I seem to have been infected with a PUP.TidyNetworks virus, and my email (fdastmail) doesn't work properly and loading is slow on all sites. Chrome works ok.
I seem to have been infected with a virus called PUP.TidyNetworks, which coincided with Malwarebytes insistance that I buy their overpriced payware. No-one seems to have any experience with TidyNetworks, and a search for it on Malwarebytes comes up empty-handed, which makes me very suspicious, since their software identified it. Now my email doesn't load messages properly on FireFox, though it works fine on Chrome.
What's up? Any ideas?
Thanks in advance.
Personal contact information removed. This is a public forum, viewable by anyone. Please read the Rules & Guidelines.
Modified by Shawn
Additional System Details
- npAPI Ghost Plugin
- npAPI Plugin
- Shockwave Flash 11.5 r502
- RealJukebox Netscape Plugin
- RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In
- RealPlayer(tm) HTML5VideoShim Plug-In
- RealPlayer(tm) LiveConnect-Enabled Plug-In
- RealPlayer Download Plugin
- Google Update
- Intel web components for Intel® Identity Protection Technology
- Intel web components updater - Installs and updates the Intel web components
- Shockwave Flash 9.0 r45
- Adobe PDF Plug-In For Firefox and Netscape
- User Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0
There is a free version of Malwarebytes Anti-malware that I think should clean up without asking for money. You might have a trial version of the higher-featured paid version of MBAM.
Malwarebytes Anti-malware (free version): http://www.malwarebytes.org/products/malwarebytes_free
SUPERAntiSpyware (also free): http://www.superantispyware.com/
Incidentally, the "PUP" prefix probably indicates a "potentially unwanted program" which is not as dangerous as a virus. Typically they ride along with other software you wanted and annoy you with ads or other functionality of questionable value.
If this is a Firefox add-on, you likely can disable it (and perhaps even remove it) here:
orange Firefox button or classic Tools menu> Add-ons > Extensions category
Turning to the email issue... When you have a problem with one particular site, a good "first thing to try" is clearing your Firefox cache and deleting your saved cookies for the site.
(1) Bypass Firefox's Cache
Use Ctrl+Shift+r to reload the page fresh from the server.
(You also can clear Firefox's cache completely using:
orange Firefox button or Tools menu > Options > Advanced
On the Network mini-tab > Cached Web Content : "Clear Now")
(2) Remove the site's cookies (save any pending work first) using either of these. While viewing a page on the site:
- right-click and choose View Page Info > Security > "View Cookies"
- Alt+t (open the classic Tools menu) > Page Info > Security > "View Cookies"
Then try reloading the page and logging in again. Does that help?
Modified by jscher2000
Thanks, jscher2000. Your suggestion about removing add-ons did help me get rid of web2pdf. Thank you for that. I assume when I restart it will be gone from all my firefox windows.
Re: Malwarebytes... I suspect it as being part of the problem. I first noticed that my brand-new Win8 computer was running slowly, so ;:I scanned with Malwarebytes and it presented 15 instances of this TidyNetworks garbage. It removed them all, but when I restarted and rescanned, one instance showed up again, and keeps showing up. Avast can't see it, Revo doesnt see it. I went to a Malwarebytes forum, and a search for the term TidyNetworks PRODUCED NO RESULTS. There's something suspicious there, unless I'm the very first victim of this PUPware (which, by the way, is blocking just about everything I do). I uninstalled Malwarebytes, and am afraid to reinstall.
Any other thoughts?
Changed my mind about Malwarebytes.
I had to pay for Microsoft Security to resolve this one. Three phone sessions and five hours later, a hot tech was able to pick out the pieces from my OS registry. readout from Malwarebytes actually helped tech to go to the correct registry to locate the source.
I've since purchased a Malwarebytes subscription for a year.
I have been infected with this for the second time.
How am I getting it? I have AVG Internet Security, but apparently this sneaks by. I thought it might have something to do with my Yahoo e-mail and FF, but my e-mail trouble remains after I remove the PUPTidyNetwork garbage. Bob
Hi choppbobby, did you try disabling all your extensions to see whether any of them is creating a problem?
How are you detecting this particular unwanted software and where is it located on the hard drive?
I ran a MalwareBytes scan, and it found the "PuP.TidyNetwork malware, and I used it also to remove it. It came back though, and I ran MB again, and this time it looks like it has not returned.
I disabled an Extension called "Download Terms", and that seems to be the cause of my problem. The other two Extensions, "AVG Do Not Track" and "Microsoft Net Framework Assistant" have no effect either way. Bob
Hi choppbobby, DownloadTerms has come up in other threads as well, so good that you found and disabled it.
I can't find any info about it.
Hi choppbobby, I'm not sure how it gets installed, but it was mentioned by a few other posters over in this discussion (most from this point to the end of the thread): https://support.mozilla.org/en-US/questions/954241#answer-421430
The infection of PupTidy apparently didn't have anything to do with my particular problem.It was just coincidence I guess.
The only activity that happened prior to the infection was that I uninstalled and reinstalled VLC Media Player. Bob
I just found my way here as well, had the magic link hijacking in Chrome and found that extension. I don't use Chrome much outside of google stuff, but had just installed a freeware pdf combiner due to urgency. Just disabled and uninstalled, hopefully it will stay dead. Oh, the program itself was PdfEdit
Hi TimelyTrip, if the PDFs aren't highly confidential, I've used this site in the past for merging them quickly: http://foxyutils.com/mergepdf/. If I recall correctly, the download options were a little confusing, but if you accidentally delete your merged PDF, it doesn't take long to re-create it. (I've used the split service also, but haven't tried the others.)