Showing questions tagged: Show all questions
  • Solved
  • Archived

Firefox plagued by virus s0.2mdn.net -- how do you remove it?

I am running Firefox on Windows 7. On a number of sites the icon box to the left of the current URL gets an icon that is circular with the cardinal points of a compass l… (read more)

I am running Firefox on Windows 7. On a number of sites the icon box to the left of the current URL gets an icon that is circular with the cardinal points of a compass like figure. A dialogue box appears emanating from that icon and asks the user if he/she wants to share hs/her location with s0.2mdn.net? I cannot get rid of this and think it is adware.

Asked by SgrB2 5 years ago

Answered by SgrB2 5 years ago

  • Solved
  • Archived

When i go to Fox news another web site with virus pops up

When I go to info Fox News, another account that says Fox comes up first. I have twice clicked by accident and both times a screen says a virus has been introduced to ca… (read more)

When I go to info Fox News, another account that says Fox comes up first. I have twice clicked by accident and both times a screen says a virus has been introduced to capture all computer entry and sent worldwide. It gives a number to call to pay for release. I shut down, bring back up, and then run security without finding anything. This could be, or maybe is, a great problem. The site is listed as link hidden by moderator

Asked by Foxgrapes 4 years ago

Answered by FredMcD 4 years ago

  • Solved
  • Archived

remove "searchitnow"

Firefox browser has defaulted to "searchitnow" as the home page and default search engine, which was not wanted, appeared to come with a Java update, has also impacted Ch… (read more)

Firefox browser has defaulted to "searchitnow" as the home page and default search engine, which was not wanted, appeared to come with a Java update, has also impacted Chrome. Help getting rid of it appreciated.

Asked by Wazza99 2 years ago

Answered by FredMcD 2 years ago

  • Solved
  • Archived

virus taken over firefox Win10

Opened an AMAZON link in Google search and popup says "Virus Alert from Microsoft. Dial 833 334-6433 for and assistance..." That Firefox page is completely frozen. Noth… (read more)

Opened an AMAZON link in Google search and popup says

"Virus Alert from Microsoft. Dial 833 334-6433 for and assistance..."

That Firefox page is completely frozen. Nothing works. But another Firefox page does work.

I've tried backing up to prior restore point, updating Firefox...

Any suggestions please. I'd like to just kill the one Firefox page for starters.

Thanks all,

        Bill M

Asked by billmasi 2 years ago

Answered by FredMcD 2 years ago

  • Solved
  • Archived

How to block goto-searchitnow.global.ssl.fastly virus/malware?

I seem to be infected with some piece of malware/virus that keeps replacing my homepage and inserting a web address into my list of search engines. This is what gets inse… (read more)

I seem to be infected with some piece of malware/virus that keeps replacing my homepage and inserting a web address into my list of search engines. This is what gets inserted in both areas:

https://goto-searchitnow.global.ssl.fastly.net/v1/hp?aid=189&data=aWlkPTIwJnVpZD00MDc0NzQ2NA==&tb=1

Does anyone recognize it and how can I block or delete it permanently.

I'm also getting a "Close All Tabs" alert periodically (that keeps popping up after each attempt to cancel it) even though I've made no attempt to close out of Firefox.

After dealing with Advanced Mac Cleaner virus recently, I hope I don't have another battle on my hands.

Asked by bijom 2 years ago

Answered by user633449 2 years ago

  • Archived

How to stop redirecting

When I go to att.net to check email, firefox takes me to several other sites, one of which sends me a scare screen, hoping I will click on it. I suppose you would call th… (read more)

When I go to att.net to check email, firefox takes me to several other sites, one of which sends me a scare screen, hoping I will click on it. I suppose you would call this malware. Is there a setting in FireFox to prevent it from going to sites I did not ask it to?

I will try to add a screen capture of the offending screen.

