X
Tocca qui per la versione per piattaforma mobile del sito.

Forum di supporto

pop-ups on screen when i click on firefox icon

Inserita

when i click to open firefox, my homepage comes up for a few seconds. Then other popups appear on screen. look like "brainestoune.com, and another window opens long narrow rectangle window asking for user name and password for something. another window asking to allow. I cannot get these off screen. Can you please help? I figured out I can go to bookmarks and click another website to get around this. Just ran malwarebytes. That didn't work.

                                    Thank you very much for any help you may provide
when i click to open firefox, my homepage comes up for a few seconds. Then other popups appear on screen. look like "brainestoune.com, and another window opens long narrow rectangle window asking for user name and password for something. another window asking to allow. I cannot get these off screen. Can you please help? I figured out I can go to bookmarks and click another website to get around this. Just ran malwarebytes. That didn't work. Thank you very much for any help you may provide
Citazione

Dettagli aggiuntivi sul sistema

Applicazione

  • User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0

Ulteriori informazioni

My_Cheese_Is_Slippin'
  • Top 10 Contributor
54 soluzioni 691 risposte

Hi maidendallas, Also try the AdwCleaner from Malwarebytes

https://support.malwarebytes.com/docs/DOC-1160

Hi maidendallas, Also try the AdwCleaner from Malwarebytes https://support.malwarebytes.com/docs/DOC-1160
È stato utile questo messaggio? 0
Citazione
FredMcD
  • Top 10 Contributor
4223 soluzioni 58930 risposte

After the above, Start Firefox in Safe Mode {web link}

A small dialog should appear. Click Start In Safe Mode (not Refresh). Is the problem still there?

After the above, [https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode Start Firefox in Safe Mode] {web link} A small dialog should appear. Click '''Start In Safe Mode''' (not Refresh). Is the problem still there?
È stato utile questo messaggio?
Citazione

Utente che ha posto la domanda

The AdwCleaner did not work or find anything. And when I started in safe mode, I was in safemode with networking but had no connection. Thanks for your help. I am not tech savvy or sure if I am posting on here correctly. So far nothing has worked. Thanks for getting back so quick. Any more ideas?

Thanks again
The AdwCleaner did not work or find anything. And when I started in safe mode, I was in safemode with networking but had no connection. Thanks for your help. I am not tech savvy or sure if I am posting on here correctly. So far nothing has worked. Thanks for getting back so quick. Any more ideas? Thanks again
È stato utile questo messaggio?
Citazione
My_Cheese_Is_Slippin'
  • Top 10 Contributor
54 soluzioni 691 risposte

Risposta utile

Hi maidendallas, I saw something in another thread about 'brainestoune' the other day, but I can't find it now. We were able to remove it.

My anti-virus blocks the website that your link directs it to. It is categorized as a Fake Tech Support Domain. Which is a blanket category that includes ransomware.

I'm surprised that Malwarebytes didn't find it and quarantine it or that AdwCleaner missed it.

What anti-virus software do you use? Does it have a scan tool?

Try running Malwarebytes Threat Scan again. If that doesn't find anything, try the AdwCleaner again.

Be sure Firefox is closed when you run these.

If all of that fails, here is a Malwarebytes Browser Extension that you can try:

https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/

Hi maidendallas, I saw something in another thread about 'brainestoune' the other day, but I can't find it now. We were able to remove it. My anti-virus blocks the website that your link directs it to. It is categorized as a Fake Tech Support Domain. Which is a blanket category that includes ransomware. I'm surprised that Malwarebytes didn't find it and quarantine it or that AdwCleaner missed it. What anti-virus software do you use? Does it have a scan tool? Try running Malwarebytes Threat Scan again. If that doesn't find anything, try the AdwCleaner again. Be sure Firefox is closed when you run these. If all of that fails, here is a Malwarebytes Browser Extension that you can try: https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/
È stato utile questo messaggio? 1
Citazione
My_Cheese_Is_Slippin'
  • Top 10 Contributor
54 soluzioni 691 risposte
Hi again maidendallas, Here's a link for Norton Power Eraser: https://support.norton.com/sp/en/us/threat-removal-solutions/current/solutions/kb20100824120155EN_EndUserProfile_en_us?inid=hho_supp_search-npe
È stato utile questo messaggio?
Citazione

Utente che ha posto la domanda

I am using Avast antivirus. Maybe I am not sure how to start up in safe mode I did select with networking but said no connection was available. Maybe I'm doing something wrong. I will try these other suggestions this afternoon after work. Just wanted to let you know I will keep checking back and I will let you know my results as soon as I can after work today. Thanks again. Just FYI the very first time I ran malwarebytes, not adware cleaner, it did find and quarantine two items. But that did not fix the problem. That was before I tried the adware cleaner which said no threats were found. I work until about 4 or 5 Central Time. Will post again ASAP. Thank you

