Windows 10 will reach EOS (end of support) on October 14, 2025. For more information, see this article.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

My Firefox startpage was hijacked by portaldosites.com

  • 8 replies
  • 14 have this problem
  • 1 view
  • Last reply by philipp

more options

Hi there. Two days ago, my Firefox homepage was hijacked by a page portaldosites.com

I have followed the instructions here -> http://www.portaldosites.com/uninstall.html but it doesn't work.

1. - I didn't visited this site. I don't know how I got this malware. 2. - I have Avira antivirus updated and running. 3. - I have malwarebytes updated and running 4. - I did scan my pc with both programs and nothing was detected 5.- This only happens when I open the browser, not when I click the home button (if I click the home button, I go to my homepage defined in Options) 6.- I reset my Firefox installation but to no avail 7.- My about:config page doesn't show anything about portaldosites.com

I use Firefox 20.0.1 in Windows 7 Home Premium and this also happens in IE and Chrome (which I rarelly use).

I'm definitely infected, but I can't seem to find out how to remove this. Any help would be much appreciated.

Thanks.

Hi there. Two days ago, my Firefox homepage was hijacked by a page portaldosites.com I have followed the instructions here -> http://www.portaldosites.com/uninstall.html but it doesn't work. 1. - I didn't visited this site. I don't know how I got this malware. 2. - I have Avira antivirus updated and running. 3. - I have malwarebytes updated and running 4. - I did scan my pc with both programs and nothing was detected 5.- This only happens when I open the browser, not when I click the home button (if I click the home button, I go to my homepage defined in Options) 6.- I reset my Firefox installation but to no avail 7.- My about:config page doesn't show anything about portaldosites.com I use Firefox 20.0.1 in Windows 7 Home Premium and this also happens in IE and Chrome (which I rarelly use). I'm definitely infected, but I can't seem to find out how to remove this. Any help would be much appreciated. Thanks.

Modified by Fragha

Chosen solution

ok, this all looks fairly normal.

does the same problem happen when you close all firefox windows, press the windows-key+R and open firefox.exe? if not then maybe the shortcut to launch firefox is manipulated - right-click it & go to properties and make sure that there is no - portaldosites.com command line switch appended at the end of the target field .

Read this answer in context 👍 12

All Replies (8)

more options

Hello,

The Reset Firefox feature can fix many issues by restoring Firefox to its factory default state while saving your essential information. Note: This will cause you to lose any Extensions, Open websites, and some Preferences.

To Reset Firefox do the following:

  1. Go to Firefox > Help > Troubleshooting Information.
  2. Click the "Reset Firefox" button.
  3. Firefox will close and reset. After Firefox is done, it will show a window with the information that is imported. Click Finish.
  4. Firefox will open with all factory defaults applied.

Further information can be found in the Refresh Firefox - reset add-ons and settings article.

Did this fix your problems? Please report back to us!

Thank you.

more options

Hi, Tylerdowner. Thank you for replying.

As I stated in point 6, I already did that, but after restarting, the problem persists...

more options

could you go to firefox > help > troubleshooting information, copy the contents of that page and paste them here into a reply on the forum? this might give us a clue what is going on...

more options

Sure. Here it goes:


