Afficher les questions étiquetées : Afficher toutes les questions
  • Résolu
  • Archivé

"New" Firefox Search Result Hijacker

Hi, I recently downloaded and installed some Android emulator named "Andy". Unfortunately, the .exe also installed all kinds of other Software on my Windows 7 system. I … (lire la suite)

Hi,

I recently downloaded and installed some Android emulator named "Andy". Unfortunately, the .exe also installed all kinds of other Software on my Windows 7 system.

I removed most of the unwanted Software but one problem remained: A search result hijacker was part of the package. It replaces the top 4 results with some cryptic redirect links that are luckily displayed in a different font, otherwise I wouldn't have noticed at all.

I tracked the issue down to a addon in Firefox (see attached screenshot) that I cannot remove, no matter what I try.

What I tried to remove it: - I tried to remove the addon via about:config - I tried to run Firefox in safe mode and uninstall it - I tried to factory reset Firefox - I Installed Avira and made a system scan - I installed MalwareBytes and made a system scan - I check all the extension folders for addons that I do not know but can't find anything - I checked my whole system for any xpi-files but couldn't find any.

I am out of ideas. I can disable the addon but thats about it. After a while Firefox will shut itself down and the next time I start it, the addon is on again. When I resinstall FIrefox, the same thing happens. The addon is always back.

When I inspect the element it loads some invisible icon file that is supposedly located in "src="jar:file:///C:/Windows/Installer/%7BB28AF4A4-C997-4A5B-A111-FD1E65138A8D%7D/%7B02E337C0-4D70-452D-AA64-92D0A8C5D953%7D.xpi!/icon48.png"", if that helps. But the location doesn't exist on my system.

Can anyone here help me? I alread sent a problem report via the official tool.

Sincerely Florian

Demandé par flau il y a 1 an

Réponse de flau il y a 1 an

  • Résolu
  • Archivé

pups prefs.js keep coming back found by malwarebytes plus several tries to hack my email account

I found some infos but I do not trust myself just deleting the files in question since they ared all over my system. The following I found per malwarebytes which found th… (lire la suite)

I found some infos but I do not trust myself just deleting the files in question since they ared all over my system. The following I found per malwarebytes which found the pups every day up to now:

PUP.Optional.DefaultSearch is Malwarebytes’ detection name for a family of browser hijackers targeting Chrome, Firefox and Internet Explorer. Symptoms The browsers’ default search engine was changed to one that belonged to the threat-actors. I am german so probably I need your patience in helping me to clean my system resp. Mozilla.

Looking forward Ingrid

Demandé par iethomas il y a 10 mois

Réponse de jscher2000 - Support Volunteer il y a 10 mois

  • Résolu
  • Archivé

Getting pop-up for critical virus alert when running 96.0.3 on Win 10 Pro

I'm running 96.0.3 on a fully patched Win 10 Pro system - both O/S and programs. When Firefox is running I'm getting these pop-up error messages randomly with changing c… (lire la suite)

I'm running 96.0.3 on a fully patched Win 10 Pro system - both O/S and programs. When Firefox is running I'm getting these pop-up error messages randomly with changing content. They stay on screen for some seconds and then go away. Message states it's from (via) 5.back2yard.biz. I put that in my hosts file and I'm still getting them. My network is a cable modem hooked to Xfinity and then cable connected to another fully newer patched router. All addresses are 10. range. I ran both a Malwarebytes scan and a Windows Security scan - both are clean.

I'm unable to upload a small image after a hour so I'll give up on that right now.

Demandé par oldserverguy il y a 6 mois

Réponse de oldserverguy il y a 5 mois

  • Résolu
  • Archivé

Firefox tries to access weird websites each time it starts

Hello Mozilla community! Merry Christmas! I have noticed since yesterday (but maybe it is related to the 95.0.2 Firefox update) that Firefox tries to access some weird we… (lire la suite)

Hello Mozilla community! Merry Christmas!

I have noticed since yesterday (but maybe it is related to the 95.0.2 Firefox update) that Firefox tries to access some weird websites each time it starts.

The websites Firefox tries to access are various (non-exhaustive list):

Kaspersky Internet Security blocks all those access attempts and notifies me with a "Download denied" event and a "Probability of unauthorized software download" message (see uploaded image).

I immediately suspected one of my Firefox extensions, so I disabled them all... But the issue kept on occurring. Could Firefox be infected? (I ran Kaspersky Internet Security through my whole PC, and it found nothing ; I did the same with the free version of MalwareBytes ; nothing again).

I find it hard to believe that this behavior is normal and that these alerts are false positives from Kaspersky Internet Security... What do you think guys?

Regards, Jerome.

