X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

Firefox acting strange yet no spy/malware or viruses found

Posted

I keep getting certificate errors for Paypal and eBay. I use a program called Rapport that I got through my bank. It also keeps coming back with bad certificates. This is the error Firefox gives me:

www.paypal.com uses an invalid security certificate.

The certificate is only valid for www.paypal.com

(Error code: ssl_error_bad_cert_domain)

Also, most of the text/links, like on Google and Blackboard (the website I use for school) are randomly bold. And now the font is getting scrambled.

Here is a pic of the bad certificate from Rapport: http://i.imgur.com/rjZs4Bi.jpg

A picture of the scrambled text: http://i.imgur.com/CgcAg0Q.jpg

A picture of the bold text in Google: http://i.imgur.com/WSFT3pD.jpg

SuperAntiSpyware is run nightly. I ran Malware Bytes, Microsoft Security Essentials (which is my default antivirus program), TDSS rootkit removal tool, and Spybot Search and Destroy, and I attempted to run the Norton program that I get for free from Comcast. It didn't work. But everything else came back fine.

Additional System Details

Installed Plug-ins

  • HP Pit Plugin
  • HP Product Detection Plugin
  • HP Active Check Plugin
  • Shockwave Flash 11.6 r602
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • np-mswmp
  • Google Update
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Adobe PDF Plug-In For Firefox and Netscape 10.1.5
  • Amazon MP3 Downloader Plugin 1.0.17
  • VLC media player Web Plugin 2.0.2
  • 5.1.10411.0
  • CouponNetwork Coupon Activator
  • DivX Plus Web Player version 2.2.0.52
  • Winamp Application Detector
  • DivX VOD Helper Plug-in
  • Coupons, Inc. Coupon Printer Plugin
  • Coupons, Inc. Coupon Printer DLL
  • Unity Player 3.2.0f4
  • 1.7
  • NPWLPG
  • npapicomadapter
  • The Hulu Desktop Plugin allows Hulu.com to integrate with the Hulu Desktop application.
  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Office Authorization plug-in for NPAPI browsers
  • npdnu
  • npdnupdater2

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:19.0) Gecko/20100101 Firefox/19.0

