Clear the cache and cookies only from websites that cause problems.

"Clear the Cache":

• Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"

"Remove Cookies" from sites causing problems:

• Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: "Show Cookies"

Your System Details list shows that you have a user.js file in the profile folder to initialize prefs each time Firefox starts.

The user.js file is only present if you or other software has created this file and normally it wouldn't be there. You can check its content with a plain text editor (right-click: Open with) if you didn't create this file yourself.

The user.js file is read each time Firefox is started and initializes preferences to the value specified in this file, so preferences set via user.js can only be changed temporarily for the current session.

• http://kb.mozillazine.org/Preferences_not_saved

Do a malware check with several malware scanning programs on the Windows computer. Please scan with all programs because each program detects different malware. All these programs have free versions.

Make sure that you update each program to get the latest version of their databases before doing a scan.

• Malwarebytes' Anti-Malware:
  http://www.malwarebytes.org/mbam.php
• AdwCleaner:
  http://www.bleepingcomputer.com/download/adwcleaner/
  http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml
• SuperAntispyware:
  http://www.superantispyware.com/
• Microsoft Safety Scanner:
  http://www.microsoft.com/security/scanner/en-us/default.aspx
• Windows Defender:
  http://windows.microsoft.com/en-us/windows/using-defender
• Spybot Search & Destroy:
  http://www.safer-networking.org/en/index.html
• Kasperky Free Security Scan:
  http://www.kaspersky.com/security-scan

You can also do a check for a rootkit infection with TDSSKiller.

• Anti-rootkit utility TDSSKiller:
  http://support.kaspersky.com/5350?el=88446

See also:

• "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked

Problem solved. ** Thank you!!** No malware, just had to remove the cookies.

You're welcome.

Did you check what content there is in the user.js file?

You can check this in a text editor via the right-click context menu (Open with > Notepad).

Hi ffuturebright ,

Sorry to bother you after your Firefox problem has been resolved, but I am wondering if you would be able to help us.

Could you first of all search on the computer for all copies of the following files.

1. nptnt2.dll
2. libinject2.dll,
3. libredir2.dll

The first file does appear to have been on your computer. Possibly you will also have the other two.

Search Tips

• These instructions may help http://kb.mozillazine.org/Show_hidden_files_and_folders
• Also note Windows often hides the last part of at least some file names you may need to set Windows to show the full file name. The part of the file name after the last dot is often referred to as the file extension.
  See http://windows.microsoft.com/en-us/windows/show-hide-file-name-extensions#show-hide-file-name-extensions=windows-7

guigs2 from the Firefox HelpDesk will probably be following up on this post, but being paid staff is only available in working hours.

For now please try to find the files but do not take any other action, as you appear to have the file disabled, and we an not be certain yet that it is a bad copy.

Perhaps you could post back to say whether you are able to search for these files and whether or not you have found them.

Thanks in advance, John

Background Information

You seem to have a file installed that apparently is malware and Firefox engineers are trying to get hold of a copy of the file. They can study it to confirm it is bad,then pass the information on to the sites that detect malware.

Briefly you kindly provided troubleshooting information you posted this question

• https://support.mozilla.org/en-US/questions/1005843
• The information may be viewed using the link labelled More System Details at the top right of the question.
• That includes shown as a Modified Preference

dom.ipc.plugins.enabled.nptnt2.dll: False

We are very interested in the file nptn2.dll some of those are apparently bad files that cause problems.

There is more information in a contributors thread started by staff member Cheng Wang.

• Higher crash rates in 30? /forums/contributors/710406

P.S. Did you ever look into the user.js file issue ?

That is something that will affect your Firefox use, and if you did not create the file then who or what did ?

Hi John99,

I am not very computer literate and I was able to follow the directions easy enough, but I don't know where the files are or how to access them. I have had the same problem once before and fixed the issue by clearing cookies. I give you permission to access my computer. I am home from work Monday through Friday at 3:30 pm EST.

Hope to hear from you, Dawn

Hi Dawn,

Thanks for replying.

nptnt2.dll It is probably not worth worrying about this any further

Your Crash report actually listed the file nptnt2.dll but not the other two that we would be most interested in.

Research bycor-el suggests the nptnt2.dll file is in most cases probably left over from having had search.us.com something considered potentially unwanted but which is documented.

user.js This is also not critical as long as Firefox is working as you expect.

However it is relatively easy to look at so I will give instructions you can try to follow, and links to help articles related to this.

Briefly

• The file is in the Firefox profile.
• It may be hidden, as may be the last two letters on the filename.
• It is a short file of ordinary text so relatively easily read.
• It is not ordinarily needed and does not by default exist.
  Too often its purpose is to make changes to Firefox that you probably do not want, and to make those changes difficult for the average user to reverse.
  • As an an aside.
    It was often used to make the different Firefox searches use something the rogue software wanted you to use. Firefox was however changed recently to give the Firefox user control over this from the search bar.

If you want to look at the content of user.js or disable it We all need to begin somewhere, and I have no idea what you already know. Here is a crash course in improving your computer literacy.

1. First of all make sure at least temporarily Windows is letting you see hidden files, and also it is letting you see the full file name including the extension .js in the name user.js see
   • http://kb.mozillazine.org/Show_hidden_files_and_folders#Windows
     complete with screenshots
   • http://windows.microsoft.com/en-us/windows/show-hide-file-name-extensions#show-hide-file-name-extensions=windows-7
     You may also wish to click show all on the inked faq page for an explanation on how to rename a file and other useful tips about file extensions
2. Now with Firefox open, use the button on the troubleshooting information page to open up your Firefox profile folder.
   • To do so
     Key in about:support in the addressbar. Hit the Enter/Return Key on the keyboard. Mouse Click the option that says Open Profile folder (Or something with similar wording)
   • See also
     Profiles - Where Firefox stores your bookmarks, passwords and other user data_how-do-i-find-my-profile (Observe the article will scroll to display related profile notes)
3. With Firefox closed. Find the file user.js in the open profile folder. Rename the file by adding .txt to the name. That disables the file with respect to Firefox settings, and permits you to open it in a text processor such as Notepad by using a right click option.
   • If you need to reuse the file you will need to reverse the file name change. Mostly this sort of work is done with copies of a file not the original.
   • The instruction to rename works even if the .js is hidden but that makes it difficult to see & understand the real file names.
   • This article explains in more detail what the user.js file is and does
     http://kb.mozillazine.org/User.js_file
     It includes advanced tips on editing the user.js.
   • (see) Note with Windows the characters after the last dot known as the file extension are used to show he file type and help decide what actions the file may have. dot.txt files will be ordinarily be simple text and can be read by text viewers and text editors. (Probably even viewable from Firefox)

Hi John99,

I read through everything and searched the hidden files, I skipped over that sentence, and the only user.js files that came up were related to Windows and Windows service updates. I did a search for libinject2.dll and libredir2.dll and the message immediately came up 'no matches found'. I didn't make any changes.

Dawn

You probably have nothing to worry about.

But if you have a file called user.js it probably is

• within your Firefox profile
• intended to affect Firefox
• unrelated to Windows updates