Demandé par Jerome il y a 7 mois

Réponse de Jerome il y a 7 mois

  • Résolu
  • Archivé

Old version of firefox keeps opening porn sites randomly

Hello. Im new to the Mozilla Support community I am running a Japanese Windows XP SP3 on VMWare Workstation 16, i have downloaded a old version of firefox, due to newer v… (lire la suite)

Hello. Im new to the Mozilla Support community

I am running a Japanese Windows XP SP3 on VMWare Workstation 16, i have downloaded a old version of firefox, due to newer versions not working on xp

And heres the issue: Firefox keeps opening tabs randomly which are related to pornographic websites like xxnx, pornhub, evilangel n' etc..

Heres things ive tried, but didnt work: -Install tdsskiller & scan -Scan with Avast Antivirus -Uninstalling Firefox and delete registry entries -Getting IE8 or G**gle Chr*me for Windows XP SP3

Any way to resolve this problem? i can't watch these things!

Demandé par mm321 il y a 8 mois

Réponse de James il y a 8 mois

  • Résolu
  • Archivé

Firefox search contest 2020??

Just ran a search in the address bar and was taken to this "Firefox search contest 2020" page. Never happened before and I assume it's a scam, have checked my add-ons and… (lire la suite)

Just ran a search in the address bar and was taken to this "Firefox search contest 2020" page. Never happened before and I assume it's a scam, have checked my add-ons and plugins but I don't see anything suspicious. Is this something to be concerned about?

If helpful, the url for this page is: https://sweetrelxme16.live/2262313374/?utm_campaign=QPF8euu28II5lw7O2iHhCugVqK5RzfdNsTpLaMM91qY1&t=main9_f90c820c180a04261c8d0973930afd&f=1&fp=4e4lHv53VRFsZD7g8DH8cHoGoZqhKuVVuUJjMi0vd9MavAzv9Ra8r35cGpaMIxPQMRUMvVHb0l82DIdO3468J0I1IGraOutgrge%2Bq9NWJxSgTtCArhRG9wrtn5m01%2Bx0n3MmjZiSV6rdotDp1uZK3X%2FC73QNaXrVEwU6oP9mIPSfJK%2B9iUDEhYFO3CUB0gqNmsYjipzEBg99p%2B0M3CKQbwifntTBZHvPFeMpyKOWKE7SKgze%2FpKn5JZBWY3pSSBh4y1pXXC3eYKb2LhL2ZoH4%2BWQ9hbMgWcybfFg5BkLBtWg1kwuZsikClxevJtm60RKV7prd51JiGjLrzf%2FNTDqxdrpwU2A0t4hnMG%2FGjpBHkvqc7jsROicHRQJdXvl6Xw%2BK1B4QHr4OdFM%2BRtvtMIuVoWNw3847b%2Bz5EijdBw1lIcKWD54y5Ykl2UHIWkWE3GJ0k%2Boz0qwm%2Bjks2VWfUk1dLIjwzZZ67mP3%2BIlzBvpAGyhYi%2FWISpYwui97wQ8U53uQKjnBTYIz1WN5e6HZkKCRHJTfzo%2FYcUJhu%2Fk4HDS04VDapoV6VLpeDv4JHDFP3AcqH5EPLVv648vIOUc%2B27TQByyZx70ORGYyOztbMH6xU0v%2B%2FM6DLecFWnHAPkQ8X%2Fk1igvbBNx8cPPUGQOchdh9Y1Hc7nm%2F4mZ%2BHsCVI5oeT%2FX7TJ15lDFHvc7uVp7J61DCWuWlQdtwjhqXu7Ms0k45AQQwlDJe4XvNbuDOTcti8QfPQw0zMaHTsoH6KjWUiBG6Qlk5UE4apuslT%2BVS8%2FhGlqRo190rqmBhsp3GLn%2B%2FkX8eoNQBK5adrrme1vjyuDFwg3XB1E0E9FY5RGGQuCmS2NgJ5NY1epvc0bT8qUYVwoKESw3dxc0I8oaHXm8pjJotg8dJ9p18vFzQfENSQ1Lif%2FXLA3qsLDDGOeLC5KQwPTUDb%2Bbwt5MjbLFbi09eakKIqSw1T6jyb6AzUIbIYU9CobdiZXlqXR1faA65a%2Bb49rHlYpFMsmtVMGAZGJ6GRcpqgidhwUeEfDWptpsKYjjcWxDXhB3bu93CuigV8dR%2FobTpbwwGmyFCtClfyPoqFgQ57R83bMHQta0ufdOf5rN%2BN%2BUUcgassNy4H84lggSNKjX1Tfle8JYPE8P850TKT8zL0qRyVHs9cq5ng7k%2FQl3TB847FICfrcWLUcxAU5Ed5hGOBPMcjGbc1pABVRV9%2BIivKKTvd06vBei1U27t1QJnlPCRub9A1wI2MEwWlJijoNtXlXN1odzAUFPLHNLG%2B3OjI80qmpNeUJoxRmfUN%2B%2BohI9hbzBle58Ij9659u%2FRIvLRx5Cs96YiHAeFadW%2FDvWvDJh3TzYhc798ZMqiB4KIcFtttKF8siLLCWSmhOmvNl0xVlAZBjrv%2Bs7beWbDKa2