Following is the history: organized with the latest url at the top

https://d1nkumj01332kz.cloudfront.net/v9/message.html?trk=pastion-taried.com&osv=Windows%207&ip=68.9.218.120&cep=Arlv8CdOOItkJhjZiqjWtc_dz4esh_NjdLQUjEkcJG4EstRKPvC-T1x-p8CLQCEKPdLVq1vAI01ZXF0ZpZb7Yrqk-J1N7cnjbPD-TGYkD6Jrpptyq-7JN5P_fGcxD-lphScPR6n1jlg-9fKPprik8NBIm2e7wnoegS_grOWQ63_RdjZ_YSBjW3EXC5Y3pSvtpHooavZBVbXvhJzV5W4ZY7j3MqYj3Upnkue8tw0QsKVvBNuW3Q99pDdumJe3x_BX&zone=1806387-3979200730-0&country=US&time=1544806702&cid=15448067011141496440142440166805814

http://nextoptim.com/script/s2iurl.php?csid=1806387&md=0&s1=13342&stamat=m%7C%2C%2Cg2E243YnoGU3BJ9GH0dEdHP3xP.810%2CiOUtIegL3mbO-vonTaZuRA0gW4cCSrDZ76LeWOYcSPw0OBHaGS1O1cpEPIc_vIDmqFZMwgZmvp7t_5_-We0_82xdkStb9eJzz2p3612WZ3D8GcOte2NQC2u-1l1Vv1oeJjLh5tYpMIitIRlmZYB_OUHCEQMF0TvPrnGRYamWNb8xLFa-Rwbd7lI548BMtLLxXdrA-RlFEzIq2U7gSNkpr7kIOe6eHUvmKh3G8DVti7euSRTqkXxvH1VzgoLlqlq7kUiq4Hiyqy8rTukaVYut9Vwsgo7YFYomkmYwGdowz_6ZcDeAC0Y4kBTg4hP5jNmRkP8egC0xHDCWWeRanOtTuS9ADCtaIwH6MBjaCYa0k07Jc4GX-6j1ieuQ4CkXZ0-85pm9uBc95JZfGlj5TNKj8A%2C%2C

https://advertisingfeed.com/click?node=1&time=1544806680&id=47&pid=8&fid=8&sid=13342&rank=0&ad=eyJ0aXRsZSI6IiIsInVybCI6IiJ9

https://serviceoperative.com/out?out=https%3A%2F%2Fcreativechecker.com%2F%3Fpid%3D8%26sid%3Dstream%26kw%3Dbuy%26f%3Dclick%26bu%3Dhttps%253A%252F%252Fserviceoperative.com%252Fclick.php%253Fkey%253Dg6xhj2igkvvbntwx10jd%2526t1%253Dzone%2526t2%253Dstream%2526t3%subzone%2526cost%253Dusdcost

https://cpmazu.com/w/1.4/1201031004.js?pubid=ba9b94jj&domain=start.att.net&t=Ag9ZUVtbcHJrcHQEHVZCRFtue3FudAQGT0hBU3Ryf3FyFGc6

https://start.att.net/

[Links deactivated by moderator.]

Asked by bob-m 2 years ago

Last reply by jscher2000 2 years ago

  • Solved
  • Archived

RANSOMEWARE ON FIREFOX

I managed to remove ransomware last year (or two) ago by uninstalling Firefox and then downloading the latest Firefox, but this time the ransomeware refuses to go away so… (read more)

I managed to remove ransomware last year (or two) ago by uninstalling Firefox and then downloading the latest Firefox, but this time the ransomeware refuses to go away so I can not shut down Firefox to remove it using the uninstall wizard. If I reboot / restart Windows the ransome page comes up straight away under Firefox browser window. What can I do to remove the contaminated Firefox ?

Asked by Cliff 2 years ago

Answered by Cliff 2 years ago

  • Solved
  • Archived

Firefox tries to connect to Crypto mining website at startup and shutdown

When I start firefox 63.0 32-bit version in Safe mode as well as in normal mode Firefox tries to make a connection to the website cnhv.co. After reading from various malw… (read more)

When I start firefox 63.0 32-bit version in Safe mode as well as in normal mode Firefox tries to make a connection to the website cnhv.co. After reading from various malware forums it appears that cnhv.co has links to crypto mining software and as well as the notorious conhive.com. Firefox does not attempt to connect to any other website apart from cnhv.co. When firefox starts on my laptop it creates 4 processes. One parent/main process and 3 child processes. All the 3 processes try to connect to cnhv.co website. Starting the firefox in safe mode or after resetting it still leads to the same behaviour. Only firefox exhibits this behaviour when I try to launch it and when I shut it down. Other browsers do not.

