All Products Support Forum

Malwarebytes www.malwarebytes.com

-Log Details- Protection Event Date: 12/05/2024 Protection Event Time: 10:52 Log File: 0728216c-103d-11ef-bf81-74e6e24e33e7.json

-Software Information- Version: 4.6.12.323 Components Version: 1.0.2309 Update Package Version: 1.0.84577 Licence: Premium

-System Information- OS: Windows 10 (Build 19045.4355) CPU: x64 File System: NTFS User: System

-Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data- Category: RiskWare Domain: zeewhaih.com IP Address: 139.45.197.245 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Firefox\firefox.exe

(end)

Should I be worried about this?

Thank you Dave

If I delete my history of the websites I go on is there a way to either restore it or store it some place else in case I want to see it at a future time? Can I also do it If I delete my emails and I would like to see certain emails, again in the future? I use mostly Yahoo and Gmail? I'm using Windows 10.

Thanks

Hi there!

I'm trying to troubleshoot why firefox isn't connecting to my DNS over HTTPS instance running adguard home. Every other device (including another laptop) is able to set the DNS over HTTPS and connect successfully - but my desktop PC instance gets NS_ERROR_CONNECTION_REFUSED. Despite multiple reboots, ipconfig /flushdns, release/renew, etc...

Even my android phone is able to connect to it using the "private dns" feature (uses port 853 instead of 443).

I've been able to verify https access to the DNS server and it's querying successfully. It's just this one instance it won't connect.

Hello, I'm not very computer savvy so don't understand why this is happening or even what a blacklist is. I've attached screenshots. I tried to google what to do but don't understand the complicated things posted. Any help would be greatly appreciated.

I have been using 4 email accounts with TB for years now with no problems - 2 use IMAP gmail accounts and two POP mail accounts. In the last week, when I open TB (on a mac OS10.15.7) I am asked to enter the password for these two accounts. I have not changed the passwords for these two accounts anywhere else so I don't know why TB suddenly wants me to enter them. No matter what password I enter here, I am told the login failed and am asked to enter a new password. I enter a new password and go back to being asked for passwords again.

What password is TB looking for? Where is it stored so that I can look for it? When I go to Settings/Privacy and security/Saved passwords only passwords for the two gmail accounts are shown. Where can I find the passwords for the POP Mail Server and how do I reset them?

I've been using TB for years with an AT&T account on a Windows 10 desktop. Two days ago all was working well sending and receiving. I stepped away for an hour (without obvious updates or changes) and surprisingly it didn't work, with TB asking for a password but not accepting it. I deleted saved passwords and tried multiple times, even changing my AT&T email password twice. I could access the email account directly through the AT&T website using those passwords.

I spoke with an AT&T support rep and he had me delete the account in TB. I did so but now can't reestablish it. I've repeatedly tried to add a new email account using credentials I know are correct, trying numerous POP3 and IMAP protocols, all without success. When TB probes the AT&T servers it says it finds those parameters, but then when it checks the password it fails, simply giving the vague message "Unable to log in at server. Probably wrong configuration, username, or password."

I've spent two days researching this problem and trying proposed solutions such as disabling firewalls and anti-virus programs, clearing Windows and internet caches, deleting saved passwords, etc. I was able to set up the account using Outlook on this computer, and if this continues I'll unfortunately be forced to abandon TB and move to Outlook or similar as a substitute. Advice would be appreciated!

When I pull up my settings, it states that my browser is being monitored by my organization. The problem is that my laptop is my private laptop and not connected to any organization, at least, not with my knowledge. When I click on the link associated with the message, it lists two policy names. One policy value is locked with the word true after it. The other policy value is unlocked with the word false after it. What do I do?

I deleted Thunderbird, than Installed latest version. Now in Thunderbird "Use Primary Password" is clicked so I can't reset primary P/W. Previous P/W doesn't work because there is no P/W there as far as I can see. Instructions I found: "Tools> Developer Tools> Error> etc. There is no "Error" button. Instead I get Incoming Connection (attachment) and an other screen that I don't understand. Can you help please? Thank you Ilio Pieroni

For some reason when I opened Firefox this morning, my Firefox home page did not have any of my shortcuts. They all disappeared. Please have a look at the image attached to see what I mean.

I spent almost the entire day searching up the issue on the Internet and trying different things but they all did not work.

Look forward to your reply.

When will the new version of Firefox fixing the PDF reader vulnerability be rolled out?

Unless there is some patch one needs to re-install a non-vulnerable version.

https://www.cisecurity.org/advisory/a-vulnerability-in-mozilla-pdfjs-could-allow-for-arbitrary-code-execution_2024-046

https://support.mozilla.org/en-US/questions/1333222

Outgoing emails are blocked. This pop up shows. Receiver can send emails in.

Sending of the message failed. An error occurred while sending mail: Outgoing server (SMTP) error. The server responded: Connection refused - OB119. 206.83.122.10 is blacklisted in Abusix Mail Intelligence. See https://lookup.abusix.com/search?q=206.83.122.10 e{d292e9f3-c0c7-4d3c-b9ee-2a1d5d37c016}.

I keep needing to sign back into my main (default) Google account when I restart Firefox. Checked cookies and even disabled blocking of any cookies. Still same issue, and unique to Google. All other sites (Facebook, LinkedIn) stay signed in upon browser restart.

Issue summary: I lost over 100 sites listed in the Cookies and Site Data section when I simply removed a few websites in the Enhanced Tracking Protection section.

Under the Browser Privacy section, the two subheads, "Enhanced Tracking Protection" and "Cookies and Site Data" serve two distinct purposes—as I understand. Enhanced Tracking Protection will automatically add the URL of a webpage (that you currently have open) to the Enhanced Tracking Protection screen whenever you disable the shield in the search bar. This will turn off tracking for that website until turn you it back on. You can also manually add websites to the Enhanced Tracking Protection screen if you have mulitples to add. This whitelist will stay active until you delete them or click on the shield to turn it back on.

The Cookies and Site Data section further down, allows you to create a list of sites that you want to BLOCK, ALLOW FOR SESSION, or ALLOW cookies and site data to be used, and retained or not. This differs from the Enhanced Tracking Protection section.

Today, I wanted to delete one of the websites listed in the Enhanced Tracking Protection, and did so manually. But since there were only a couple listed (I rarely add to this screen), I simply clicked on "Remove All Websites" instead of "Remove Website." Unfortunately, when I went down to the Cookies and Site Data list (which I use all the time) to add a new URL today, my entire list was gone! I did not remove or enter anything in the Cookies and Site Data screen today, prior to using the Enhanced Tracking Protection screen.

As you can guess, I am sick because I had over 100 sites listed in the Cookies and Site Data section, and lost them all when I removed the few websites in the Enhanced Tracking Protection section. I don't know why or how this happened, but it is worth noting that I did just update Firefox this morning to vs 125.0.2 (from 124.0.2). My list is gone, but does anyone have a reason why it happened and is there a way to prevent that in the future? Or is it some kind of bug with the latest release or an earlier one. (I haven't opened the Enhanced Tracking Protection screen for a long time, so it could be from any past release.) Sorry I don't have more info than that. Any solutions would be appeciated.