
My Firefox startpage was hijacked by portaldosites.com
Hi there. Two days ago, my Firefox homepage was hijacked by a page portaldosites.com
I have followed the instructions here -> http://www.portaldosites.com/uninstall.html but it doesn't work.
1. - I didn't visited this site. I don't know how I got this malware. 2. - I have Avira antivirus updated and running. 3. - I have malwarebytes updated and running 4. - I did scan my pc with both programs and nothing was detected 5.- This only happens when I open the browser, not when I click the home button (if I click the home button, I go to my homepage defined in Options) 6.- I reset my Firefox installation but to no avail 7.- My about:config page doesn't show anything about portaldosites.com
I use Firefox 20.0.1 in Windows 7 Home Premium and this also happens in IE and Chrome (which I rarelly use).
I'm definitely infected, but I can't seem to find out how to remove this. Any help would be much appreciated.
Thanks.
Modified
Chosen solution
ok, this all looks fairly normal.
does the same problem happen when you close all firefox windows, press the windows-key+R and open firefox.exe? if not then maybe the shortcut to launch firefox is manipulated - right-click it & go to properties and make sure that there is no - portaldosites.com command line switch appended at the end of the target field .
Read this answer in context 👍 12All Replies (8)
Hello,
The Reset Firefox feature can fix many issues by restoring Firefox to its factory default state while saving your essential information. Note: This will cause you to lose any Extensions, Open websites, and some Preferences.
To Reset Firefox do the following:
- Go to Firefox > Help > Troubleshooting Information.
- Click the "Reset Firefox" button.
- Firefox will close and reset. After Firefox is done, it will show a window with the information that is imported. Click Finish.
- Firefox will open with all factory defaults applied.
Further information can be found in the Refresh Firefox - reset add-ons and settings article.
Did this fix your problems? Please report back to us!
Thank you.
Hi, Tylerdowner. Thank you for replying.
As I stated in point 6, I already did that, but after restarting, the problem persists...
could you go to firefox > help > troubleshooting information, copy the contents of that page and paste them here into a reply on the forum? this might give us a clue what is going on...
Sure. Here it goes:
{
"application": { "name": "Firefox", "version": "20.0.1", "userAgent": "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0", "supportURL": "http://support.mozilla.org/1/firefox/20.0.1/WINNT/pt-PT/" }, "modifiedPreferences": { "accessibility.typeaheadfind.flashBar": 0, "browser.cache.disk.capacity": 358400, "browser.cache.disk.smart_size.first_run": false, "browser.cache.disk.smart_size.use_old_max": false, "browser.cache.disk.smart_size_cached_value": 358400, "browser.places.smartBookmarksVersion": 4, "browser.search.useDBForOrder": true, "browser.startup.homepage_override.mstone": "20.0.1", "browser.startup.homepage": "chrome://fvd.speeddial/content/fvd_about_blank.html", "browser.startup.homepage_override.buildID": "20130409194949", "browser.tabs.closeWindowWithLastTab": false, "browser.urlbar.maxRichResults": 15, "dom.w3c_touch_events.expose": false, "dom.mozApps.used": true, "extensions.lastAppVersion": "20.0.1", "gfx.blacklist.layers.direct3d9": 4, "gfx.direct3d.prefer_10_1": true, "gfx.blacklist.direct2d": 4, "network.cookie.prefsMigrated": true, "places.history.expiration.transient_current_max_pages": 67855, "places.database.lastMaintenance": 1368128544, "plugin.disable_full_page_plugin_for_types": "application/pdf", "privacy.cpd.siteSettings": true, "privacy.cpd.offlineApps": true, "privacy.sanitize.timeSpan": 0, "privacy.sanitize.migrateFx3Prefs": true }, "graphics": { "numTotalWindows": 1, "numAcceleratedWindows": 0, "windowLayerManagerType": "Basic", "numAcceleratedWindowsMessage": [ "blockedGfxCard" ], "adapterDescription": "AMD Radeon HD 6320 Graphics", "adapterVendorID": "0x1002", "adapterDeviceID": "0x9806", "adapterRAM": "384", "adapterDrivers": "aticfx64 aticfx64 aticfx64 