X
Tap here to go to the mobile version of the site.

Support Forum

pop-ups on screen when i click on firefox icon

Posted

when i click to open firefox, my homepage comes up for a few seconds. Then other popups appear on screen. look like "brainestoune.com, and another window opens long narrow rectangle window asking for user name and password for something. another window asking to allow. I cannot get these off screen. Can you please help? I figured out I can go to bookmarks and click another website to get around this. Just ran malwarebytes. That didn't work.

                                    Thank you very much for any help you may provide
when i click to open firefox, my homepage comes up for a few seconds. Then other popups appear on screen. look like "brainestoune.com, and another window opens long narrow rectangle window asking for user name and password for something. another window asking to allow. I cannot get these off screen. Can you please help? I figured out I can go to bookmarks and click another website to get around this. Just ran malwarebytes. That didn't work. Thank you very much for any help you may provide
Quote

Additional System Details

Application

  • User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0

More Information

My_Cheese_Is_Slippin'
  • Top 10 Contributor
64 solutions 760 answers

Hi maidendallas, Also try the AdwCleaner from Malwarebytes

https://support.malwarebytes.com/docs/DOC-1160

Hi maidendallas, Also try the AdwCleaner from Malwarebytes https://support.malwarebytes.com/docs/DOC-1160
Was this helpful to you? 0
Quote
FredMcD
  • Top 10 Contributor
4246 solutions 59390 answers

After the above, Start Firefox in Safe Mode {web link}

A small dialog should appear. Click Start In Safe Mode (not Refresh). Is the problem still there?

After the above, [https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode Start Firefox in Safe Mode] {web link} A small dialog should appear. Click '''Start In Safe Mode''' (not Refresh). Is the problem still there?
Was this helpful to you?
Quote

Question owner

The AdwCleaner did not work or find anything. And when I started in safe mode, I was in safemode with networking but had no connection. Thanks for your help. I am not tech savvy or sure if I am posting on here correctly. So far nothing has worked. Thanks for getting back so quick. Any more ideas?

Thanks again
The AdwCleaner did not work or find anything. And when I started in safe mode, I was in safemode with networking but had no connection. Thanks for your help. I am not tech savvy or sure if I am posting on here correctly. So far nothing has worked. Thanks for getting back so quick. Any more ideas? Thanks again
Was this helpful to you?
Quote
My_Cheese_Is_Slippin'
  • Top 10 Contributor
64 solutions 760 answers

Helpful Reply

Hi maidendallas, I saw something in another thread about 'brainestoune' the other day, but I can't find it now. We were able to remove it.

My anti-virus blocks the website that your link directs it to. It is categorized as a Fake Tech Support Domain. Which is a blanket category that includes ransomware.

I'm surprised that Malwarebytes didn't find it and quarantine it or that AdwCleaner missed it.

What anti-virus software do you use? Does it have a scan tool?

Try running Malwarebytes Threat Scan again. If that doesn't find anything, try the AdwCleaner again.

Be sure Firefox is closed when you run these.

If all of that fails, here is a Malwarebytes Browser Extension that you can try:

https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/

Hi maidendallas, I saw something in another thread about 'brainestoune' the other day, but I can't find it now. We were able to remove it. My anti-virus blocks the website that your link directs it to. It is categorized as a Fake Tech Support Domain. Which is a blanket category that includes ransomware. I'm surprised that Malwarebytes didn't find it and quarantine it or that AdwCleaner missed it. What anti-virus software do you use? Does it have a scan tool? Try running Malwarebytes Threat Scan again. If that doesn't find anything, try the AdwCleaner again. Be sure Firefox is closed when you run these. If all of that fails, here is a Malwarebytes Browser Extension that you can try: https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/
Was this helpful to you? 1
Quote
My_Cheese_Is_Slippin'
  • Top 10 Contributor
64 solutions 760 answers
Hi again maidendallas, Here's a link for Norton Power Eraser: https://support.norton.com/sp/en/us/threat-removal-solutions/current/solutions/kb20100824120155EN_EndUserProfile_en_us?inid=hho_supp_search-npe
Was this helpful to you?
Quote

Question owner

I am using Avast antivirus. Maybe I am not sure how to start up in safe mode I did select with networking but said no connection was available. Maybe I'm doing something wrong. I will try these other suggestions this afternoon after work. Just wanted to let you know I will keep checking back and I will let you know my results as soon as I can after work today. Thanks again. Just FYI the very first time I ran malwarebytes, not adware cleaner, it did find and quarantine two items. But that did not fix the problem. That was before I tried the adware cleaner which said no threats were found. I work until about 4 or 5 Central Time. Will post again ASAP. Thank you

