Showing questions tagged: Show all questions
  • Archived

Firefox Exploit Screen-Captures

Hi guys, Well, I think I bring here a very interesting thing for the Mozilla team. I found I have some sort of exploit which takes screen captures whenever I click on any… (read more)

Hi guys, Well, I think I bring here a very interesting thing for the Mozilla team. I found I have some sort of exploit which takes screen captures whenever I click on any web page. It is specially active whenever you are entering sensitive information like when I log-in onto site accounts, o whenever I check something on the bank. I checked processes using process explorer, and everything points at Mozilla being very active and nothing else. I check the creation of those screen captures and they are always, there. I normally kill every process which is not necessary, and the ones left are just essential. I ran several bootable antivirues like Eset, Kaspersky and Bitdefender and they don't detect anything weird. I removed from a bootable CD all temp files this "thing" creates while making files and take snap of my screen. I goes back on when you are back on Windows. I know that something was going on when on the bank site I had a AVG-antivirus alert saying that an exploit was active and gave me the option to remove it. Other than that, you don't feel a thing. As said, it goes back the alert everytime you visit the bank and some other log-ins, specially while banking. I also disable all Firefox add-ons, as well as the Java on my computer -I believe there's some connection with Java here-. I have the suspicion that it is pdf/exploit coz I saw a glimpse of that name while uninstalling something which I thing was Facemoods. Not too sure how it got there. So there, guys!! I don't know where this "thing" resides, really does -it could be doing more things-, or how to get rid of it. PS: I saw a while ago that I have to mozilla folder hanging from "program files". One is mozilla.bak. I'm digging into this now. Any shed on this, you pros!! I'm not a pro myself, yet I love IT :-) Thanks a bunch in advance to anyone taking the time to solve the one big problem Firefox has and is going to have in the short run. BR F

Asked by Fistro 5 years ago

Last reply by guigs 5 years ago

  • Archived

when i open firefox after restarting the pc i get a 2nd popup window, which I need to close manually. Why??

When starting my pc up and opening firefox for the first time, I always get a second window. which despite no menu or header behaves like a second instance of firefox. (… (read more)

When starting my pc up and opening firefox for the first time, I always get a second window. which despite no menu or header behaves like a second instance of firefox. (not a tab). I have done searches, got add blockers on and removed all malware from my pc using kaspersky latest edition and databases.

HELP! I don't know where to go next.....

Asked by p.brookes 5 years ago

Last reply by FredMcD 5 years ago

  • Archived

Падения

постояные падения, в безопасный режим заходит, работает какое то время и падает, последняя ошибка Crash ID: bp-ab6058d9-b927-4627-8b53-7e5262141230, антивирусные программ… (read more)

постояные падения, в безопасный режим заходит, работает какое то время и падает, последняя ошибка Crash ID: bp-ab6058d9-b927-4627-8b53-7e5262141230, антивирусные программы тоже не устанавливаются, касперский написал не хватает цифровой подписи и не завершил установку, аваст тоже не установился, проблема также есть сбраузером опера

Asked by irina1 5 years ago

Last reply by cor-el 5 years ago

  • Archived

Receiving texts in Spanish saying a session was started recently - are these legitimate and how do I make them stop?

Once or more every day (typically overnight) I receive a text saying, "Recientemente se inici sesi n en tu cuenta desde Firefox on Windows." Ignoring the grammatical err… (read more)

Once or more every day (typically overnight) I receive a text saying, "Recientemente se inici sesi n en tu cuenta desde Firefox on Windows." Ignoring the grammatical errors/misspellings, it roughly translates to your Firefox account was recently logged into/a session was started. Each time the message is from short code 792273. Is this message legitimately from Firefox? If so, how do I get my number removed from whatever account it's been applied to in error?

Asked by khammes 5 years ago

Last reply by guigs 5 years ago

  • Archived

I have been phished and can't adjust settings without them being sent to an automatic redirected site

opened an email over a month ago from a friend. I got phished. Two days ago they sent the same email under my address and conversed with the recipients, impersonating m… (read more)

opened an email over a month ago from a friend. I got phished. Two days ago they sent the same email under my address and conversed with the recipients, impersonating me to assure them it was safe and give further instruction. The have also tried to gain further access info to one of my credit cards. I have changed my password, but when I attempt to secure it Firefox notifies me the information will automatically be redirected to a site. can't perform the administration.

