Showing questions tagged: Show all questions
  • Solved
  • Archived

mabydick.com contains a trojan

Firefox attempts to connect to a website with a known trojan every time a different website is chosen. Both Bitdefender and Malwarebytes block it. Windows Defender doesn… (read more)

Firefox attempts to connect to a website with a known trojan every time a different website is chosen. Both Bitdefender and Malwarebytes block it. Windows Defender doesn't recognize it that I can tell. It's very annoying!

This is on a 64-bit platform using Widows 10 Home, with all updates applied, using the latest version of Mozillla Firefox. Microsoft Edge doesn't exhibit the same behavior. Haven't tried Internet Explorer.

Please fix Firefox.exe

Asked by fmuir 1 year ago

Answered by Shashank Shekhar 1 year ago

  • Archived

SERIOUS THREAT OF IDENTITY THEFT

Approximately 2 wks ago I allowed a support tek located in India to remotely access my computer to fix a problem I was having on my computer. After resolving the problem … (read more)

Approximately 2 wks ago I allowed a support tek located in India to remotely access my computer to fix a problem I was having on my computer. After resolving the problem he asked me for my credit card # so he could charge me for fixing the problem, which I had clearly advised him at the very beginning of our conversation I wouldn't give him remote access to my computer if there was going to be a cost involved.

He became very agitated and abusive and threatened to call #411 and report me to whomever answered that number.

In addition, HE REFUSED TO DISCONNECT FROM MY COMPUTER AND HE REMAINED ON THE PHONE AND IN MY COMPUTER, DURING WHICH TIME I COULD SEE HIS CURSOR MOVING ALL AROUND MY SCREEN!

IT FINALLY OCCURED TO ME THAT I COULD PROBABLY GET RID OF HIS PRESENCE ON MY COMPUTER BY SHUTTING IT DOWN, WHICH I DID. WHEN I REBOOTED MY COMPUTER, MY HOME SCREEN WHICH HAD BEEN LOADED WITH APPROXIMATELY 30 ICONS OR SO NO LONGER INCLUDED THESE ICONS!

NOTHING LIKE THIS HAS EVER HAPPENED TO ME DURING ALL THE YEARS I HAVE BEEN USING A COMPUTER & I AM BESIDE MYSELF WITH WORRY OVER THE POSSIBILITY THAT BEFORE I SHUT DOWN MY COMPUTER AND I COULD SEE HIM MOVING HIS CURSOR ALL AROUND ON THE SCREEN, HE WAS ABLE TO COLLECT ALL MY MOST IMPORTANT INFORMATION ----- BANK ACCT NUMBERS! 401K PLAN! ALL MY SAVED PASSWORDS TO ALL PERSONALL ACCTS! ---- YOU NAME IT, HE MUST HAVE BEEN COLLECTNG ALL OF THIS INFO TO USE AS HE WISHED IN THE FUTURE!

ARE THERE ANY STEPS I CAN TAKE TO PROTECT MYSELF FROM IDENTITY THEFT BY THIS TERRIBLE SUPPORT TEK, SHORT OF DESTROYING MY COMPUTER????!!!! YOUR IMMEDIATE REPLY WOULD BE SO GREATY APPRECIATED. THANK YOU. M.WINTERS.


[Personal information removed by moderator. Please read Mozilla Support rules and guidelines, thanks.]

Asked by myrnwin617 1 year ago

Last reply by FredMcD 1 year ago

  • Archived

crash problem [I have Report ID]

Hi guys I have been getting crash errors since yesterday. I completely deleted Firefox (and related folders) and installed a new fresh version. But the problem did not so… (read more)

Hi guys I have been getting crash errors since yesterday. I completely deleted Firefox (and related folders) and installed a new fresh version. But the problem did not solve. I have 2 Report IDs:

1- Report ID: bp-53f7a982-8f99-42c4-b182-5d3a50200611 view link: https://crash-stats.mozilla.org/report/index/53f7a982-8f99-42c4-b182-5d3a50200611

2- Report ID: bp-fa282037-879a-490c-9fca-8b50d0200611 view link: https://crash-stats.mozilla.org/report/index/fa282037-879a-490c-9fca-8b50d0200611

Thanks for any help.

