X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

How to get rid of redirect virus?

Posted

I get random redirects when I open webpages, how do I get rid of these?

Chosen solution

yes, you could also use that as a last resort if just removing this extension doesn't solve the issue.

it would also be nice if you can report back if the redirects stop after removing this fake flash extension - then i can arrange for it to be blocklisted, so that other affected users get protected too..

Read this answer in context 0

Additional System Details

Installed Plug-ins

  • Google Talk Plugin Video Accelerator version:0.1.44.24
  • Version 3.15.2.12038
  • Shockwave Flash 11.6 r602
  • Google Update
  • Adobe PDF Plug-In For Firefox and Netscape 11.0.02
  • 2.1.2
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Next Generation Java Plug-in 10.9.2 for Mozilla browsers
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • 4.1.10329.0
  • NPWLPG
  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Office Authorization plug-in for NPAPI browsers

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:19.0) Gecko/20100101 Firefox/19.0

More Information

philipp
  • Top 10 Contributor
  • Moderator
2046 solutions 8901 answers

hello, this sounds like a problem caused by malware on your pc. please go to firefox > addons > extensions & remove any suspicious entries (toolbars, things that you have not installed intentionally, don't know what purpose they serve, etc). also go to the windows control panel / programs and remove all toolbars or potentially unwanted software from there and run a full scan of your system with the security software that you have in place and different other tools like the free version of malwarebytes & adwcleaner.

Remove a toolbar that has taken over your Firefox search or home page Troubleshoot Firefox issues caused by malware

Question owner

Hi, The only thing in my extension tab is...

  • Flash Player
  • Download Usage
  • Ad-Block

Am currently uninstalling programs I don't know (not many of them)

Thanks

philipp
  • Top 10 Contributor
  • Moderator
2046 solutions 8901 answers

hello, when flash player is listed under extensions this is already suspicious - normally it is an entry that is listed under plugins. (i've also never heart of "download usage"). could you go to firefox > help > troubleshooting information, copy the content of the page & paste them here into a reply on the forum? thanks...

Question owner

Hi, Thanks for your response, Should I get rid of the flash player extension then? The Download usage tells you how much of your monthly download quota you have used. Have been using it for several months before the problem occurred.

Thanks

philipp
  • Top 10 Contributor
  • Moderator
2046 solutions 8901 answers

Helpful Reply

in the firefox > help > troubleshooting information page the extensions are listed with their ID & version number - that would be inteesting to know before i recommend deleting it, in any case you might also disable the entry (a restart of the browser might be necessary afterwards) & see if this has any effect on the redirect issue.

Question owner

Hi, Thank you so much for your fast responses! This is a copy and paste of my extensions....




Adblock Plus2.2.3 true {d10d0bf8-f5b5-c8b4-8b2-2b9879e08c5d}

Flash Player11 true XN4Xgjw7n4@yUWgc.com

Net Usage Item1.2.342.1 true {DA1B0AB5-7DD3-4066-BC2A-64AABBDD0A8B}

Modified by Blakester97

philipp
  • Top 10 Contributor
  • Moderator
2046 solutions 8901 answers

ok, this flash player addon is definitely malicious. maybe you also want to reset firefox in case it as done some other customizations...

Reset Firefox – easily fix most problems

Question owner

When I reset firefox, what does it reset, will it reset my favorites and password remember etc?

Thanks so much for the help!!!!

philipp
  • Top 10 Contributor
  • Moderator
2046 solutions 8901 answers

your bookmarks & passwords will be kept but most of the other settings will be reverted to their factory default (this is also explained in more detail in the help article i've linked to).

Question owner

One last question, Would it be worth waiting and seeing if the problem is resolved before resetting? Or just did it anyway?

Thanks so much for all your time and help!!!

philipp
  • Top 10 Contributor
  • Moderator
2046 solutions 8901 answers

Chosen Solution

yes, you could also use that as a last resort if just removing this extension doesn't solve the issue.

it would also be nice if you can report back if the redirects stop after removing this fake flash extension - then i can arrange for it to be blocklisted, so that other affected users get protected too..

Question owner

I will get back post back in about 24 hours on my progress with the issue. Thanks again for all your help, havn't had any redirects so far!

Question owner

Hi, Just confirming the problem is now solved cause was flash player.

Thanks for the help!

danimini 0 solutions 2 answers

Hi,

When opening a new tab Firefox redirects to an untrusted site, wich doesn't happen if I open a new window.

Please tell me if something is wrong with the extensions. Here is the list:

Add Google Search To New Tab Page1.0.2truenewtabgoogle@graememcc.co.ukAdobe Contribute Toolbar6.1true{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
BrowserProtect2.6.1095.52true{0F827075-B026-42F3-885D-98981EE7B1AE}
Java Console6.0.35true{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
Java Console6.0.37true{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
McAfee SiteAdvisor3.6.0true{4ED1F68A-5463-4931-9384-8FFF5ED91D92}
Adobe Acrobat - Create PDF1.0falseweb2pdfextension@web2pdf.adobedotcom

If nothing is wrong with that, please tell me if there are other ways to solve the problem.

Thank you.

Modified by cor-el

philipp
  • Top 10 Contributor
  • Moderator
2046 solutions 8901 answers

Helpful Reply

hello danimini, the browser protect addon is malicious - please go to firefox > addons > extensions & remove/disable it. also go to the windows control panel / programs and remove any similar named software and other suspicious entries from there (toolbars or potentially unwanted software, things you have not installed intentionally or don't know what purpose they serve).

also run a full scan of your system with security tools like the free version of malwarebytes & adwcleaner.

Remove a toolbar that has taken over your Firefox search or home page

afterwards install the search reset addon - it will revert the most common customizations those adware programs do in firefox back to the default: https://addons.mozilla.org/firefox/addon/searchreset/

danimini 0 solutions 2 answers

Hi,

It worked just fine after the I have installed the reset addon.

Thank you.

drbobj 0 solutions 1 answers

When I checked my extensions I also had Adblock Plus2.2.3 I don't ever remember installing it. I disabled it and I think it got rid if the redirects I was getting when I clicked on the first search result in google. It may be too early to tell yet for sure though but I think it worked

alrachid 0 solutions 1 answers

I seriously messed with this virus for over 9 hours and finally the only thing I was able to get to actually this link here. It costs a little bit of money but well worth it in my opinion and you know what I mean if you had the virus, it could drive a man mad. http:// 659750nqjyj4nua6ni-bf3yzdg.hop. clickbank.net/


Edit: broke questionable link.

Modified by James

no1angel 0 solutions 1 answers

Hi,

I am also getting random redirects in firefox, I have deleted and reinstalled it with no change.

I can not find anything unusual in extensions.

In control panel I am curious about these

Validity WBF DDK Synaptics Pointing Device Driver Mozilla Maintenance Service

If anyone has any ideas that would be great :-)

phyzzique 0 solutions 3 answers

As per your suggestion, I found some Yahoo toolbar add-ons I know I didn't add. I disabled them, and sure enough, my Google redirect problem went away! Thank you thank you thank you!

Modified by phyzzique