I am using Avast antivirus. Maybe I am not sure how to start up in safe mode I did select with networking but said no connection was available. Maybe I'm doing something wrong. I will try these other suggestions this afternoon after work. Just wanted to let you know I will keep checking back and I will let you know my results as soon as I can after work today. Thanks again. Just FYI the very first time I ran malwarebytes, not adware cleaner, it did find and quarantine two items. But that did not fix the problem. That was before I tried the adware cleaner which said no threats were found. I work until about 4 or 5 Central Time. Will post again ASAP. Thank you
Was this helpful to you?
Quote

Question owner

one more thing, when I bring up Firefox and the pop-up comes up on the screen my Avast does pop up and say threat was detected and it did block something. But apparently it's not blocking the brainestoune pop ups. And when I run my Avast scan it does not find anything either.

one more thing, when I bring up Firefox and the pop-up comes up on the screen my Avast does pop up and say threat was detected and it did block something. But apparently it's not blocking the brainestoune pop ups. And when I run my Avast scan it does not find anything either.
Was this helpful to you?
Quote
My_Cheese_Is_Slippin'
  • Top 10 Contributor
64 solutions 760 answers

Hi maidendallas,

I'll be happy to look into this some more for you today while you're at work. We'll get this fixed!

Have a great day.

Hi maidendallas, I'll be happy to look into this some more for you today while you're at work. We'll get this fixed! Have a great day.
Was this helpful to you?
Quote
FredMcD
  • Top 10 Contributor
4246 solutions 59390 answers

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.
Was this helpful to you?
Quote
McCoy
  • Top 10 Contributor
534 solutions 5035 answers

Helpful Reply

The same name ("brainstoune") came up here :

https://support.mozilla.org/en-US/questions/1260300

No search results for that name ......

The same name ("brainstoune") came up here : https://support.mozilla.org/en-US/questions/1260300 No search results for that name ......
Was this helpful to you? 1
Quote
My_Cheese_Is_Slippin'
  • Top 10 Contributor
64 solutions 760 answers

Thank you McCoy,

My cheese was starting to slide off over that one.

I chased out "brainstoune" to "go.pub2srv" with the help of the Malwarebytes Extension. They are notorious for PUP's and adware.

I'm sure that we can help maidendallas with this.

Thanks

Thank you McCoy, My cheese was starting to slide off over that one. I chased out "brainstoune" to "go.pub2srv" with the help of the Malwarebytes Extension. They are notorious for PUP's and adware. I'm sure that we can help maidendallas with this. Thanks

Modified by My_Cheese_Is_Slippin'

Was this helpful to you?
Quote
McCoy
  • Top 10 Contributor
534 solutions 5035 answers

My_Cheese_Is_Slippin said

I chased out "brainstoune" to go.pub2srv.com with the help of the Malwarebytes Extension.

Don't let anybody click on that link (which I made unclickable here), cause it leads to "cobalten. com", which is a redirect virus .....

See : https://www.2-viruses.com/remove-cobalten-com-redirect

''My_Cheese_Is_Slippin [[#answer-1226408|said]]'' <blockquote> I chased out "brainstoune" to go.pub2srv''.''com with the help of the Malwarebytes Extension. </blockquote> Don't let anybody click on that link (which I made unclickable here), cause it leads to "cobalten''.'' com", which is a redirect virus ..... See : https://www.2-viruses.com/remove-cobalten-com-redirect
Was this helpful to you?
Quote

Question owner

Ok I'm back. First off you guys are awesome. I didn't expect anyone to be so willing to help. I appreciate it so much.

 Seems to be fixed!!  I got home, read your replies then I ran malwarebytes again. It found and quarantined "pup.optionalremoteinjectionFF.  Then I ran Adwarecleaner and it did not find any threats. I've been closing and reopening firefox.  Restarted PC and opened firefox. Turned PC off and on and opened firefox. The popup seems to gone! I say seems because I thought it was gone once and it came right back. Hope it stays gone this time. I will definitely let you know if it comes back. Don't know why it didn't work last night? Maybe I had firefox open? I don't remember. 
  Can't thank you enough!!   
 So does that item it quarantined look familiar to you guys?
Ok I'm back. First off you guys are awesome. I didn't expect anyone to be so willing to help. I appreciate it so much. Seems to be fixed!! I got home, read your replies then I ran malwarebytes again. It found and quarantined "pup.optionalremoteinjectionFF. Then I ran Adwarecleaner and it did not find any threats. I've been closing and reopening firefox. Restarted PC and opened firefox. Turned PC off and on and opened firefox. The popup seems to gone! I say seems because I thought it was gone once and it came right back. Hope it stays gone this time. I will definitely let you know if it comes back. Don't know why it didn't work last night? Maybe I had firefox open? I don't remember. Can't thank you enough!! So does that item it quarantined look familiar to you guys?
Was this helpful to you?
Quote
My_Cheese_Is_Slippin'
  • Top 10 Contributor
64 solutions 760 answers

That's Great!

