X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

I've started getting pop-under ads every time I launch Firefox, and the uninstall instructions don't make sense, how can I stop these?

Posted

In the past couple of weeks, every time I launch Firefox, a full-size pop-under ad is also launched, regardless of what site I'm browsing.

The original ad was for a You Tube survey, and contains a link to coupondropdown.com, where there's a menu option for uninstalling. The uninstall instructions don't make sense, they don't mention what ad-on is controlling the ads, and I can't work out what's responsible for the ads from my very basic range of ad-ons.

The reason I'm writing is that the ads have progressed from annoying but harmless, to dangerous. The ad today was designed as a warning pop-up, text reads, "Threat Detected: Immediate Action Required. Fatal Registry Error ... click "Repair All" to eliminate all possible threats and clean your PC". I have screenshots of all the above.

I'm worried that another user, my son or mother, might take this warning seriously and install malware by accident. What can I do to prevent these ads? I expect this type of malware advertising on dodgy websites, but I'm getting them when I try to access hotmail, the news, etc, so it's not the website that's causing them.

Chosen solution

Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.

You can try these free programs to scan for malware, which work with your existing antivirus software:

Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.


Further information can be found in the Troubleshoot Firefox issues caused by malware article.

Also see

Read this answer in context 3

Additional System Details

Installed Plug-ins

  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Shockwave Flash 11.8 r800
  • Next Generation Java Plug-in 10.25.2 for Mozilla browsers
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • npsitesafety
  • VLC media player Web Plugin 2.0.6
  • Google Update
  • 5.1.20513.0
  • Adobe PDF Plug-In For Firefox and Netscape 11.0.03
  • Shockwave Flash 11.7 r700
  • Picasa plugin
  • Shockwave Flash 11.6 r602
  • iTunes Detector Plug-in
  • NPWLPG
  • Best Buy pc app Detector Plug-in

Application

  • Firefox 23.0.1
  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0
  • Support URL: http://support.mozilla.org/1/firefox/23.0.1/WINNT/en-US/

Extensions

  • Bookmark Favicon Changer 1.74 (bookmarkfaviconchanger@sonthakit)
  • FlashGot 1.5.5.5 ({19503e42-ca3c-4c27-b1e2-9cdb2170ee34})
  • GoPhotoIt 1.6 (gophoto@gophoto.it)
  • Online HD TV 1.2 (onlinehdtv@onlinehd.tv)
  • Photo Importer 1.1 (photoimporter@moveyourphotos.com)
  • Save as PDF 1.5 (save-as-pdf-ff@pdfcrowd.com)
  • Skype Click to Call 6.11.0.13348 ({82AF8DCA-6DE9-405D-BD5E-43525BDAD38A})
  • StumbleUpon 4.16 ({AE93811A-5C9A-4d34-8462-F7B864FC4696})
  • Troubleshooter 1.1a (troubleshooter@mozilla.org)
  • AVG Security Toolbar 15.5.0.2 (avg@toolbar) (Inactive)
  • Delicious Bookmarks 2.3.1 ({2fa4ed95-0317-4c6a-a74c-5f3e3912c1f9}) (Inactive)
  • Flashblock 1.5.17 ({3d7eb24f-2740-49df-8937-200b1cc08f8a}) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: Intel(R) HD Graphics Family
  • adapterDescription2:
  • adapterDeviceID: 0x0116
  • adapterDeviceID2:
  • adapterDrivers: igdumd64 igd10umd64 igd10umd64 igdumdx32 igd10umd32 igd10umd32
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterVendorID: 0x8086
  • adapterVendorID2:
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 6.2.9200.16492
  • driverDate: 6-26-2011
  • driverDate2:
  • driverVersion: 8.15.10.2430
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'direct2d', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'direct2d'}
  • isGPU2Active: False
  • numAcceleratedWindows: 1
  • numTotalWindows: 1
  • webglRenderer: Google Inc. -- ANGLE (Intel(R) HD Graphics Family)
  • windowLayerManagerType: Direct3D 10

Modified Preferences

  • accessibility.typeaheadfind.flashBar: 0
  • browser.cache.disk.capacity: 358400
  • browser.cache.disk.smart_size.first_run: False
  • browser.cache.disk.smart_size.use_old_max: False
  • browser.cache.disk.smart_size_cached_value: 358400
  • browser.places.smartBookmarksVersion: 4
  • browser.startup.homepage_override.buildID: 20130814063812
  • browser.startup.homepage_override.mstone: 23.0.1
  • browser.tabs.warnOnClose: False
  • dom.mozApps.used: True
  • dom.w3c_touch_events.expose: False
  • extensions.lastAppVersion: 23.0.1
  • font.name.serif.x-western: Verdana
  • gfx.direct3d.last_used_feature_level_idx: 0
  • gfx.direct3d.prefer_10_1: True
  • network.cookie.prefsMigrated: True
  • places.database.lastMaintenance: 1377329424
  • places.history.expiration.transient_current_max_pages: 104858
  • plugin.disable_full_page_plugin_for_types: application/pdf
  • plugin.importedState: True
  • privacy.cpd.downloads: False
  • privacy.cpd.formdata: False
  • privacy.cpd.history: False
  • privacy.cpd.sessions: False
  • privacy.sanitize.migrateFx3Prefs: True
  • privacy.sanitize.timeSpan: 0
  • security.warn_viewing_mixed: False
  • storage.vacuum.last.index: 1
  • storage.vacuum.last.places.sqlite: 1376069723

Misc

  • User JS: No
  • Accessibility: No
philipp
  • Top 10 Contributor
  • Moderator
2043 solutions 8891 answers

hello nailaaboukhater, please remove the GoPhotoIt 1.6, Online HD TV 1.2 and Photo Importer 1.1 extensions.

Waka_Flocka_Flame
  • Top 25 Contributor
529 solutions 5045 answers

Chosen Solution

Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.

You can try these free programs to scan for malware, which work with your existing antivirus software:

Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.


Further information can be found in the Troubleshoot Firefox issues caused by malware article.

Also see

Question owner

Thanks Philipp, I've removed these add-ons, and so far so good, no annoying ads apprearing. I really don't remember installing them, so am off now to scan for malware. Many thanks for your help, n

Question owner

Thanks Waka_Flocka_Flame, Philipp pointed out add-ons that I definitely had not installed myself, so going to scan for malware now. Many thanks for the very detailed answer, n

Helpful Reply

Found the source using Microsoft Safety Scanner on a full scan. The culprit was a Trojan:Win32/Sirefef!cfg