So my question is as follows 1) How do I determine which process or what setting or the location of the infection that is causing Firefox to connect to cnhv.co? 2) How do I fix this? How do I clean Firefox such that it does not connect to any crypto website at startup and shutdown?

Asked by addverma 2 years ago

Answered by addverma 2 years ago

  • Solved
  • Archived

pop up blocker information bar

Why does the pop blocker information bar disappear immediately and a box pops us saying that you have pop ups blocked and you need to disable this or some 800 number for … (read more)

Why does the pop blocker information bar disappear immediately and a box pops us saying that you have pop ups blocked and you need to disable this or some 800 number for assistance? Why would would describe in your help section to allow exceptions from the information bar, when the information bar doesn't work or isn't allowed to be used? Seems really dumb to tell people your product works in a way it doesn't. Is it really too difficult to add a function to automatically load web pages into the exceptions group when a pop up is blocked?

Asked by wjohnson.co 3 years ago

Answered by jscher2000 3 years ago

  • Archived

malware: need to identify it and uninstall

I clicked an .exe to download a zoom meeting list. It installed malware. I'm unable to go to add-on's, options, etc - it opens a blank page. Redirects webpages to all sor… (read more)

I clicked an .exe to download a zoom meeting list. It installed malware. I'm unable to go to add-on's, options, etc - it opens a blank page. Redirects webpages to all sorts of stuff like porn and IDK what. How do I identify and remove?

What can I provide to assist beyond this: seems the "root" URL is spontaneousguarded.com

Using Chrome, as I do not want to enter my info to ask for help on a compromised Firefox browser. Searching on Chrome doesn't bring anything up that can help an (NON-IT) person. I'm also unable to allow troubleshooting information using Chrome. Thank you!

Asked by kaspytek 1 year ago

Last reply by FredMcD 1 year ago

  • Solved
  • Archived

Crash when 'Save Image As'

It crashes both firefox & waterfox, Even chrome seems to be having issues when trying to save an image. (I'll check chrome forums aswell) but its quite annoying that … (read more)

It crashes both firefox & waterfox, Even chrome seems to be having issues when trying to save an image. (I'll check chrome forums aswell) but its quite annoying that i cant save anything. There is no error being provided and i cant exactly describe the problem other than when trying to save an image or anything with 'Save image as' or similar. It crashes.

Asked by MrAwais 4 years ago

Answered by FredMcD 4 years ago

  • Solved
  • Archived

Firefox Browser hijacked

My wife's desktop pc was hit by what I'd call "A Super Bundle" which unleashed total havoc on her pc. It took me a great deal of work 2 full days chasing down all the cra… (read more)

My wife's desktop pc was hit by what I'd call "A Super Bundle" which unleashed total havoc on her pc. It took me a great deal of work 2 full days chasing down all the crap this apparent harmless download created. My approach; I'd describe it as it was like pealing back layers of an onion until everything was removed. Or to return her machine back as close to normal as I could. One of the "Leftovers" from this attack is something called; www-searching.com which has hijacked all the browsers on her computer. Nothing has worked I mean nothing. A lot of time and a great deal of effort has gone into destroying this menace now I'm asking for help.

Thanks for your time. Doug Sr.

Asked by DougSr 6 years ago

Answered by DougSr 6 years ago

  • Archived

So I am doomed because I have a virus that I can't get rid of and I was making sure that you weren't being hacked? Which you are. I still want to help.

I was a member of the beta team and had a Mozilla support account under the name Mymozsupp. Someone from FireFox staff inserted a file called doomed at 8:46pm today and I… (read more)

I was a member of the beta team and had a Mozilla support account under the name Mymozsupp. Someone from FireFox staff inserted a file called doomed at 8:46pm today and I do not appreciate that. I did not want to hack you or stop helping you. I just can't get rid of this virus so I switched to the regular browser. Also, you are being hacked by a group that I was/am a part of. They use the hack to get full Root PEM certificates from your browser to use it as a make shift Tor browser. I do not condone that. Although, I know why. If you can have Tor without downloading it, which instantly puts you on a list, why wouldn't you do so. They are non-profit and do not do things without good reason. There you go.