I am using Avast antivirus. Maybe I am not sure how to start up in safe mode I did select with networking but said no connection was available. Maybe I'm doing something wrong. I will try these other suggestions this afternoon after work. Just wanted to let you know I will keep checking back and I will let you know my results as soon as I can after work today. Thanks again. Just FYI the very first time I ran malwarebytes, not adware cleaner, it did find and quarantine two items. But that did not fix the problem. That was before I tried the adware cleaner which said no threats were found. I work until about 4 or 5 Central Time. Will post again ASAP. Thank you
È stato utile questo messaggio?
Citazione

Utente che ha posto la domanda

one more thing, when I bring up Firefox and the pop-up comes up on the screen my Avast does pop up and say threat was detected and it did block something. But apparently it's not blocking the brainestoune pop ups. And when I run my Avast scan it does not find anything either.

one more thing, when I bring up Firefox and the pop-up comes up on the screen my Avast does pop up and say threat was detected and it did block something. But apparently it's not blocking the brainestoune pop ups. And when I run my Avast scan it does not find anything either.
È stato utile questo messaggio?
Citazione
My_Cheese_Is_Slippin'
  • Top 10 Contributor
54 soluzioni 691 risposte

Hi maidendallas,

I'll be happy to look into this some more for you today while you're at work. We'll get this fixed!

Have a great day.

Hi maidendallas, I'll be happy to look into this some more for you today while you're at work. We'll get this fixed! Have a great day.
È stato utile questo messaggio?
Citazione
FredMcD
  • Top 10 Contributor
4223 soluzioni 58930 risposte

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.
È stato utile questo messaggio?
Citazione
McCoy
  • Top 10 Contributor
520 soluzioni 4889 risposte

Risposta utile

The same name ("brainstoune") came up here :

https://support.mozilla.org/en-US/questions/1260300

No search results for that name ......

The same name ("brainstoune") came up here : https://support.mozilla.org/en-US/questions/1260300 No search results for that name ......
È stato utile questo messaggio? 1
Citazione
My_Cheese_Is_Slippin'
  • Top 10 Contributor
54 soluzioni 691 risposte

Thank you McCoy,

My cheese was starting to slide off over that one.

I chased out "brainstoune" to "go.pub2srv" with the help of the Malwarebytes Extension. They are notorious for PUP's and adware.

I'm sure that we can help maidendallas with this.

Thanks

Thank you McCoy, My cheese was starting to slide off over that one. I chased out "brainstoune" to "go.pub2srv" with the help of the Malwarebytes Extension. They are notorious for PUP's and adware. I'm sure that we can help maidendallas with this. Thanks

Modificato da My_Cheese_Is_Slippin' il

È stato utile questo messaggio?
Citazione
McCoy
  • Top 10 Contributor
520 soluzioni 4889 risposte

My_Cheese_Is_Slippin said

I chased out "brainstoune" to go.pub2srv.com with the help of the Malwarebytes Extension.

Don't let anybody click on that link (which I made unclickable here), cause it leads to "cobalten. com", which is a redirect virus .....

See : https://www.2-viruses.com/remove-cobalten-com-redirect

''My_Cheese_Is_Slippin [[#answer-1226408|said]]'' <blockquote> I chased out "brainstoune" to go.pub2srv''.''com with the help of the Malwarebytes Extension. </blockquote> Don't let anybody click on that link (which I made unclickable here), cause it leads to "cobalten''.'' com", which is a redirect virus ..... See : https://www.2-viruses.com/remove-cobalten-com-redirect
È stato utile questo messaggio?
Citazione

Utente che ha posto la domanda

Ok I'm back. First off you guys are awesome. I didn't expect anyone to be so willing to help. I appreciate it so much.

 Seems to be fixed!!  I got home, read your replies then I ran malwarebytes again. It found and quarantined "pup.optionalremoteinjectionFF.  Then I ran Adwarecleaner and it did not find any threats. I've been closing and reopening firefox.  Restarted PC and opened firefox. Turned PC off and on and opened firefox. The popup seems to gone! I say seems because I thought it was gone once and it came right back. Hope it stays gone this time. I will definitely let you know if it comes back. Don't know why it didn't work last night? Maybe I had firefox open? I don't remember. 
  Can't thank you enough!!   
 So does that item it quarantined look familiar to you guys?
Ok I'm back. First off you guys are awesome. I didn't expect anyone to be so willing to help. I appreciate it so much. Seems to be fixed!! I got home, read your replies then I ran malwarebytes again. It found and quarantined "pup.optionalremoteinjectionFF. Then I ran Adwarecleaner and it did not find any threats. I've been closing and reopening firefox. Restarted PC and opened firefox. Turned PC off and on and opened firefox. The popup seems to gone! I say seems because I thought it was gone once and it came right back. Hope it stays gone this time. I will definitely let you know if it comes back. Don't know why it didn't work last night? Maybe I had firefox open? I don't remember. Can't thank you enough!! So does that item it quarantined look familiar to you guys?
È stato utile questo messaggio?
Citazione
My_Cheese_Is_Slippin'
  • Top 10 Contributor
54 soluzioni 691 risposte

That's Great!