aticfx32 aticfx32 aticfx32 atiumd64 atidxx64 atidxx64 atiumdag atidxx32 atidxx32 atiumdva atiumd6a atitmm64", "driverVersion": "8.930.13.6000", "driverDate": "3-21-2012", "adapterDescription2": "", "adapterVendorID2": "", "adapterDeviceID2": "", "adapterRAM2": "", "adapterDrivers2": "", "driverVersion2": "", "driverDate2": "", "isGPU2Active": false, "direct2DEnabled": false, "directWriteEnabled": false, "directWriteVersion": "6.2.9200.16492", "direct2DEnabledMessage": [ "blockedGfxCard" ], "webglRenderer": "Google Inc. -- ANGLE (AMD Radeon HD 6320 Graphics)", "info": { "AzureCanvasBackend": "cairo", "AzureFallbackCanvasBackend": "none", "AzureContentBackend": "none" } }, "javaScript": { "incrementalGCEnabled": true }, "accessibility": { "isActive": false, "forceDisabled": 0 }, "libraryVersions": { "NSPR": { "minVersion": "4.9.5", "version": "4.9.5" }, "NSS": { "minVersion": "3.14.3.0 Basic ECC", "version": "3.14.3.0 Basic ECC" }, "NSSUTIL": { "minVersion": "3.14.3.0", "version": "3.14.3.0" }, "NSSSSL": { "minVersion": "3.14.3.0 Basic ECC", "version": "3.14.3.0 Basic ECC" }, "NSSSMIME": { "minVersion": "3.14.3.0 Basic ECC", "version": "3.14.3.0 Basic ECC" } }, "userJS": { "exists": false }, "extensions": [ { "name": "Adblock Plus", "version": "2.2.4", "isActive": true, "id": "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}" }, { "name": "Add to Search Bar", "version": "2.0", "isActive": true, "id": "add-to-searchbox@maltekraus.de" }, { "name": "Classic Toolbar Buttons", "version": "1.2.3", "isActive": true, "id": "CSTBB@NArisT2_Noia4dev" }, { "name": "Empty Cache Button", "version": "2.2", "isActive": true, "id": "{4cc4a13b-94a6-7568-370d-5f9de54a9c7f}" }, { "name": "EverSync - Sync bookmarks between Firefox / Chrome", "version": "2.1.1", "isActive": true, "id": "fvdmedia@gmail.com" }, { "name": "FVD Speed Dial with Full Online Sync", "version": "4.3.7", "isActive": true, "id": "pavel.sherbakov@gmail.com" }, { "name": "Greasemonkey", "version": "1.8", "isActive": true, "id": "{e4a8a97b-f2ed-450b-b12d-ee082ba24781}" }, { "name": "Memory Restart", "version": "1.12", "isActive": true, "id": "memoryrestart@teamextension.com" } ]
}
Chosen Solution
ok, this all looks fairly normal.
does the same problem happen when you close all firefox windows, press the windows-key+R and open firefox.exe? if not then maybe the shortcut to launch firefox is manipulated - right-click it & go to properties and make sure that there is no - portaldosites.com command line switch appended at the end of the target field .
Did you check the Firefox desktop shortcut to make sure that this URL isn't appended?
Do a clean reinstall and delete the Firefox program folder before (re)installing a fresh copy of the current Firefox release.
Download a fresh Firefox copy and save the file to the desktop.
- Firefox 20.0.x: http://www.mozilla.org/en-US/firefox/all.html
Uninstall your current Firefox version, if possible, to cleanup the Windows registry and settings in security software.
- Do NOT remove personal data when you uninstall your current Firefox version, because all profile folders will be removed and you will lose all personal data like bookmarks and passwords from profiles of other Firefox versions.
Remove the Firefox program folder before installing that newly downloaded copy of the Firefox installer.
- (32 bit Windows) "C:\Program Files\Mozilla Firefox\"
- (64 bit Windows) "C:\Program Files (x86)\Mozilla Firefox\"
- It is important to delete the Firefox program folder to remove all the files and make sure that there are no problems with files that were leftover after uninstalling.
- http://kb.mozillazine.org/Uninstalling_Firefox
Your bookmarks and other personal data are stored in the Firefox profile folder and won't be affected by an uninstall and (re)install, but make sure that "remove personal data" is NOT selected when you uninstall Firefox.
It's exactly that, philipp!
I thought about doing that before, but with some many things to do I forgot to check that. Solved the problem in Firefox, Chrome and Internet Explorer.
Thank you very much!
you're very welcome - glad that you could get rid of that nuisance!