More Information

Application Basics
Name
Firefox
Version
19.0
User Agent
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:19.0) Gecko/20100101 Firefox/19.0
Build Configuration
about:buildconfig
Extensions
Name
Version
Enabled
ID
Adblock Plus
2.2.3
true
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
Adblock Plus Pop-up Addon
0.6
true
adblockpopups@jessehakanen.net
Add to Amazon Wish List Button
1.10
true
amznUWL2@amazon.com
AddThis
3.5.9
true
{3e0e7d2a-070f-4a47-b019-91fe5385ba79}
Evernote Web Clipper
5.4.1
true
{E0B8C461-F8FB-49b4-8373-FE32E9252800}
FastestFox
5.0.9
true
smarterwiki@wikiatic.com
FoxyTunes Skin - Aqua Bubbles
2.5
true
{469CEB59-8266-438b-91D9-82F56D595E15}
Freecorder Community Toolbar
3.18.0.7
true
{1392b8d2-5c05-419f-a8f6-b9f15a596612}
Freecorder Toolbar
5.0.0.0
true
{70dd86e8-b5bc-4e4a-9d5c-b6234c24323c}
Greasemonkey
1.7.1
true
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
HP Detect
1.0.23.1
true
{ab91efd4-6975-4081-8552-1b3922ed79e2}
LastPass
2.0.0
true
support@lastpass.com
Multirow Bookmarks Toolbar Plus
1.2
true
{4c7097f7-08f2-4ef2-9b9f-f95fa4cbb064}
Personas
1.6.2
true
personas@christopher.beard
Plain Text Links
1.0.1
true
{ec268e28-22c6-4a6c-ac22-635cabee283c}
Pocket
3.0.1
true
isreaditlater@ideashower.com
Readability
2.4
true
readability@readability.com
ReminderFox
2.0.2
true
{ada4b710-8346-4b82-8199-5de2b400a6ae}
Roomy Bookmarks Toolbar
1.3.8
true
ALone-live@ya.ru
Social Fixer
7.501
true
socialfixer@mattkruse.com
Speed Dial
0.9.6.14
true
{64161300-e22b-11db-8314-0800200c9a66}
Springpad Extension
2.6.1212.17
true
ext@sprng.me
Stylish
1.3.1
true
{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
Swag Bucks
10.13.40.15
true
{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}
TinEye Reverse Image Search
1.1
true
tineye@ideeinc.com
WOT
20130129
true
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
Xmarks
4.1.3
true
foxmarks@kei.com
ChatZilla
0.9.90
false
{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}
DivX Plus Web Player HTML5 <video>
2.1.2.145
false
{23fcfd51-4958-4f00-80a3-ae97e717ed8b}
Favicon Picker 2
0.6.2.15
false
{446c03e0-2c35-11db-a98b-0800200c9a66}
FoxyTunes
4.3.6
false
{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}
HP Smart Web Printing
4.5
false
smartwebprinting@hp.com
Meebo MiniBar
1.5.5
false
meebo-bar@meebo.com
Norton Toolbar
2011.7.13.2
false
{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}
RoxioNow Player Plugin
1.9.6.1
false
{3112ca9c-de6d-4884-a869-9855de680400}
Symantec Intrusion Prevention
11.1.1.5 - 3
false
{BBDA0591-3099-440a-AA10-41764D9DB4DB}
Important Modified Preferences
Name
Value
accessibility.typeaheadfind.flashBar
0
browser.cache.disk.capacity
358400
browser.cache.disk.smart_size.first_run
false
browser.cache.disk.smart_size.use_old_max
false
browser.cache.disk.smart_size_cached_value
358400
browser.places.smartBookmarksVersion
4
browser.startup.homepage
http://search.swagbucks.com/
browser.startup.homepage_override.buildID
20130215130331
browser.startup.homepage_override.mstone
19.0
browser.tabs.onTop
false
dom.disable_open_during_load
false
dom.max_script_run_time
0
dom.mozApps.used
true
extensions.lastAppVersion
19.0
font.name.serif.x-western
Georgia
gfx.blacklist.suggested-driver-version
10.6
gfx.direct3d.prefer_10_1
true
network.cookie.prefsMigrated
true
places.database.lastMaintenance
1362604551
places.history.expiration.transient_current_max_pages
104858
places.history.expiration.transient_optimal_database_size
167772160
plugin.disable_full_page_plugin_for_types
application/pdf
print.print_printer
Dell Photo AIO Printer 926
print.printer_Dell_Photo_AIO_Printer_926.print_bgcolor
false
print.printer_Dell_Photo_AIO_Printer_926.print_bgimages
false
print.printer_Dell_Photo_AIO_Printer_926.print_command
print.printer_Dell_Photo_AIO_Printer_926.print_downloadfonts
false
print.printer_Dell_Photo_AIO_Printer_926.print_edge_bottom
0
print.printer_Dell_Photo_AIO_Printer_926.print_edge_left
0
print.printer_Dell_Photo_AIO_Printer_926.print_edge_right
0
print.printer_Dell_Photo_AIO_Printer_926.print_edge_top
0
print.printer_Dell_Photo_AIO_Printer_926.print_evenpages
true
print.printer_Dell_Photo_AIO_Printer_926.print_footercenter
print.printer_Dell_Photo_AIO_Printer_926.print_footerleft
print.printer_Dell_Photo_AIO_Printer_926.print_footerright
print.printer_Dell_Photo_AIO_Printer_926.print_headercenter
print.printer_Dell_Photo_AIO_Printer_926.print_headerleft
print.printer_Dell_Photo_AIO_Printer_926.print_headerright
print.printer_Dell_Photo_AIO_Printer_926.print_in_color
true
print.printer_Dell_Photo_AIO_Printer_926.print_margin_bottom
0.5
print.printer_Dell_Photo_AIO_Printer_926.print_margin_left
1.5
print.printer_Dell_Photo_AIO_Printer_926.print_margin_right
0.5
print.printer_Dell_Photo_AIO_Printer_926.print_margin_top
0.5
print.printer_Dell_Photo_AIO_Printer_926.print_oddpages
true
print.printer_Dell_Photo_AIO_Printer_926.print_orientation
0
print.printer_Dell_Photo_AIO_Printer_926.print_page_delay
50
print.printer_Dell_Photo_AIO_Printer_926.print_paper_data
1
print.printer_Dell_Photo_AIO_Printer_926.print_paper_height
11.00
print.printer_Dell_Photo_AIO_Printer_926.print_paper_size_type
0
print.printer_Dell_Photo_AIO_Printer_926.print_paper_size_unit
0
print.printer_Dell_Photo_AIO_Printer_926.print_paper_width
8.50
print.printer_Dell_Photo_AIO_Printer_926.print_reversed
false
print.printer_Dell_Photo_AIO_Printer_926.print_scaling
1.00
print.printer_Dell_Photo_AIO_Printer_926.print_shrink_to_fit
true
print.printer_Dell_Photo_AIO_Printer_926.print_to_file
false
print.printer_Dell_Photo_AIO_Printer_926.print_unwriteable_margin_bottom
0
print.printer_Dell_Photo_AIO_Printer_926.print_unwriteable_margin_left
0
print.printer_Dell_Photo_AIO_Printer_926.print_unwriteable_margin_right
0
print.printer_Dell_Photo_AIO_Printer_926.print_unwriteable_margin_top
0
privacy.cpd.downloads
false
privacy.cpd.formdata
false
privacy.cpd.history
false
privacy.cpd.sessions
false
privacy.donottrackheader.enabled
true
privacy.sanitize.migrateFx3Prefs
true
privacy.sanitize.timeSpan
0
security.warn_viewing_mixed
false
Graphics
Adapter Description
ATI Radeon HD 4200
Adapter Drivers
aticfx64 aticfx64 aticfx32 aticfx32 atiumd64 atidxx64 atiumdag atidxx32 atiumdva atiumd6a atitmm64
Adapter RAM
256
Device ID
0x9710
Direct2D Enabled
true
DirectWrite Enabled
true (6.2.9200.16492)
Driver Date
6-29-2011
Driver Version
8.862.3.0
GPU #2 Active
false
GPU Accelerated Windows
2/2 Direct3D 10
Vendor ID
0x1002
WebGL Renderer
Google Inc. -- ANGLE (ATI Radeon HD 4200 )
AzureCanvasBackend
direct2d
AzureContentBackend
direct2d
AzureFallbackCanvasBackend
cairo
JavaScript
Incremental GC
true
Accessibility
Activated
true
Prevent Accessibility
0
Library Versions
Expected minimum version
Version in use
NSPR
4.9.4
4.9.4
NSS
3.14.1.0 Basic ECC
3.14.1.0 Basic ECC
NSSSMIME
3.14.1.0 Basic ECC
3.14.1.0 Basic ECC
NSSSSL
3.14.1.0 Basic ECC
3.14.1.0 Basic ECC
NSSUTIL
3.14.1.0
3.14.1.0

