We're seeing a higher incidence of crashing in Firefox 30 because of a few known things and I was hoping to get some help in getting information about them.
The crash is caused by malware often associated with V-Bates Toolbar (a bundleware program hijacks your browser to show ads and direct your online shopping). The crash is caused by a DLL file (probably named libinject2.dll, libredir2.dll or nptnt2.dll). We're trying to get copies of this DLL as well as the version number (from Add/Remove programs) of V-Bates.
If you see users whom you suspect to be subject to this, can you let me or Rachel know and we can follow up with them.
Hi, all.
We're seeing a higher incidence of crashing in Firefox 30 because of a few known things and I was hoping to get some help in getting information about them.
The crash is caused by malware often associated with V-Bates Toolbar (a bundleware program hijacks your browser to show ads and direct your online shopping). The crash is caused by a DLL file (probably named libinject2.dll, libredir2.dll or nptnt2.dll). We're trying to get copies of this DLL as well as the version number (from Add/Remove programs) of V-Bates.
If you see users whom you suspect to be subject to this, can you let me or Rachel know and we can follow up with them.
We can pull email addresses from that but it's a last resort. If we had users in SUMO, they're likely more willing to work with us (and speak English) and thus easier than sending out 10000+ emails and having to work with each of them to find someone able to help.
We can pull email addresses from that but it's a last resort. If we had users in SUMO, they're likely more willing to work with us (and speak English) and thus easier than sending out 10000+ emails and having to work with each of them to find someone able to help.
I can't remember having seen a crash report where the crashing thread shows one of these files.
I probably also won't notice this file in a modules list if it would show there.
A Google site search for "V-Bates" only comes up with this thread:
*[[/questions/994498]]
----
http://malwaretips.com/blogs/v-bates-shopper-virus/
Another forum search shows that there are quite a few threads with this line showing in the System Details list:
dom.ipc.plugins.enabled.nptnt2.dll: False
Another forum search shows that there are quite a few threads with this line showing in the System Details list:
*dom.ipc.plugins.enabled.nptnt2.dll: False
cor-el thank you! I just PMed the Question owner as well.
''cor-el [[#post-60370|said]]''
<blockquote>
A Google site search for "V-Bates" only comes up with this thread:
*[[/questions/994498]]
----
http://malwaretips.com/blogs/v-bates-shopper-virus/
</blockquote>
cor-el thank you! I just PMed the Question owner as well.
What about contacting G-data if there is a possibility they have identified the software
bug 1023964#c13
G-Data solved the problem with a signature update for the security suite, a few users in our forum already confirmed that Firefox works by now.
What about contacting G-data if there is a possibility they have identified the software
[https://bugzilla.mozilla.org/show_bug.cgi?id=1023964#c13 bug 1023964#c13]
<blockquote>G-Data solved the problem with a signature update for the security suite, a few users in our forum already confirmed that Firefox works by now.</blockquote>
Are you seeing mention of V-bates or of the .dlls libinject2.dll, libredir2.dll or nptnt2.dll in the threads you linked to or somewhere else such as in the crash reports.
Fred,
''https://support.mozilla.org/en-US/questions/1006966#answer-594261 Firefox v30 crashes <br /> & https://support.mozilla.org/en-US/questions/1007190''
Are you seeing mention of ''V-bates'' or of the .dlls ''libinject2.dll, libredir2.dll'' or ''nptnt2.dll'' in the threads you linked to or somewhere else such as in the crash reports.
After the last update, everything in my Firefox has vanished. .... /questions/1003760
I have made a preliminary post in each thread.
Would be nice to use the sumos search for such things and search the forum for
"dom.ipc.plugins.enabled.nptnt2.dll: False "
Sumo maxes out with any genuine hits buried in or missed in
[https://support.mozilla.org/en-US/search?q=dom.ipc.plugins.enabled.nptnt2.dll%3A+False+&num_voted=0&num_votes=&asked_by=&answered_by=&q_tags=&created=0&created_date=&updated=0&updated_date=&sortby=0&a=1&w=2 sumo1000 maxed out misses]
In fact thanks to Google showing we have 5 hits in the last month
[https://www.google.co.uk/search?q=%22dom.ipc.plugins.enabled.nptnt2.dll%3A+False%22++site%3A+mozilla.support.org&hl=en&btnG=Google+Search&sourceid=Mozilla-search&start=0#hl=en&q=%22dom.ipc.plugins.enabled.nptnt2.dll:+False%22++site:+mozilla.support.org&tbs=qdr:m 5 potentially good hits]
Trying sumo search over a month
[https://support.mozilla.org/en-US/search?q=dom.ipc.plugins.enabled.nptnt2.dll%3A+False+&num_voted=0&num_votes=&asked_by=&answered_by=&q_tags=&created=0&created_date=&updated=2&updated_date=05%2F21%2F2014&sortby=0&a=1&w=2 still too many 283 misses]
-------------
Regular contributors already know not to bother trying sumo advanced search. I tabulated some comparative results in
* ''Has the Search function been changed, poor results'' [/forums/contributors/709852#post-56717]
------------
Related Threads
# ''unable to view kindle cloud reader offline'' [/questions/1005498]<br /> user [https://support.mozilla.org/en-US/user/offislander offislander]
# ''Can I download a web page as a PDF ?'' [/questions/1005843] [/user/Paul_Abrahams]
# ''Can't open links/drop screens.'' [/questions/1005843] [/user/JZeroX]
# ''access denied. ... '' [/questions/1003223] [https://support.mozilla.org/en-US/user/ffuturebright]
#''After the last update, everything in my Firefox has vanished. .... '' <br /> [/questions/1003760]
I have made a preliminary post in each thread.
