Firefox opens two index of files (Mozilla Firefox or My Documents), a page that cannot be opened because its address contains unknown characters, and a site called ç.com whenever a new url is opened
Whenever I click a link, open Firefox, or open a new tab (essentially whenever the page address changes), Firefox opens two index of files of either my Firefox program folder or My Documents, a page that cannot be opened because its address contains unknown characters, and a site called ç.com. These all open in a new window and seem to backlog themselves, that is, if the window hasn't opened after going to a few pages, a few windows will pop up unexpectedly. I've run my adware and malware programs multiple times including in safe mode.
Every time Firefox opened
== There was no change. A few days ago.
Additional System Details
- -The DBsign Government Smart Card Information Tool allows data elements from GSC compliant smartcards to be read from browser based applications. USE OF THIS PRODUCT IS GOVERNED BY THE DBSIGN LICENSE AGREEMENT.
- DBsign Web Signer Plugin
- Adobe Shockwave for Director Netscape plug-in, version 11.0
- NPRuntime Script Plug-in Library for Java(TM) Deploy
- Pando Web Installer
- The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
- Adobe PDF Plug-In For Firefox and Netscape "9.3.3"
- Default Plug-in
- Shockwave Flash 10.0 r45
- Adobe Shockwave for Director Netscape plug-in, version 11.5
- iTunes Detector Plug-in
- DivX Web Player version 22.214.171.124
- Java(TM) Platform SE binary
- Next Generation Java Plug-in 1.6.0_15 for Mozilla browsers
- Npdsplay dll
- DRM Store Netscape Plugin
- DRM Netscape Network Object
- User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:126.96.36.199) Gecko/20100625 Firefox/3.6.6 (.NET CLR 3.5.30729)
AdBlock plus, Java console, java quick starter, Microsoft .NET Framwork assistant, Move media player, Personas, StumbleUpon
Create a new profile as a test to check if your current profile is causing the problems See [[Basic Troubleshooting|#Make_a_new_profile|Basic Troubleshooting:Make a new profile]] There may be extensions and plugins installed by default in a new profile, so check that in "Tools > Add-ons > Extensions & Plugins" If that new profile works then you can transfer some files from the old profile to that new profile (be careful not to copy corrupted files) See http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox
Do a malware check with a few malware scan programs. You need to use all programs because each detects different malware. Make sure that you update each program to get the latest version of the database.
http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware http://www.superantispyware.com/ - SuperAntispyware http://www.safer-networking.org/en/index.html - Spybot Search & Destroy http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page .......... See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and What to do when searches take you to the wrong search website
If you can't fix it with the above listed scanners then you need to ask advise on one of the forums that specialize in malware removal mentioned in the Popups_not_blocked article.
all forms of re-installation of firefox and all adware, spyware, malware scanners failed to fixed the problem
All form of re-installing firefox and all suggested spyware, malware, and adware fail to fix the problem
I am now having the same type of issue. Every 30 seconds or so, about 20 tabs pop up with a couple of them being "index of file" items from Mozilla. Also, the rest are a bunch of "cannot load" webpages with webistes that have all sorts of strange characters. I have used all sorts of virus, malware, and spyware scans. Nothing has worked. It is annoying so hopefully someone can find a way to fix this.
All right peoples.. I have found the solution to this extremely annoying problem. Lately for me, the index pages were opening at an ever increasing pace; until I found the solution. After trying with all malware and antispyware programs to no success. I finally learned how to fix this.
It seems like the #@&%er creating this problem is a rootkit. I found my computer was regularly trying to communicate with several IPs, which include: rollangarr0s . com and other websites belonging to a guy from India named Nmajjd Nbvjaa . If anyone knows how to report and stop this person and his activities, please do!!!
The info on his whois: Administrative Contact:
Nmajjd Nbvjaa +911123131131 fax: +911123131131 Patna, 12 Patna Bihar 800008 in
To get rid of the rootkit go to the following website, and download the utility TDSSKiller. Run it in your computer, and voila! after rebooting, your computer is clean. No more of the annoying index windows and creepy calls to this guy's websites..
Modified by gordoalac
Excellent post!!!. Thank you. It worked perfectly. Rootkit was gone.
omfg i love you so much that thing was so annoying i couldn't stand it anymore this worked your amazing !! :D tyy!