Asked by Ivan Bernesty 5 years ago

Last reply by Ivan Bernesty 5 years ago

  • Archived

did you send this to my browser? https://f03024.4privacybrowsing.com/firefox/install?aff_sub=PO&aff_sub2=1000767&aff_sub3=263658499234&subid=201l4qc061gv

this popped up on mt browser yesterday with the firefox globe. does it come from firefox? what is it? it went into add-ons. it looked strange. when i clicked on it it dis… (read more)

this popped up on mt browser yesterday with the firefox globe. does it come from firefox? what is it? it went into add-ons. it looked strange. when i clicked on it it disappeared. i ran windows defender . no virus was found.

thank you.

Asked by kschwabe 4 years ago

Last reply by James 4 years ago

  • Solved
  • Archived

Firefox was attacked by adware from y2mp3.cc

Hello, I visited the website http:// y2mp3 .cc to convert a Youtube video into mp3. I must mention that I did not agree to install anything from that website. Then I star… (read more)

Hello,

I visited the website http:// y2mp3 .cc to convert a Youtube video into mp3.

I must mention that I did not agree to install anything from that website.

Then I started noticing adware messages mentioned to be from y2mp3.

I restarted Firefox in safe mode but saw nothing unusual.

This is an attack on firefox.

I want to remove this adware, I want that website mentioned as dangerous, and I want a security update.

Looking forward to actions and answers.

Regards

Asked by HBoutamani 3 years ago

Answered by HBoutamani 3 years ago

  • Archived

critical firefox update (scam website address)

Just wanted to relay the supposed address for this popup is https://oowiebest-directory-submission.org Tried to trace and failed. Appears it may be a vulnerability with … (read more)

Just wanted to relay the supposed address for this popup is https://oowiebest-directory-submission.org

Tried to trace and failed. Appears it may be a vulnerability with Windows 10 and Firefox..similar to what a fair amount of users experience with Edge but much more limited.

Experienced this 3 times in 2 weeks and I am fairly consistent in the sites I navigate. <10 on a daily basis,with 20+ hours/week activity, and the page will generally reroute to this Critical Update page while clicking on of these bookmarked sites.

Asked by tracyr_ 4 years ago

Last reply by James 4 years ago

  • Solved
  • Archived

I have problems in downloading from your site the free Browser from Firefox...it always reads Firefox is damaged and can't be opened. Is Mackee part of your or

when I download from the mozilla site the free Firefox BROWSER and click on the Firefox logo on the left next to the file ( Firefox Quantum is the header ) , the " v… (read more)

when I download from the mozilla site the free Firefox BROWSER and click on the Firefox logo on the left next to the file ( Firefox Quantum is the header ) , the " verifying Firefox fills up with the blue line , then I always get a drop box which reads " Firefox is damaged and can't be opened, you should eject the disc image ( I do that ) , than I start all over again and the same message appears all over again... another question is Mackeeper part of " Mozilla " ?? I have seen this name on downloading pages.

Can you help me please to download the Firefox Browser ? your assistance is very much appreciated. thank you Stutt9gart

Asked by Stutt9gart 3 years ago

Answered by McCoy 3 years ago

  • Solved
  • Archived

Update your pc error

I have the latest firefox, but it keeps launching all by itself when my computer starts showing the website in the screenshot... Please note that I have windows 10, and d… (read more)

I have the latest firefox, but it keeps launching all by itself when my computer starts showing the website in the screenshot...

Please note that I have windows 10, and dont have any software installed that might have caused this...

I also scanned my system using several anti spyware and antiviruses but nothing was found...

Asked by BladeMcNeil 3 years ago

Answered by FFus3r 3 years ago

  • Archived

Thousands of JonuiCouupon type files are being written into AppData/Local/Mozilla/Firefox/Profiles/.../cache2/entries.

Something had infected my computer. With help I've removed most of the bad effects, but what remains is files of type JonuiCouupon being written into the Firefox Profile… (read more)

Something had infected my computer. With help I've removed most of the bad effects, but what remains is files of type JonuiCouupon being written into the Firefox Profiles area. When I delete the Profile, it creates a new one and starts writing them again. 38,000 files in the last week, totaling 330 MB.

Asked by DanSchn 5 years ago

Last reply by cor-el 5 years ago