Asked by mhzavareh90 1 year ago

Last reply by FredMcD 1 year ago

  • Archived

Need different bookmarks on different pcs

If I don't want the same Firefox bookmarks on every device, do I need to create different accounts for each device using Firefox? I avoided creating an account because I … (read more)

If I don't want the same Firefox bookmarks on every device, do I need to create different accounts for each device using Firefox?

I avoided creating an account because I didn't want one pc to override others. Now suddenly my office pc has had the bookmarks taken for ransom because I did not want what they were offering of syncing all my devices.

Will my bookmarks reappear if I create an account for that pc?

Asked by KatKan 1 year ago

Last reply by cor-el 1 year ago

  • Archived

What is the proper procedure for reporting malicious links in Firefox Send?

I tried to post this question in the correct forum, but there is no option to choose Firefox Send as a product when asking a question. The Firefox Send forum at https://s… (read more)

I tried to post this question in the correct forum, but there is no option to choose Firefox Send as a product when asking a question. The Firefox Send forum at https://support.mozilla.org/en-US/questions/firefox-send appears to be empty and I didn't see a way to post there directly.

An email account at my school district was recently compromised and had sent out 122 malicious phishing links via Firefox Send before we stopped it and took control of the account back. I have the list of malicious Firefox Send links and I'd like to share them with the proper people at Mozilla so something can be done.

The files are all password-protected archives (I know the passwords) that contain malicious VBS files which have their code heavily obfuscated. I haven't yet tried to figure out what the VB scripts do - I was hoping a cyber security professional would be willing to take a look.

Someone please contact me so I can at least try to get the files taken down.

If I were to make a feature request for Firefox Send, it would be to add a button to report a file as malicious.

Asked by Brian G 1 year ago

Last reply by McCoy 1 year ago

  • Archived

My Browser deleted itself and left a folder of old files on my desktop, WHY?

My Firefox Browser deleted itself somehow and microsoft edge took over as the default browser. I clicked on the browser in my task bar and a grey error box came up and s… (read more)

My Firefox Browser deleted itself somehow and microsoft edge took over as the default browser. I clicked on the browser in my task bar and a grey error box came up and said the short cut needed to be removed because foxfire.exe was not found. Then on my desktop I had a new folder called "Old Firefox Data".

I had a issue yesterday where I downloaded 2 Viruses (in a zipped folder) off the firefox secure transfer app because I thought it was a contract for work. My virus scan software removed the 2 trojan viruses and corrected the unauthorized changes to my computer.

How did the entire Firefox.exe disappear? Do I still have a problem? Thanks in advance!

Asked by nytxalamo 1 year ago

Last reply by FredMcD 1 year ago

  • Archived

My Firefox Browser Is Being Accessed Remotely and cetain formerly secure websites are changed to insecure. I need help in securing my MAC IOS

A group of experienced hackers have made my devices their target. They continue to remove any security I try to place on my computer, i.e., downloading developer apps wh… (read more)

A group of experienced hackers have made my devices their target. They continue to remove any security I try to place on my computer, i.e., downloading developer apps which allow them to administer the computer and devices.

They have maliciously targeted my business and sabotaged a lot of my apps so that they will not work. Going to the "Authorities" is a waste of time. so I will not discuss this.

I need help in tracing the street trash thugs who continue to access my computer, place malicious malware and worms on my computer so that it will not function at his required level, and replacing bonafide adds with fake apps so that they can control and conduct surveillance on all of my Apple Devices.

I have reported this problem to Apple and they are worthless. Not enough training, and the service is inferior.

I need upper level technical support to identify how they are manipulating my browsers so that they provide absolutely no security.

Malwarebytes is manipulated, Avast as well, and they have downloaded an app that allow them to share my screen and collect all of my passwords as they are individually entered.