{

 "application": {
   "name": "Firefox",
   "version": "20.0.1",
   "userAgent": "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0",
   "supportURL": "http://support.mozilla.org/1/firefox/20.0.1/WINNT/pt-PT/"
 },
 "modifiedPreferences": {
   "accessibility.typeaheadfind.flashBar": 0,
   "browser.cache.disk.capacity": 358400,
   "browser.cache.disk.smart_size.first_run": false,
   "browser.cache.disk.smart_size.use_old_max": false,
   "browser.cache.disk.smart_size_cached_value": 358400,
   "browser.places.smartBookmarksVersion": 4,
   "browser.search.useDBForOrder": true,
   "browser.startup.homepage_override.mstone": "20.0.1",
   "browser.startup.homepage": "chrome://fvd.speeddial/content/fvd_about_blank.html",
   "browser.startup.homepage_override.buildID": "20130409194949",
   "browser.tabs.closeWindowWithLastTab": false,
   "browser.urlbar.maxRichResults": 15,
   "dom.w3c_touch_events.expose": false,
   "dom.mozApps.used": true,
   "extensions.lastAppVersion": "20.0.1",
   "gfx.blacklist.layers.direct3d9": 4,
   "gfx.direct3d.prefer_10_1": true,
   "gfx.blacklist.direct2d": 4,
   "network.cookie.prefsMigrated": true,
   "places.history.expiration.transient_current_max_pages": 67855,
   "places.database.lastMaintenance": 1368128544,
   "plugin.disable_full_page_plugin_for_types": "application/pdf",
   "privacy.cpd.siteSettings": true,
   "privacy.cpd.offlineApps": true,
   "privacy.sanitize.timeSpan": 0,
   "privacy.sanitize.migrateFx3Prefs": true
 },
 "graphics": {
   "numTotalWindows": 1,
   "numAcceleratedWindows": 0,
   "windowLayerManagerType": "Basic",
   "numAcceleratedWindowsMessage": [
     "blockedGfxCard"
   ],
   "adapterDescription": "AMD Radeon HD 6320 Graphics",
   "adapterVendorID": "0x1002",
   "adapterDeviceID": "0x9806",
   "adapterRAM": "384",
   "adapterDrivers": "aticfx64 aticfx64 aticfx64 aticfx32 aticfx32 aticfx32 atiumd64 atidxx64 atidxx64 atiumdag atidxx32 atidxx32 atiumdva atiumd6a atitmm64",
   "driverVersion": "8.930.13.6000",
   "driverDate": "3-21-2012",
   "adapterDescription2": "",
   "adapterVendorID2": "",
   "adapterDeviceID2": "",
   "adapterRAM2": "",
   "adapterDrivers2": "",
   "driverVersion2": "",
   "driverDate2": "",
   "isGPU2Active": false,
   "direct2DEnabled": false,
   "directWriteEnabled": false,
   "directWriteVersion": "6.2.9200.16492",
   "direct2DEnabledMessage": [
     "blockedGfxCard"
   ],
   "webglRenderer": "Google Inc. -- ANGLE (AMD Radeon HD 6320 Graphics)",
   "info": {
     "AzureCanvasBackend": "cairo",
     "AzureFallbackCanvasBackend": "none",
     "AzureContentBackend": "none"
   }
 },
 "javaScript": {
   "incrementalGCEnabled": true
 },
 "accessibility": {
   "isActive": false,
   "forceDisabled": 0
 },
 "libraryVersions": {
   "NSPR": {
     "minVersion": "4.9.5",
     "version": "4.9.5"
   },
   "NSS": {
     "minVersion": "3.14.3.0 Basic ECC",
     "version": "3.14.3.0 Basic ECC"
   },
   "NSSUTIL": {
     "minVersion": "3.14.3.0",
     "version": "3.14.3.0"
   },
   "NSSSSL": {
     "minVersion": "3.14.3.0 Basic ECC",
     "version": "3.14.3.0 Basic ECC"
   },
   "NSSSMIME": {
     "minVersion": "3.14.3.0 Basic ECC",
     "version": "3.14.3.0 Basic ECC"
   }
 },
 "userJS": {
   "exists": false
 },
 "extensions": [
   {
     "name": "Adblock Plus",
     "version": "2.2.4",
     "isActive": true,
     "id": "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}"
   },
   {
     "name": "Add to Search Bar",
     "version": "2.0",
     "isActive": true,
     "id": "add-to-searchbox@maltekraus.de"
   },
   {
     "name": "Classic Toolbar Buttons",
     "version": "1.2.3",
     "isActive": true,
     "id": "CSTBB@NArisT2_Noia4dev"
   },
   {
     "name": "Empty Cache Button",
     "version": "2.2",
     "isActive": true,
     "id": "{4cc4a13b-94a6-7568-370d-5f9de54a9c7f}"
   },
   {
     "name": "EverSync - Sync bookmarks between Firefox / Chrome",
     "version": "2.1.1",
     "isActive": true,
     "id": "fvdmedia@gmail.com"
   },
   {
     "name": "FVD Speed Dial with Full Online Sync",
     "version": "4.3.7",
     "isActive": true,
     "id": "pavel.sherbakov@gmail.com"
   },
   {
     "name": "Greasemonkey",
     "version": "1.8",
     "isActive": true,
     "id": "{e4a8a97b-f2ed-450b-b12d-ee082ba24781}"
   },
   {
     "name": "Memory Restart",
     "version": "1.12",
     "isActive": true,
     "id": "memoryrestart@teamextension.com"
   }
 ]

}

more options

Chosen Solution

ok, this all looks fairly normal.

does the same problem happen when you close all firefox windows, press the windows-key+R and open firefox.exe? if not then maybe the shortcut to launch firefox is manipulated - right-click it & go to properties and make sure that there is no - portaldosites.com command line switch appended at the end of the target field .

more options

Did you check the Firefox desktop shortcut to make sure that this URL isn't appended?

Do a clean reinstall and delete the Firefox program folder before (re)installing a fresh copy of the current Firefox release.

Download a fresh Firefox copy and save the file to the desktop.

Uninstall your current Firefox version, if possible, to cleanup the Windows registry and settings in security software.

  • Do NOT remove personal data when you uninstall your current Firefox version, because all profile folders will be removed and you will lose all personal data like bookmarks and passwords from profiles of other Firefox versions.

Remove the Firefox program folder before installing that newly downloaded copy of the Firefox installer.

  • (32 bit Windows) "C:\Program Files\Mozilla Firefox\"
  • (64 bit Windows) "C:\Program Files (x86)\Mozilla Firefox\"

Your bookmarks and other personal data are stored in the Firefox profile folder and won't be affected by an uninstall and (re)install, but make sure that "remove personal data" is NOT selected when you uninstall Firefox.


more options

It's exactly that, philipp!

I thought about doing that before, but with some many things to do I forgot to check that. Solved the problem in Firefox, Chrome and Internet Explorer.

Thank you very much!

more options

you're very welcome - glad that you could get rid of that nuisance!