Firefox opens a pop-up download window for a file named "c.php" randomly.
When I startup Firefox, as well as at other random times during web browsing or downloading on Mac OS X, a pop-up window appears asking me to save or open the file named "c.php", supposedly from the site soclnet.com.
But I've never been to that site, much less requested to download anything. I checked that domain today and the it's just a blank page. The domain is registered through Enom and it's a private registration, so there's no info about who really owns it.
Modified by Mulder
Additional System Details
Every time Firefox opened
This started when...
- Displays PDF documents in the browser.
- Gecko default plugin
- The Flip4Mac WMV Plugin allows you to view Windows Media content using QuickTime.
- The QuickTime Plugin allows you to view a wide variety of multimedia content in web pages. For more information, visit the QuickTime Web site.
- Shockwave Flash 10.1 r85
- User Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:184.108.40.206) Gecko/20100914 Firefox/3.6.10
There's no malware on my system, no cookies, etc. Thousands of known ad sites are blocked, as well as lots of web sites I have no use for.
- Make a new profile as described at Profile Manager - Create, remove, or switch Firefox profiles.
- Do a clean reinstall as descrbied here.
If the issue still happens:
- Download and run every program at these malware removal links: http://www.safer-networking.org , http://www.malwarebytes.org , http://www.spywareterminator.com , http://www.microsoft.com/security/malwareremove/default.aspx
- Repeat steps 1 and 2.
This has no effect, and it doesn't apply to the situation. There is no malware on the system, and even if there were, those sites you listed are all for Windows, which is clearly not what I'm running.