Asked by expertsbk 1 year ago

Last reply by FredMcD 1 year ago

  • Archived

Malwarebytes reports Firefox.exe as a trojan attempting to contact a separately reported bad IP address

Malwarebytes interrupted with a pop-up alert saying Firefox was trying to connect to IP address 167.71.99.170 (https://urlhaus.abuse.ch/url/348428/), which apparently mi… (read more)

Malwarebytes interrupted with a pop-up alert saying Firefox was trying to connect to IP address

167.71.99.170 (https://urlhaus.abuse.ch/url/348428/),

which apparently might be bad?

Interestingly, the above urlhaus link initially reported the hit on the IP address per a Pascal Geenens (@geenensp on twitter) who writes for a security blog at

Thanks to any and all who might be able to help!

-Log Details- Protection Event Date: 6/4/20 Protection Event Time: 4:18 PM Log File: 920f76a0-a6a0-11ea-9633-00ffc7e81200.json

-Software Information- Version: 4.1.0.56 Components Version: 1.0.920 Update Package Version: 1.0.25022 License: Premium

-System Information- OS: Windows 10 (Build 18362.836) CPU: x64 File System: NTFS User: System

-Blocked Website Details- Malicious Website: 1 , C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0

-Website Data- Category: Trojan Domain: IP Address: 167.71.99.170 Port: 443 Type: Outbound File: C:\Program Files (x86)\Mozilla Firefox\firefox.exe


(end)

Asked by thompson.g 1 year ago

Last reply by the-edmeister 1 year ago

  • Archived

Firefox Crashes, Settings Change, and New Shortcuts Install on Desktop

I'm not certain who to turn to for support, but I'm starting here. I also can't tell if there is one sole cause of all of these issues or several, but please do your best… (read more)

I'm not certain who to turn to for support, but I'm starting here. I also can't tell if there is one sole cause of all of these issues or several, but please do your best to explain what's going on.

1-2 months ago, some strange things started happening with my computer repeatedly. Consistently, a command prompt would open unexpectedly, saying something about Chromium failing to update. I couldn't do anything with that program, so I just X'd it out, and maybe around a minute later Firefox would crash and restart. Once that happened, my Firefox home page would be set to Yahoo.com, and the default search engine would also be changed to Yahoo!. And on my desktop, shortcuts for Internet Explorer and Chromium would be added, and the shortcut for Chromium would be automatically pinned to my taskbar.

Windows Security would then notify me that it's blocked a threat, so I'd go to check it out and remove said threat. Every time, it;d say the blocked threat makes changes to browser settings without proper permission, and the blocked threat is called "sodecitot.exe", located in a filepath like c:\programdata\{5b729525-380e-6a38-89c28-8402d0dace36}\sodecitot.exe (just in case it's some obscure ID, I've swapped out those numbers and letters with random numbers and letters). Then Windows Security reports "Remediation incomplete" on the same threat, implying it attempted to restore itself. That letter and number folder name notably follows the same format as a bunch of folders which were last modified when I first turned on this computer on January 1, 2019.

I was getting a lot of such reports from Windows Security on very similar threats, having various different letters and numbers for their folder names, and I figured it was likely malware, so I made several full scans with MSERT, Malwarebytes, Windows Security, and Windows Defender Online Scan, all to no avail.

I don't even know why Internet Explorer is installed, but its files were last modified in February 2019, so I think it's just a shortcut that was added.

I'm not sure what Chromium is or why it's installed either. I tried to look it up to learn more about it but found nothing useful, and its executable looks like a blue version of Google Chrome's logo. Some parts of Chromium's installation were last modified in October 2019, but most of its files were modified just today.

Notably as well, when these problems started happening 1-2 months ago, there were two instances of all of my desktop shortcuts having weird visual issues, one being the little arrows on the shortcuts (which indicates it's a shortcut and not an actual file) being replaced with a X's, and a separate instance where the Audacity logo was over top every other shortcut for a few minutes.