Asked by Jim888 5 years ago

Last reply by FredMcD 5 years ago

  • Archived

fire fox redirects or email to 92.242.140.0 - 92.242.140.255' is 'email@barefruit.co.uk at 92.242.140.2 It is happing in and out of the school district and doe

Fire fox redirects or email mail.usd383.org to ( other info here to 92.242.140.0 - 92.242.140.255' is 'email at barefruit.co.uk ) this IP 92.242.140.2 It is happening in… (read more)

Fire fox redirects or email mail.usd383.org to ( other info here to 92.242.140.0 - 92.242.140.255' is 'email at barefruit.co.uk ) this IP 92.242.140.2 It is happening in and out of the school district and district. It only happens with firefox. WHY? Bitdefender has discovered this issue as a phishing attack.

Thanks Russel Dockins Network Service Manager Manhattan-Ogden


edit: removed personal information like phone, email and address from public.

Asked by RusselDockins 5 years ago

Last reply by FredMcD 5 years ago

  • Archived

Is this a security attack? See screen capture.

Somehow, the attached screen became visible after my browser had become unresponsive, trying to use Facebook. Looked very bogus to me. "Uploaded images" box, below, is no… (read more)

Somehow, the attached screen became visible after my browser had become unresponsive, trying to use Facebook. Looked very bogus to me. "Uploaded images" box, below, is not clearing so I'm going to try to send this, anyway. It was just a small jpg file.

Asked by RobGoldsmith 5 years ago

Last reply by FredMcD 5 years ago

  • Archived

A program called pc keeper has attached itself to my Mozilla Firefox, and I am no longer able to use it. Even uninstalling and reinstalling is a no fix.

Yesterday I discovered a pop-up attached to my Mozilla Firefox, it was essentially a white box, with a grey bar inside, which I dangerously clicked as it would not allow … (read more)

Yesterday I discovered a pop-up attached to my Mozilla Firefox, it was essentially a white box, with a grey bar inside, which I dangerously clicked as it would not allow me to close or access my Mozilla. Clicking the box revealed an ad for something call PC Keeper which now also shows in my remembered links as being in a second window. I was forced to shut down my computer to close the Mozilla, making all my links unavailable to me, and ultimately had to uninstall it from my computer. I attempted to reinstall a new version, but, again found this PC Keeper attached to it, it's white window firmly locking everything up, and forcing me again to uninstall the program. Please, find me a way to once more have my Mozilla without this PC Keeper.

Asked by AzizalSaqr 5 years ago

Last reply by jscher2000 5 years ago

  • Archived

A few days back this computer was infected with ad.ssl.imgfarm.com

Hello: A few days back this computer was infected with ad.ssl.imgfarm.com. So I did uninstall firefox to get rid of it. Slowly it is taking over all fuctions. Internet i… (read more)

Hello:

A few days back this computer was infected with ad.ssl.imgfarm.com. So I did uninstall firefox to get rid of it. Slowly it is taking over all fuctions. Internet is not working with Internet explorer. When I go to the website....it does not show any information. I canot download any browser including Firefox. The virus has erased all system restore points.... I regularly run Microsoft Security Essential + I have run Microsoft Virus Removal tool+ I have End Protection from Trusteer...only that seems to work. Microsoft cannot detect anything. I have not created any System Restoration disc and I am copying files ....to try and reset to factory condition...wondering whether with the personal files wil carry the virus, into a restored computer or a different computer. How to get rid of this menace?

Regards

Subroto Biswas

Asked by Subroto_b 5 years ago

Last reply by FredMcD 5 years ago

  • Archived

Firefox keeps crashing on my pc I can only use it in safe mode

I had problems with that Binkiland browser intrusion, I thought I was by passing this browser by opening a new tab. I deleted the Binkiland browser from my programs and h… (read more)

I had problems with that Binkiland browser intrusion, I thought I was by passing this browser by opening a new tab. I deleted the Binkiland browser from my programs and hardrive but it was still infecting my Firefox, I can no longer use my pc unless I start it in safe mode.