It is more likely that the nptnt2-dll is a leftover from a search.us.com infection and not part of V-Bates as we have seen a lot of issues with Search.us.com back then.
It is more likely that the nptnt2-dll is a leftover from a search.us.com infection and not part of V-Bates as we have seen a lot of issues with Search.us.com back then.
*http://www.shouldiblockit.com/nptnt2.dll-91569e13f554d2c106b0e14f8726defe.aspx
*http://www.shouldiremoveit.com/TNT2-10521-Toolbar-63728-program.aspx
*http://www.herdprotect.com/nptnt2.dll-cd4c4ade0a6c5dc52a0cf869a8bc4e184c3761b7.aspx
Fred,
Are you seeing mention of V-bates or of the .dlls libinject2.dll, libredir2.dll or nptnt2.dll in the threads you linked to or somewhere else such as in the crash reports.
Sorry, but I didn't look. I thought it's better if you look for yourself because
seeing all the reports you might notice something among them.
''John99 [[#post-60395|said]]''
<blockquote>
Fred,
Are you seeing mention of ''V-bates'' or of the .dlls ''libinject2.dll, libredir2.dll'' or ''nptnt2.dll'' in the threads you linked to or somewhere else such as in the crash reports.
</blockquote>
Sorry, but I didn't look. I thought it's better if you look for yourself because
seeing all the reports you might notice something among them.
Probably helps to know what it is we should be looking for.
IIRC we met the high bar on conduit, so malware alone is not sufficient to suggest a bug be filed.
So I suppose really we are looking for malware that causes crashes. Presumably we should try to ensure bug reports are filed for crashes where we suspect malware is the cause.
Probably helps to know what it is we should be looking for.
IIRC we met the high bar on conduit, so malware alone is not sufficient to suggest a bug be filed.
So I suppose really we are looking for malware that causes crashes. Presumably we should try to ensure bug reports are filed for crashes where we suspect malware is the cause.
I've seen "Network System Driver" adware mentioned and a Google search comes up with a lot of recent hits.
*http://www.google.com/search?q=%22Network+System+Driver%22+bing
I have noticed on many crash report lots of these; (3 - 9 times)
%SystemRoot%\system32\mswsock.dll
https://support.mozilla.org/en-US/questions/1007610
'''URL: http://www.reddit.com/''' part of the report
I have noticed on many crash report lots of these; (3 - 9 times)
%SystemRoot%\system32\mswsock.dll
Firefox keeps on crashing, it seems to happen at random
Awaiting Crash IDs
No mention of adware, malware or of popups, that I noticed.
mswsock.dll is usually a Windows file http://www.shouldiblockit.com/mswsock.dll-2565.aspxreddit.com is a fairly popular news/social site
Personally I have occasionally used it without issues.
Are we just reporting here all crashes.
Thread title is Firefox crashes and it includes Crash ID bp-0a7522e4-fce9-416d-b3b2-ad4c62140621
I do not notice the .dll s we are looking for
Thread title
Firefox keeps crashing even after reinstalling it
Awaiting crash IDs
No mention of adware, malware or of popups, that I noticed.
My thoughts on the above reports
<blockquote>
https://support.mozilla.org/en-US/questions/1007610
<br />
URL: http://www.reddit.com/ part of the report
<br />
I have noticed on many crash report lots of these; (3 - 9 times) <br />%SystemRoot%\system32\mswsock.dll
</blockquote>
The question title
''Firefox keeps on crashing, it seems to happen at random''
Awaiting Crash IDs
No mention of adware, malware or of popups, that I noticed.
mswsock.dll is usually a Windows file http://www.shouldiblockit.com/mswsock.dll-2565.aspx
reddit.com is a fairly popular news/social site
Personally I have occasionally used it without issues.
<blockquote>https://support.mozilla.org/en-US/questions/1007547</blockquote>
Are we just reporting here all crashes.
Thread title is ''Firefox crashes and it includes Crash ID bp-0a7522e4-fce9-416d-b3b2-ad4c62140621 ''
I do not notice the .dll s we are looking for
<blockquote>https://support.mozilla.org/en-US/questions/1007444</blockquote>
Thread title
''Firefox keeps crashing even after reinstalling it''
Awaiting crash IDs
No mention of adware, malware or of popups, that I noticed.
I note there was a 2nd Vbates block are we still needing to look for this ?
* https://addons.mozilla.org/en-US/firefox/blocked/i626
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1027886 Bug 1027886 - Blocklist another V-Bates add-on]