With the same events happening today, a new error message opened, saying something about Windows Explorer attempting to load the C runtime library incorrectly (screenshot included).

I also considered turning to Mozilla, Google, and/or Microsoft support when this was originally happening, but then it suddenly stopped. I had a bunch of screenshots of some of the weirder things, but since nothing was happening for a while I deleted them. Now, 1-2 months later, it's starting right back up and I don't know why. I suspect it all links back to Chromium, but I'm not sure if I can just delete its files and call it quits, because I don't know if it's supposed to be there. It seems like something by Google, but I can't even confirm that.

So yeah. Any suggestions?


My computer has a Windows 10 operating system. Mozilla Firefox is installed and constantly open, used for entertainment. Google Chrome is installed and constantly open, used for work. Apparently, some part of Google Chrome's installation trips off Malwarebytes whenever I make a scan. Removing it causes Chrome to crash, and once I open it again that part is replaced. Usually, I just remove it so I don't miss any other threats, and then just restore my closed tabs. Audacity is installed and has a desktop shortcut. Internet Explorer is apparently installed, and there is no uninstall executable as far as I can tell. Whatever it is, Chromium seems to keep trying to install itself, with parts of it already existing on my computer.

Asked by jcclay1 1 year ago

Last reply by jcclay1 1 year ago

  • Archived

Data Breach?

Over the past 48 hours there have been at least ten breaches of my account. At first I assumed it was a breach of PayPal when someone used it to purchase a $3000 laptop o… (read more)

Over the past 48 hours there have been at least ten breaches of my account. At first I assumed it was a breach of PayPal when someone used it to purchase a $3000 laptop on Newegg. I figured it couldn't be Firefox because Mozilla is pretty good with that sorta thing and because the only fraud was via my PayPal account. Well ... just over an hour ago someone attempted to purchase a $2200 laptop with my Amazon account using a completely different payment method, and I received several emails in both my Gmail and Protonmail regarding several accounts which I did not create. Firefox is the only browser I use, and I have passwords stored in it; I'll have to change all of them and remove them to a thumb drive. But Firefox appears to have a data breach ongoing right now. I can share screenshots if necessary but I will have to redact personal information and that will of course take time.

Asked by ancapbarbie 1 year ago

Last reply by ancapbarbie 1 year ago

  • Solved
  • Archived

virus detection - Checks

Hi, I am running the french FF 79.0 64 bit I just started to download the latest iso of debian 10.5 from the official Mirror and got the FF warning that it contains a vir… (read more)

Hi, I am running the french FF 79.0 64 bit I just started to download the latest iso of debian 10.5 from the official Mirror and got the FF warning that it contains a virus. I am not sure if you have a team to check false positive as this is the official site and that it was released only yesterday https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/debian-10.5.0-amd64-DVD-1.iso and I am getting worried after I got this message. Thank you in advance. Regards, Stephane

Asked by Stéphane BLIN 1 year ago

Answered by cor-el 1 year ago

  • Archived

Firefox browser on windows 10 forgetting recent sessions after update (of firefox)

My windows 10 is forcing me to update windows. If i ignore the warnings. it just kills my unsaved work and restarts my computer. To make it worse. After I start Firefox a… (read more)

My windows 10 is forcing me to update windows. If i ignore the warnings. it just kills my unsaved work and restarts my computer. To make it worse. After I start Firefox again is starts to update too. And after the update all my Open tabs and session info is completely killed. The first time it was annoying. be now it is a reason to go back to an other browser. The last time i checked i was still the owner of my laptop. and not Microsoft and not Mozilla!

If this bug is not fixed I uninstall Firefox. I need a browser i can rely on. not just doing what it wants.