Asked by Andytmc 5 years ago

Last reply by FredMcD 5 years ago

  • Archived

When I updated Firefox my Internet Explorer won't open

I also got McAfee security that I don't want. Tried to uninstall both Firefox and the McAfee but that didn't work either. Malwarebytes came up with a Firefox Setup Stub… (read more)

I also got McAfee security that I don't want. Tried to uninstall both Firefox and the McAfee but that didn't work either. Malwarebytes came up with a Firefox Setup Stub that they say is a Trojan.Dopper. So what can I do now? I run Window 8 on a Asus laptop

Asked by Eric73160 4 years ago

Last reply by James 4 years ago

  • Archived

Firefox freezes and requires forced shutdown multiple times a day

Basically, firefox often will freeze/not respond and requires me to force a shut down just to keep it from freezing up my entire computer. I run lots of tabs every day an… (read more)

Basically, firefox often will freeze/not respond and requires me to force a shut down just to keep it from freezing up my entire computer. I run lots of tabs every day and I use a session manager to help keep on top of them and keep them from getting lost. When my computer was new this was not an issue but in the past few months I've cut down my tabs(less than 80) to try and speed my computer up and it has not worked. In fact, it is actually worse now. Sometimes it even actually crashes and sends a report, but not actually as often as it freezes and needs a forced shut down. I just finished cleaning up my computer(antivirus, malware, CC cleaner, etc.) and it's still freezing up. In fact, I've had to restart firefox three times in the past twenty minutes just to get to the point where I can ask this question. It's very frustrating.

Here are the last ten crash reports: bp-b2d18586-752c-491e-b128-e1c382150719 7/19/2015 10:56 AM bp-7925764c-4906-4093-b643-851d92150719 7/19/2015 10:09 AM bp-72c5f28a-e863-4236-9a3a-36d012150719 7/18/2015 8:18 PM bp-f0d1a8ab-64f0-434b-8639-98ccb2150718 7/18/2015 5:51 PM bp-809a83fe-a0d3-4fea-8f5d-b88c22150718 7/18/2015 5:45 PM bp-8160bab0-efda-4ab1-ae21-2df4c2150718 7/18/2015 5:08 PM bp-0f24531a-012c-44ce-9189-008ae2150718 7/18/2015 11:07 AM bp-b9cedefd-8bdf-474d-8235-964382150716 7/16/2015 5:36 PM bp-12edfcd7-563b-4253-9279-079972150712 7/11/2015 7:29 PM bp-b0745415-ae41-45c3-a717-f57fd2150709

As you can see even the actual recorded crashes happen a lot. I'm not sure what other information to provide, just let me know and I'll get it for you.

Asked by afastmachine 4 years ago

Last reply by cor-el 4 years ago

  • Archived

This keeps cropping up and is a real problem. How do i get rid of it. https://z.moatads.com/advertis…&zMoatDevice=1_device_category:56

Be descriptive. Saying "Playing video on YouTube is always choppy" will help our volunteers identify your problem better than saying "Something is wrong" or "Firefox is b… (read more)

Be descriptive. Saying "Playing video on YouTube is always choppy" will help our volunteers identify your problem better than saying "Something is wrong" or "Firefox is broken".

Asked by chuckmabry 4 years ago

Last reply by guigs 4 years ago

  • Archived

MF profile is compromised with Redirecting to Advertiser virus

I reinstalled the whole PC from the scratch. Both partitions were deleted (not just formatted even!) and recreated, then I reinstalled the Windows. I downloaded a new, cl… (read more)

I reinstalled the whole PC from the scratch. Both partitions were deleted (not just formatted even!) and recreated, then I reinstalled the Windows. I downloaded a new, clean .exe from the official MF website. Installed perfectly clean MF (this was literally the first programme I installed on the PC). It was all fine until I logged into my girlfriend's account in order to synchronize the newly installed MF with her profile (bookmarks, history, etc). Then that Redirecting to Advertiser virus came up. Then I reinstalled the Windows again and repeated everything all over again. It happened again on the very same moment - when I logged in her MF account. Which, obviously, means that her account is hacked/has virus. I tried literally everything that I found on the Internet, nothing really helped. I even removed MF + deleted ALL the entries in the Registry which relates to MF. When I did clear instal of MF, I got it again. Which probably means that once I log into the compromised account, the virus goes to the PC somehow (and somewhere).

PLEASE HELP ME GET RID OF THIS THING!!! Thank you very much in advance! :)

Asked by IlkoSarafski 4 years ago

Last reply by jscher2000 4 years ago

  • Archived

Firefox crashes with plugin stop working and Some unknow addons get added to my browser

I am using Fire Fox latest version and my browser crashes sporadically with plugin container stopped working and some unknown addons gets added to my system. I usually ju… (read more)

I am using Fire Fox latest version and my browser crashes sporadically with plugin container stopped working and some unknown addons gets added to my system. I usually just remove them, but is happening more frequently now. The last unknown addons were "RespEactSeale" and "Steam Trade Helper". Some times it also removes my Adblock plus addon from the browser.

