Firefox opening noisy 'hidden' windows
For around 2 weeks now my Firefox has been opening new windows with noisy websites like Blinkx and ChinaOnTv. When Firefox is open on my computer I can't see these windown, only hear them. If I force quit Firefox, when it opens again it asks me if I would like to restore my previous session, at which point it shows me what windows WERE open and there is always at least one like Blinkx or ChinaOnTv that makes a lot of noise and "http://basicmoneyadver.com/1/blank.php"
This happened
Every time Firefox opened
== 2 weeks ago
All Replies (13)
For around 2 weeks now my Firefox has been opening new windows with noisy websites like Blinkx and ChinaOnTv. When Firefox is open on my computer I can't see these windown, only hear them. If I force quit Firefox, when it opens again it asks me if I would like to restore my previous session, at which point it shows me what windows WERE open and there is always at least one like Blinkx or ChinaOnTv that makes a lot of noise and "http://basicmoneyadver.com/1/blank.php"
same problem stated above, how do i fix it?
Same problem as posts above. There also seems to be mainadver.com in addition to basicmoneyadver.com.
The main thing for me was a blank screen with either of these addresses before it would load to the homepage.
I also noticed the very annoying noises with no evident source which I didn't initially associate with it but now I see the posts above makes sense it is linked...
Did you try to scan your computer to see if you have any spywares? Try these programs:
* Malwarebytes' Anti-Malware * SUPERAntiSpyware * Spybot-Search & Destroy
To see if they detect any spywares/malwares.
In reply to above post:
thats what I suspected so I looked into it as mainadver and the solution was offered to do this:
http://www.personalcomputerfixes.com/spyware/how-to-remove-the-google-redirect-virus/ - so i used combofix... thought it did the trick but no...
now i've just found this:
http://www.bleepingcomputer.com/forums/lofiversion/index.php/t329132.html
points 3&4 seem to describe problem well... I'm now scanning with Malwarebytes but since the user there says these scans are not picking the problem up I don't have much faith
One more suggestion. After your Malwarebytes scan, if it still doesn't help, you can try to scan with Malwarebytes in Windows Safe Mode. A couple of weeks ago, my friend's computer was infected and he did a normal scan, no change. Then he did another scan in Safe Mode, Malwarebytes detected a Trojan and he deleted it, then his computer was back to normal.
You might try that to see if that helps.
I have the exact same problem it is running http://basicmoneyadver.com/2/blank.php in the background. I have tried a number of things including above and failed to isolate the issue. Safe mode still did not pick it up, but I do think it is in Java somewhere.
Same problem. Started yesterday. basicmoneyadver.com/blank.php running in background as soon as I open Firefox. System XP, old Dell laptop. I am using Kaspersky and it did not pick it up. Please advise. The noise is driving me crazy, it sounds like news running all the time. I'm going to try using Explorer and see if it also runs there. I can't figure out how to even turn it off.
OK, I did a full scan with Kaspersky, which took about two hours. Kaspersky found some malware and deleted it, the sounds were gone. I just opened Firefox and went to exactly two sites (one was gmail) and here it is again! I now have basicmoneyadver and Cyndi Lauper Celebrity-gossip net open and Firefox opened them all by itself. C'mon Firefox geeks, what to do?
There has to be a way to fix this.... I too believe it's in the javascript somewhere. is there a Java cache that can be deleted?
Yes, where are all the Mozilla geeks? Help us or we have to go back to using Explorer. I want to know if there is a way to tell Firefox not to save ANY open sessions because that's what's happening, this is getting saved and re-opened every time I use Firefox even though I tell it not to save any tabs.
Hurry up guys, or this is my last week using Firefox. Kaspersky can clean spyware from my Explorer when I scan it, why not Firefox and that basicmoneyadver?
Ok.. I FINALLY found it in my case. There was a virus/rootkit something hiding in the MBR. I was about to give up but ran fixmbr in recovery console. It's gone! YEAH!!!! I also used the Avira Rescue CD which found a few bugs that some of the others missed. No more hidden Firefox or IE sessions.
Gee, Laura, thanks! Now how do I do that? I know what the MBR is I think (Master book record, for partitioning your drive?) but I have no idea how to clean it or how to run fixmbr or how to get to recovery console. Can you give me some guides, like: C-> next step, ect. I am running Firefox on an old Dell laptop with Windows XP and have Kaspersky on it, I can direct Kaspersky to clean stuff if I can figure out what to call it. I have a C drive and an E external drive for backing up; it could be on E? Please come back and post some more!
The easiest way to get to recovery console is to boot from the Windows XP CD, at the first Option you can go to recovery console. Once you get to the C:> in recovery console run Fixmbr (this can make your hard drive completely unreadable so make sure you have a back up first. You will most likely get a warning that the hard drive has a non standard MBR.
That fixed it for me.... use at your own risk.