M

Asked by SmartThinker 1 year ago

Last reply by FredMcD 1 year ago

  • Archived

malware: need to identify it and uninstall

I clicked an .exe to download a zoom meeting list. It installed malware. I'm unable to go to add-on's, options, etc - it opens a blank page. Redirects webpages to all sor… (read more)

I clicked an .exe to download a zoom meeting list. It installed malware. I'm unable to go to add-on's, options, etc - it opens a blank page. Redirects webpages to all sorts of stuff like porn and IDK what. How do I identify and remove?

What can I provide to assist beyond this: seems the "root" URL is spontaneousguarded.com

Using Chrome, as I do not want to enter my info to ask for help on a compromised Firefox browser. Searching on Chrome doesn't bring anything up that can help an (NON-IT) person. I'm also unable to allow troubleshooting information using Chrome. Thank you!

Asked by kaspytek 1 year ago

Last reply by FredMcD 1 year ago

  • Archived

Default search engine keeps changing to Yandex withouth my consent after firefox updated

Mozilla has an agreement with Yandex in my region. I understand the need for a sponsor, but I am very unhappy with my preferred search engine being changed to Yandex afte… (read more)

Mozilla has an agreement with Yandex in my region. I understand the need for a sponsor, but I am very unhappy with my preferred search engine being changed to Yandex after each Firefox update without my consent or knowledge.

Asked by baris.malcioglu 1 year ago

Last reply by Standard8 1 year ago

  • Archived

bycelebian

hi, i'm following a lot of guides to get rid of bycelebian.com redirect (at every pc startup a firefox session appears with a random page redirected from the bycelebian.c… (read more)

hi,

i'm following a lot of guides to get rid of bycelebian.com redirect (at every pc startup a firefox session appears with a random page redirected from the bycelebian.com website) but without success.

how can i remove this odd firefox calamity?

thank you!

Asked by barbatil81 1 year ago

Last reply by FredMcD 1 year ago

  • Archived

tapufind virus

I have twice now been infected with the tapufind redirect virus. I'd like to know how to protect myself or safely remove it with a recommended software if it happens agai… (read more)

I have twice now been infected with the tapufind redirect virus. I'd like to know how to protect myself or safely remove it with a recommended software if it happens again. I have refreshed my firefox each time and that seems to fix it, but it has come back so.....

Asked by horse4shu 1 year ago

Last reply by FredMcD 1 year ago

  • Solved
  • Archived

Malware Attack on Firefox

I just want to report a malware attack I experienced yesterday (8/29/20) which seemed to affect only Firefox. After I clicked on the link to Boston Globe article my Firef… (read more)

I just want to report a malware attack I experienced yesterday (8/29/20) which seemed to affect only Firefox.

After I clicked on the link to Boston Globe article my Firefox screen was filled with what purported to be a message from Microsoft saying that my computer was blocked because of suspicious activity detected on my IP address and telling me to call 1-888-222-6480. It also wanted me to enter my Microsoft password and warned me not to turn off my computer. The whole thing looked suspicious to me, especially since a pop-up window on the page requesting me to enter something (I forget what) showed a URL that began https://drink3.ga At some point, I don’t remember whether it was when I did turn off my computer or whether it was because I didn’t respond to messages commands, the malware did something to make my computer heat up and caused the fan to run at a ferocious rate until a message appeared that a break point had been reached and Firefox closed down. I was then able to use another browser to get to the Firefox support page and learn about refreshing Firefox. After I did that, Firefox behaved normally.

I am sending this to you because it’s something you should be aware of and represents a vulnerability in Firefox that should be addressed.

Asked by acferg62 1 year ago

Answered by FredMcD 1 year ago

  • Archived

icelandsue.com

For the pass few weeks everytime I search this data harvesting website icelandsue.com tries to lead me to spam shopping sites. It was downloaded on to my hard drive furth… (read more)

For the pass few weeks everytime I search this data harvesting website icelandsue.com tries to lead me to spam shopping sites. It was downloaded on to my hard drive further Firefox.exe

I've tried everything to get rid of it my current security provider blocks it but I want some way to get rid of it altogether.

Asked by TheGoddess 1 year ago

Last reply by jscher2000 - Support Volunteer 1 year ago