You should look for any extensions that might have "cobalten" "go.pub2srv" "brainestoune" or anything else that you don't remember adding and remove them.

Do the same in Windows apps.

I've been using the Malwarebytes extension for Firefox. It works as well or maybe a little faster than Malwarebytes Premium. You should add it and try it out. I think you'll be impressed.

Let us know if we can help with anything else.

That's Great! You should look for any extensions that might have "cobalten" "go.pub2srv" "brainestoune" or anything else that you don't remember adding and remove them. Do the same in Windows apps. I've been using the Malwarebytes extension for Firefox. It works as well or maybe a little faster than Malwarebytes Premium. You should add it and try it out. I think you'll be impressed. Let us know if we can help with anything else.
Was this helpful to you?
Quote
My_Cheese_Is_Slippin'
  • Top 10 Contributor
64 solutions 760 answers

Oh yeah,

The item "pup.optionalremoteinjectionFF" is a reference to a "Potentially Unwanted Program" with "remote injection" characteristics in "Firefox" and is "optionally" packaged with a program or extension.

The "remote injection" part is where it communicates with it's host to send you those really cool pop-ups and nuisances.

But there are other "remote injection" PUP's which can extract user id's and passwords or other personal data. And there are those which can really wreak havoc on your system, too.

Oh yeah, The item "pup.optionalremoteinjectionFF" is a reference to a "Potentially Unwanted Program" with "remote injection" characteristics in "Firefox" and is "optionally" packaged with a program or extension. The "remote injection" part is where it communicates with it's host to send you those really cool pop-ups and nuisances. But there are other "remote injection" PUP's which can extract user id's and passwords or other personal data. And there are those which can really wreak havoc on your system, too.

Modified by My_Cheese_Is_Slippin'

Was this helpful to you?
Quote

Question owner

Again, not too tech savvy here. When you say extensions, are you referring to the firefox add ons / extensions?

Again, not too tech savvy here. When you say extensions, are you referring to the firefox add ons / extensions?
Was this helpful to you?
Quote
My_Cheese_Is_Slippin'
  • Top 10 Contributor
64 solutions 760 answers

Yeah, those.

Sometimes the "bad guys" are able to "package" these remote injection pup's with an add-on and they slip past Mozilla's scrutiny.

Let us know if you find anything suspicious. We can investigate into it and block it from availability and even kill it for other user's, if necessary.

Yeah, those. Sometimes the "bad guys" are able to "package" these remote injection pup's with an add-on and they slip past Mozilla's scrutiny. Let us know if you find anything suspicious. We can investigate into it and block it from availability and even kill it for other user's, if necessary.
Was this helpful to you?
Quote

Question owner

Got it. Thanks again for your help. Much appreciated.

Got it. Thanks again for your help. Much appreciated.
Was this helpful to you?
Quote
My_Cheese_Is_Slippin'
  • Top 10 Contributor
64 solutions 760 answers

Not a problem. I'm glad we could help.

Not a problem. I'm glad we could help.
Was this helpful to you?
Quote
FredMcD
  • Top 10 Contributor
4246 solutions 59390 answers

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but other programs as well.

You have heard of the fine print in shady contracts, right? Well, some installers you need to look at the itsy bitsy teeny weeny fine print.

You are thinking you are giving the installer permission to install the program you want by using the recommended option. But if you use the Manual Option Instead, you discover all kinds of stuff that you do not even know what it is or what it does.

From now on, everyone needs to Use The Manual Option to put a stop to this.

Note that these programs can also change browser/computer settings.

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but '''other programs as well. ''' You have heard of the '''fine print in shady''' '''contracts, ''' right? Well, some installers you need to look at the '''itsy bitsy teeny weeny fine print. ''' You are thinking you are giving the installer permission to install the program you want by using the '''recommended''' option. But if you use the '''Manual Option Instead, ''' you discover all kinds of stuff that '''you do not even know what it is or what it does. ''' From now on, everyone needs to '''Use The Manual Option''' to put a stop to this. '''Note''' that these programs can also change browser/computer settings.
Was this helpful to you?
Quote
Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.