Asked by Ritvik 4 years ago

Last reply by guigs 4 years ago

  • Archived

Firefox crashes at startup

Firefox crashes at startup (even in safe mode). I've uninstalled and reinstalled a fresh copy of 40.0.2; and deleted and created a new profile. IE and Chrome both work … (read more)

Firefox crashes at startup (even in safe mode). I've uninstalled and reinstalled a fresh copy of 40.0.2; and deleted and created a new profile. IE and Chrome both work fine.

The crash ID's that I've submitted are bp-1d1c5a1d-bacb-4ede-adce-d88542150824 and bp-89c9e6a5-2db9-4e6d-a426-aad5f2150824

Asked by gkishida 4 years ago

Last reply by cor-el 4 years ago

  • Archived

We have difficulty trying to connect to our server using a browser. Google Chrome can connect, but Mozilla Firefox cannot.

Problem: # We have difficulty trying to connect to our server using a browser. Google Chrome can connect, but Mozilla Firefox cannot. This problem is related to the "We… (read more)

  1. Problem: #

We have difficulty trying to connect to our server using a browser. Google Chrome can connect, but Mozilla Firefox cannot. This problem is related to the "Weak Diffie-Hellman and the Logjam Attack" (https://weakdh.org/)


  1. Activity log, sequence of actions we have conducted to try and fix the problem, and things we already know: #
1. Everything was fine
2. Firefox complained about the Weak Diffie-Hellman ephemeral key
3. Firefox can no longer access our server
4. But, Google Chrome CAN STILL access
5. Found out about "Weak Diffie-Hellman and the Logjam Attack"
   (https://weakdh.org/)
6. Tested Firefox using their website, and responded "Good News! Your browser is safe against the Logjam attack."
7. Tested Chrome using their website, and it responded that Chrome was vulnerable.
8. This explained why we could still access our server using Chrome
9. Updated Chrome to the latest version.
10. Tested Chrome using weakdh.org, and responded "Good News! Your
    browser is safe against the Logjam attack."
11. Tried accessing our site using Chrome, and it has the same error
    with Firefox.
12. Both Chrome and Firefox can no longer access the site at this
    point.
13. We followed the instruction located at
    https://weakdh.org/sysadmin.html for Apache Tomcat servers.

`ciphers="TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_SHA256,TLS_ECDHE_RSA_WITH_AES_128_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_SHA,TLS_ECDHE_RSA_WITH_AES_256_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_SHA384,TLS_ECDHE_RSA_WITH_AES_256_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_SHA,TLS_DHE_RSA_WITH_AES_128_SHA256,TLS_DHE_RSA_WITH_AES_128_SHA,TLS_DHE_DSS_WITH_AES_128_SHA256,TLS_DHE_RSA_WITH_AES_256_SHA256,TLS_DHE_DSS_WITH_AES_256_SHA,TLS_DHE_RSA_WITH_AES_256_SHA"`

14. Fix did not work both for Chrome and Firefox, still the same error.
15. We followed the instruction at
    http://stackoverflow.com/questions/30931692/diffie-hellman-public-key-error-with-tomcat-7

`ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA"`

16. Fix WORKED for Chrome BUT NOT for Firefox.
17. Firefox has error code: ssl_error_bad_cert_alert
18. We experimented on lesser number of ciphers but none worked
19. `ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA"`
20. Same error for Firefox, still OK for Chrome.


  1. **TECHNICAL DETAILS** #
    1. Certificate: ##
   Signature algorithm: sha256RSA
   Signature hash algorithm: sha256
   Public key: RSA (2048 Bits)
   Thumbprint algorithm: sha1
    1. Environment: ##
   Apache Tomcat 6.0
   Java 1.6.0_34
    1. Current server configuration: ##
   <Connector port="443" SSLEnabled="true" maxThreads="150" scheme="https" 
   secure="true" clientAuth="true" sslProtocol="TLS" 
   keystoreFile="********.pfx" 
   keystoreType="PKCS12" 
   keystorePass="********" 
   ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA"/>

Asked by VicCebedo 4 years ago

Last reply by jscher2000 4 years ago