jscher2000
  • Top 10 Contributor
2349 solutions 20824 answers

That certificate is clearly not correct, since the real certificate expires in 2014, not 2039, and is issued by Verisign.

A standard diagnostic to bypass interference by extensions (and some custom settings) is to try Firefox's Safe Mode.

First, I recommend backing up your Firefox settings in case something goes wrong. See Back up and restore information in Firefox profiles. (You can copy your entire Firefox profile folder somewhere outside of the Mozilla folder.)

Next, restart Firefox in Firefox's Safe Mode (Troubleshoot Firefox issues using Safe Mode) using

Help > Restart with Add-ons Disabled

In the dialog, click "Start in Safe Mode."

If the problem sites work correctly, this points to one of your extensions or custom settings as the problem.

To also disable plugins, you can try here:

orange Firefox button or classic Tools menu > Add-ons > Plugins category

Any change?

cor-el
  • Top 10 Contributor
  • Moderator
10742 solutions 96657 answers

Check the date and time in the clock on your computer: (double) click the clock icon on the Windows Taskbar.

Make sure that you use the latest version of Rapport.


Try to disable hardware acceleration in Firefox.

Try to set the gfx.content.azure.enabled pref to false or if this didn't help disable Direct2D by setting the gfx.direct2d.disabled pref to true on the about:config page and leave hardware acceleration otherwise enabled.

Question owner

Okay. I updated Rapport. When I started in Safe Mode, the bold and random garbled text problem was gone. However, the bad certificate problem for Paypal remained. I disabled all of the plug-ins and tried Paypal again. The bad certificate didn't come up this time. So is there a quick way to find out which add-on/plug-in is causing problems with my Firefox?

jscher2000
  • Top 10 Contributor
2349 solutions 20824 answers

Hi TheGDBatgirl, I don't know of a quick way to determine which extension(s) and/or plugin(s) are the problem. I suggest you simply disable everything that is not essential, in other words, you can't browse without them. I suspect the ones in this category are the Shockwave Flash plugin, one or more of your media player plugins, AdBlock Plus, Evernote Web Clipper (if you use it), Xmarks (if you use it), and Greasemonkey and Stylish if you rely on userscripts/userstyles. If you can browse normally with that set, you'll probably discover the culprit when you re-enable it in the future.

Question owner

When I used Firefox with Safe Mode, everything is fine. I enabled a couple add-ons and restarted FF. Same problem. I disabled those add-ons. Same problem. The only time it doesn't do it is if I am in Safe Mode. I am really confused.

cor-el
  • Top 10 Contributor
  • Moderator
10742 solutions 96657 answers

Did you try to disable hardware acceleration in Firefox?

Question owner

Yes. Still the same.

First I reset Firefox. Same thing. Uninstalled completely and reinstalled, same thing and now I'm getting this on almost every website:

www.google.com uses an invalid security certificate.

The certificate is not trusted because no issuer chain was provided.

(Error code: sec_error_unknown_issuer)

cor-el
  • Top 10 Contributor
  • Moderator
10742 solutions 96657 answers

Check out why the site is untrusted (see the Technical details) and if this is caused by a missing intermediate certificate then see if you can install this intermediate certificate from another source.

Some firewalls monitor secure (https) connections and send their own certificate instead of the website's certificate.

You can retrieve the certificate and check details like who issued certificates and expiration dates of certificates.

  • Click the link at the bottom of the error page: "I Understand the Risks"

Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".

  • Click the "View..." button and inspect the certificate and check who is the issuer.

You can see more Details like intermediate certificates that are used in the Details pane.

Question owner

Turns out the certificate problem was from the eRawards program. I uninstalled that and now I can access Paypal and eBay.

The only problem I'm having now is the randomly garbled text, bold text in Google and other sites, and now, whenever I click in a text box, it turns blue.