a reference to a "Potentially Unwanted Program" with "remote injection" characteristics in "Firefox" and is "optionally" packaged with a program or extension.

The "remote injection" part is where it communicates with it's host to send you those really cool pop-ups and nuisances.

But there are other "remote injection" PUP's which can extract user id's and passwords or other personal data. And there are those which can really wreak havoc on your system, too.

Oh yeah, The item "pup.optionalremoteinjectionFF" is a reference to a "Potentially Unwanted Program" with "remote injection" characteristics in "Firefox" and is "optionally" packaged with a program or extension. The "remote injection" part is where it communicates with it's host to send you those really cool pop-ups and nuisances. But there are other "remote injection" PUP's which can extract user id's and passwords or other personal data. And there are those which can really wreak havoc on your system, too.

Geändert am von My_Cheese_Is_Slippin'

Hat Ihnen das weitergeholfen?
Zitieren

Fragesteller

Again, not too tech savvy here. When you say extensions, are you referring to the firefox add ons / extensions?

Again, not too tech savvy here. When you say extensions, are you referring to the firefox add ons / extensions?
Hat Ihnen das weitergeholfen?
Zitieren
My_Cheese_Is_Slippin'
  • Top 10 Contributor
52 Lösungen 680 Antworten
Veröffentlicht

Yeah, those.

Sometimes the "bad guys" are able to "package" these remote injection pup's with an add-on and they slip past Mozilla's scrutiny.

Let us know if you find anything suspicious. We can investigate into it and block it from availability and even kill it for other user's, if necessary.

Yeah, those. Sometimes the "bad guys" are able to "package" these remote injection pup's with an add-on and they slip past Mozilla's scrutiny. Let us know if you find anything suspicious. We can investigate into it and block it from availability and even kill it for other user's, if necessary.
Hat Ihnen das weitergeholfen?
Zitieren

Fragesteller

Got it. Thanks again for your help. Much appreciated.

Got it. Thanks again for your help. Much appreciated.
Hat Ihnen das weitergeholfen?
Zitieren
My_Cheese_Is_Slippin'
  • Top 10 Contributor
52 Lösungen 680 Antworten
Veröffentlicht

Not a problem. I'm glad we could help.

Not a problem. I'm glad we could help.
Hat Ihnen das weitergeholfen?
Zitieren
FredMcD
  • Top 10 Contributor
4220 Lösungen 58912 Antworten
Veröffentlicht

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but other programs as well.

You have heard of the fine print in shady contracts, right? Well, some installers you need to look at the itsy bitsy teeny weeny fine print.

You are thinking you are giving the installer permission to install the program you want by using the recommended option. But if you use the Manual Option Instead, you discover all kinds of stuff that you do not even know what it is or what it does.

From now on, everyone needs to Use The Manual Option to put a stop to this.

Note that these programs can also change browser/computer settings.

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but '''other programs as well. ''' You have heard of the '''fine print in shady''' '''contracts, ''' right? Well, some installers you need to look at the '''itsy bitsy teeny weeny fine print. ''' You are thinking you are giving the installer permission to install the program you want by using the '''recommended''' option. But if you use the '''Manual Option Instead, ''' you discover all kinds of stuff that '''you do not even know what it is or what it does. ''' From now on, everyone needs to '''Use The Manual Option''' to put a stop to this. '''Note''' that these programs can also change browser/computer settings.
Hat Ihnen das weitergeholfen?
Zitieren
Stellen Sie eine Frage

Sie müssen sich mit Ihrem Benutzerkonto anmelden, um auf Beiträge zu antworten. Bitte stellen Sie eine neue Frage, wenn Sie noch kein Benutzerkonto haben.