Demandé par paulcharlesworth il y a 2 ans

Réponse de James il y a 2 ans

  • Résolu
  • Archivé

ChunkApp

How can I remove ChunkApp from my browser? It is not showing in my extensions, but i know its there because the internet service I use at a customers site wont allow me t… (lire la suite)

How can I remove ChunkApp from my browser? It is not showing in my extensions, but i know its there because the internet service I use at a customers site wont allow me to utilize my browser because of the redirect to Chunk App host/server.

Please help I do not want to switch to Google Chrome because of this legal search engine redirect virus.


Mac Operating System

Demandé par mbosh il y a 11 mois

Réponse de jscher2000 - Support Volunteer il y a 11 mois

  • Résolu
  • Archivé

In my browser is a pic of an ugly man. When you click on him it says Browser is under remote control (reason:De

That ugly man in the browser won't let me enter websites or pages within the website ,like sweepstakes entries on Cabela's website for example. My numbers are [phone numb… (lire la suite)

That ugly man in the browser won't let me enter websites or pages within the website ,like sweepstakes entries on Cabela's website for example. My numbers are [phone number]. Michael Lodsin When I open Firefox, there are 3 or 4 blue screens pop up to make excutible orders to my computer, I always click them off. but they we not always there. Is someone using my computer from afar, or worse tracking my keystrokes or monitoring me ?

Demandé par nocowfarm2001 il y a 8 mois

Réponse de FredMcD il y a 8 mois

  • Résolu
  • Archivé

site gamigo,desert operations keeps trying to connect.My anti virus stops it but i just want them to stop.

Hi.I would like to know how i can stop this site from constantley trying to connect with my P.C.luckeley my firewall stops it but eventully they will succeed.Iplayed it a… (lire la suite)

Hi.I would like to know how i can stop this site from constantley trying to connect with my P.C.luckeley my firewall stops it but eventully they will succeed.Iplayed it a long time ago.I stopt,deleted my account but they keep attacing several times a day.I,ll be gratefull with any help\advise about this.i tryed acsessing the page sourse and i think i,ve only made it worse.

Demandé par scarrleg il y a 6 mois

Réponse de FredMcD il y a 6 mois

  • Résolu
  • Archivé

why did my firefox crash

bp-186b028e-4571-4ea8-8dd6-e13c40211120 bp-b9a18a59-0808-43e2-a103-0c4580211120 bp-88a97ccf-6ac8-4669-9265-a1e3b0211120 bp-1c47ef47-258a-4ad6-92ee-97aee0211120 bp… (lire la suite)

bp-186b028e-4571-4ea8-8dd6-e13c40211120

bp-b9a18a59-0808-43e2-a103-0c4580211120

bp-88a97ccf-6ac8-4669-9265-a1e3b0211120

bp-1c47ef47-258a-4ad6-92ee-97aee0211120

bp-8652fdde-3903-4415-8dc8-10cf20211120

bp-13ade298-bb74-45ca-8912-af80c0211120

Demandé par 2102395503 il y a 8 mois

Réponse de FredMcD il y a 8 mois

  • Résolu
  • Archivé

Malware Attack on Firefox

I just want to report a malware attack I experienced yesterday (8/29/20) which seemed to affect only Firefox. After I clicked on the link to Boston Globe article my Firef… (lire la suite)

I just want to report a malware attack I experienced yesterday (8/29/20) which seemed to affect only Firefox.

After I clicked on the link to Boston Globe article my Firefox screen was filled with what purported to be a message from Microsoft saying that my computer was blocked because of suspicious activity detected on my IP address and telling me to call 1-888-222-6480. It also wanted me to enter my Microsoft password and warned me not to turn off my computer. The whole thing looked suspicious to me, especially since a pop-up window on the page requesting me to enter something (I forget what) showed a URL that began https://drink3.ga At some point, I don’t remember whether it was when I did turn off my computer or whether it was because I didn’t respond to messages commands, the malware did something to make my computer heat up and caused the fan to run at a ferocious rate until a message appeared that a break point had been reached and Firefox closed down. I was then able to use another browser to get to the Firefox support page and learn about refreshing Firefox. After I did that, Firefox behaved normally.

