Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Firefox has been hijacked by adware

  • 12 replies
  • 24 have this problem
  • 19128 views
  • Last reply by jdkoerner

more options

My firefox has been fine for years up until a couple of days ago..

Sometimes when typing into google the autocomplete changes what im typing and sends me to the wrong site.

Any site i visit randomly redirects to worldsocialsurvey.com, and then takes me to loads of shopping pages when i cancel it.

I have ran virus scans with, Trend,Malwarebytes, Superantispyware and used combofix yet all of these say i am clean and nothing is wrong.

I have looked in about:config, and looked for anything that may redirect me like Babylon has a habit of doing, but it all appears to be fine.

Any ideas?

I have the latest version of firefox

All Replies (12)

more options

I also get taken to this site quite alot: http://8.29.133.134/update/download5mtuk.php?src=-&kw=.co.uk&lp=4&keyw_passthru=.co.uk

god dam annoying!

more options

Use these steps to remove saved (form) data from a drop down list:

  1. Click the (empty) input field on the web page to open the drop down list
  2. Highlight an entry in the drop down list
  3. Press the Delete key (on Mac: Shift+Delete) to remove it.

You can remove all stored data from a specific domain via "Forget About This Site" in the right-click context menu of an history entry (Show All History or History sidebar) or via the about:permissions page.

Using "Forget About This Site" will remove everything like bookmarks, cookies, passwords, cache, history, and exceptions from that domain, so be cautious and if you have a password or other data from that domain that you do not want to lose then make a note of those passwords and bookmarks. You can't recover from that "forget" unless you have a backup of the affected files.

It doesn't have any lasting effect, so if you revisit such a 'forgotten' website then data from that website will be saved once again.

more options

Many site issues can be caused by corrupt cookies or cache. In order to try to fix these problems, the first step is to clear both cookies and the cache. Note: This will temporarily log you out of all sites you're logged in to. To clear cache and cookies do the following:

  1. Go to Firefox > History > Clear recent history or (if no Firefox button is shown) go to Tools > Clear recent history.
  2. Under "Time range to clear", select "Everything".
  3. Now, click the arrow next to Details to toggle the Details list active.
  4. From the details list, check Cache and Cookies and uncheck everything else.
  5. Now click the Clear now button.

Further information can be found in the Clear your cache, history and other personal information in Firefox article.

Did this fix your problems? Please report back to us!

____________________________________________________________________________

Change your Home page

more options

Here is a safe and easy method to fix these adware malware problems that you have been experiencing --- especially removing the Browser Hijacker.Deskbar Redirect installed by adware-malware.

First, download the Free versions of Superantispyware and Malwarebytes. Install them carefully making sure that you only install the programs themselves and not the extra toolbars and other apps often bundled with freeware. Update the programs with the latest database definitions from their websites.

Second. Run superantispyware in full scan mode. It should detect and remove all or the majority of these adware infections including the adware browser redirect from that has written into your registry.

Third. Run the malwarebytes root kit scan. Then run a full malwarebytes scan of your memory and drives to detect anything that superantispyware missed.

Fourth. Watch out for fake popup messages telling you to update your software -- even if these messages look like they are from Adobe or Java, etc. This is part of the adware scam originating from many sites including http://8.29.133.134 mentioned by a few users who have been redirected there.

That site, airdwnlds.com , is a marketing site that distributes software applications and updates infected with adware programs.

Their latest scam is related to the ongoing Java 7 version 21 update.

Today, I received 3 popup messages that claim to be from Java-Oracle, but actually originate from airdwnlds.com. The popup states that my version of java is out of date and advises me to click the download link on the message to update Java.

The message is an exact copy of the real Java update message except for the large headings in either green or bolded red that say:

“Free Java Update (Required)

Download and Update Java for your desktop computer now!  
Version 7 21. “

But the download file origination link indicates that the file is from airdwnlds.com and not from java com. And the files sizes and names for the 7 21 update are different. The airdwnlds.com file, java.exe, is 1099mb in size, while the real java install file, jpxinstall.exe is 872mb.

So it appears that the airdwnlds.com version contains some extra adware bundled with the java update.

I tried to contact java about this issue, but they don't have any contact links for users other than a customer site feedback link regarding the site visit experience. I'm not sure if they will respond and it does not appear that Java is serious about fixing it's many software issues.

Modified by riki99

more options

I find it absolutely incredible that Mozilla is risking its reputation by downloading an installation program with in it. You couldn't repair that before you let consumers trying foxfire for the first time find out that it came with infections? Even MS explorer never did that. Not only did my Symantic pick up the problems when I tried to execute the installation, just having the exe in my download folder caused an alarm.

more options

Firefox doesnt come with anythng but firefox, where is the url you downloaded from? and what is the install file name?

What happens when you install the real Mozilla Firefox?

more options

You know, it did enter my mind that I might not have been on the right page [although this was what came up first on Google]. Notice how much it looks like a mozilla page:

http://mozilla-firefox.todownload.com/?lp=adwords&tg=us&kw=Firefox%20more%3Alabel_firefox%20more%3Awebsearch&mt=b&ad=25224559398&pl=&ds=s&gclid=CJfIwI-75rgCFQee4AoddDoAJw

Seriously you should sue these people for something.

more options

Exactly, you didnt download the real Firefox! Report it to http://www.mozilla.org/en-US/legal/fraud-report/index.html

Thanks in advance!

And always download from

more options

Unfortunately, Google separates paid ads from "organic" search results only with a subtle background shading that can be hard to see if you aren't looking at your monitor at the angle that gives the greatest contrast. It's something to be on the lookout for whenever you are searching.

more options

I should have said it was beyond belief and then not believed it myself. Apologies to Mozilla Foundation et al. You might want to have a word with Google, as it was their algorithm that put it in the top two results for the search on Firefox.

more options

That is a advertisement, google ads are spyware/malware.

Modified by kobe

more options

I saw the yellow box! That is so deceptive! I'm going to see if there is a discussion about that on Reddit and Google groups. Don't be evil indeed. We buried that motto a long time ago.