You should look for any extensions that might have "cobalten" "go.pub2srv" "brainestoune" or anything else that you don't remember adding and remove them.

Do the same in Windows apps.

I've been using the Malwarebytes extension for Firefox. It works as well or maybe a little faster than Malwarebytes Premium. You should add it and try it out. I think you'll be impressed.

Let us know if we can help with anything else.

That's Great! You should look for any extensions that might have "cobalten" "go.pub2srv" "brainestoune" or anything else that you don't remember adding and remove them. Do the same in Windows apps. I've been using the Malwarebytes extension for Firefox. It works as well or maybe a little faster than Malwarebytes Premium. You should add it and try it out. I think you'll be impressed. Let us know if we can help with anything else.
È stato utile questo messaggio?
Citazione
My_Cheese_Is_Slippin'
  • Top 10 Contributor
54 soluzioni 691 risposte

Oh yeah,

The item "pup.optionalremoteinjectionFF" is a reference to a "Potentially Unwanted Program" with "remote injection" characteristics in "Firefox" and is "optionally" packaged with a program or extension.

The "remote injection" part is where it communicates with it's host to send you those really cool pop-ups and nuisances.

But there are other "remote injection" PUP's which can extract user id's and passwords or other personal data. And there are those which can really wreak havoc on your system, too.

Oh yeah, The item "pup.optionalremoteinjectionFF" is a reference to a "Potentially Unwanted Program" with "remote injection" characteristics in "Firefox" and is "optionally" packaged with a program or extension. The "remote injection" part is where it communicates with it's host to send you those really cool pop-ups and nuisances. But there are other "remote injection" PUP's which can extract user id's and passwords or other personal data. And there are those which can really wreak havoc on your system, too.

Modificato da My_Cheese_Is_Slippin' il

È stato utile questo messaggio?
Citazione

Utente che ha posto la domanda

Again, not too tech savvy here. When you say extensions, are you referring to the firefox add ons / extensions?

Again, not too tech savvy here. When you say extensions, are you referring to the firefox add ons / extensions?
È stato utile questo messaggio?
Citazione
My_Cheese_Is_Slippin'
  • Top 10 Contributor
54 soluzioni 691 risposte

Yeah, those.

Sometimes the "bad guys" are able to "package" these remote injection pup's with an add-on and they slip past Mozilla's scrutiny.

Let us know if you find anything suspicious. We can investigate into it and block it from availability and even kill it for other user's, if necessary.

Yeah, those. Sometimes the "bad guys" are able to "package" these remote injection pup's with an add-on and they slip past Mozilla's scrutiny. Let us know if you find anything suspicious. We can investigate into it and block it from availability and even kill it for other user's, if necessary.
È stato utile questo messaggio?
Citazione

Utente che ha posto la domanda

Got it. Thanks again for your help. Much appreciated.

Got it. Thanks again for your help. Much appreciated.
È stato utile questo messaggio?
Citazione
My_Cheese_Is_Slippin'
  • Top 10 Contributor
54 soluzioni 691 risposte

Not a problem. I'm glad we could help.

Not a problem. I'm glad we could help.
È stato utile questo messaggio?
Citazione
FredMcD
  • Top 10 Contributor
4223 soluzioni 58930 risposte

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but other programs as well.

You have heard of the fine print in shady contracts, right? Well, some installers you need to look at the itsy bitsy teeny weeny fine print.

You are thinking you are giving the installer permission to install the program you want by using the recommended option. But if you use the Manual Option Instead, you discover all kinds of stuff that you do not even know what it is or what it does.

From now on, everyone needs to Use The Manual Option to put a stop to this.

Note that these programs can also change browser/computer settings.

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but '''other programs as well. ''' You have heard of the '''fine print in shady''' '''contracts, ''' right? Well, some installers you need to look at the '''itsy bitsy teeny weeny fine print. ''' You are thinking you are giving the installer permission to install the program you want by using the '''recommended''' option. But if you use the '''Manual Option Instead, ''' you discover all kinds of stuff that '''you do not even know what it is or what it does. ''' From now on, everyone needs to '''Use The Manual Option''' to put a stop to this. '''Note''' that these programs can also change browser/computer settings.
È stato utile questo messaggio?
Citazione
Richiedi supporto

Bisogna accedere al proprio account per rispondere nelle discussioni. Se non si possiede ancora un account, inserire una nuova richiesta.