I am sending this to you because it’s something you should be aware of and represents a vulnerability in Firefox that should be addressed.

Demandé par acferg62 il y a 1 an

Réponse de FredMcD il y a 1 an

  • Résolu
  • Archivé

Accidental search engine download

I mistakenly loaded a browser called Freshy Search. I was trying to access a CarMax type program, and Freshy downloaded. I now get the Freshy search window every time I o… (lire la suite)

I mistakenly loaded a browser called Freshy Search. I was trying to access a CarMax type program, and Freshy downloaded. I now get the Freshy search window every time I open a new tab on Firefox. I want to delete Freshy from my computer. Thanks

Demandé par swan.jamest il y a 9 mois

Réponse de FredMcD il y a 9 mois

  • Résolu
  • Archivé

new tabs popping up

I've noticed this happening in the past week. Example #1 I used Google search to look for Japanese dogs & clicked on Wikipedia In addition a tab on debt popped up o… (lire la suite)

I've noticed this happening in the past week. Example #1 I used Google search to look for Japanese dogs & clicked on Wikipedia In addition a tab on debt popped up on its own. Here's a link to it: https://go.debthelpguide.com/api/offer

Example #2 I logged into citi.com to check my credit card activity In addition a tab which was of a sexual nature popped up on its own. I was so shocked I didn't think of saving a link for it.

It doesn't happen on all tabs I am using. Thank you in advance for your help.

Demandé par Dolly il y a 7 mois

Réponse de FredMcD il y a 7 mois

  • Résolu
  • Archivé

trying to find flashback on osx 10.14.6

Hello everyone, Trying to find out if my Mac Mini has been infected with flashback. Using this terminal command, defaults read /Applications/Firefox.app/Contents/Info … (lire la suite)

Hello everyone, Trying to find out if my Mac Mini has been infected with flashback. Using this terminal command,

defaults read /Applications/Firefox.app/Contents/Info LSEnvironment,

I got this response:

{MallocNanoZone = 0;}

It should read:

The domain/default pair of (/Applications/Firefox.app/Contents/Info, LSEnvironment) does not exist

I cannot find anything about this and was wondering if it indicates anything malicious. Anyone know about this? Thanks.

Demandé par jerib123 il y a 1 an

Réponse de FredMcD il y a 1 an

  • Verrouillé
  • Archivé

scam extensiom

Hello I sent a report of theft in the plugins section of your site some time ago, but I did not receive a response A robbery that robbed me of $ 42,600 I will explain it … (lire la suite)

Hello I sent a report of theft in the plugins section of your site some time ago, but I did not receive a response A robbery that robbed me of $ 42,600 I will explain it to you again and please take care so that more people do not fall victim This theft happened by Ledger live fake plugin eves in this theft, with small changes in the logo and the name of the Baba plugin, put it in the plugins section of your site and steal from the users' accounts. With a simple comparison between the fake plugins on your site and the original plugin, you can find out if the plugins in the plugins section of your site are fake or stolen. The name of the main plugin is Ledger live , and on your site, they are stealing with the same names and with a little change All plugins in this section of your site plugins are fake and thieves except SpeedLedger Which has a different topic and you can check https://addons.mozilla.org/fa/firefox/search/?platform=windows&q=ledger%20live I look forward to hearing from you to prevent further theft Thankful

Demandé par chanchoa il y a 1 an

Dernière réponse par AliceWyman il y a 1 an

  • Résolu
  • Archivé

Auto download without consent on some malicious websites

(Automatic translation in English ) As what happened in the title, when I was collecting information on the internet, the webpage was redirected twice to a malicious web… (lire la suite)

(Automatic translation in English ) As what happened in the title, when I was collecting information on the internet, the webpage was redirected twice to a malicious website. And then I closed an advertising module with "X " in the center of screen, my firefox started to automatically download apk files from a webpage

Demandé par Ceesucc il y a 1 an

Réponse de Scribe il y a 1 an

  • Résolu
  • Archivé

Browser Hijacker

I have incurred a browser hijacker that I can't seem to get rid of as no anti virus that I've tried will recognise it. The hijacker is defaultsearch.nchuser. The 'Refresh… (lire la suite)

I have incurred a browser hijacker that I can't seem to get rid of as no anti virus that I've tried will recognise it. The hijacker is defaultsearch.nchuser. The 'Refresh Firefox button is not working at the moment. Please help me to remove this pest. Thank you.

Demandé par kenrumble il y a 1 an

Réponse de FredMcD il y a 1 an