Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

malware not in add-ons

  • 2 replies
  • 1 has this problem
  • Last reply by kakakali

more options

Note': Such problems do exist when all add-ons disabled and in safe mode Firefox (by "refresh firefox" option).

When Firefox is started, an advertising window would occur. The hijacked address: https://winxuan[.]jd[.]com/?cu=true&utm_source=kong&utm_medium=tuiguang&utm_campaign=t_1000623798_&utm_term=19dca519301545a6b711007896b3b333 hijacked address

Also, Ctrl + Shift + N was hijacked to the same window.

The window is strange: When I click the "+" button to open a new tab, the new tab directly opens in the previous window.

Perhaps something in Firefox itself was maliciously modified, I guess.

I am using 88.0.1 (64-bit) version Firefox on Win10.

Modified by Andrew

Chosen solution

Could you check to make sure your home page was not modified? See: How to set the home page

Another possible vector is a modified shortcut. Normally your shortcut has a "Target" like this:

"C:\Program Files\Mozilla Firefox\firefox.exe"

but malware may add a URL to the target so that Firefox launches a page every time you use the shortcut.

Ctrl+Shift+N will re-open the last window you closed during your session, so I don't know whether you are just seeing that, or something specifically attached to Ctrl+Shift+N.

Read this answer in context 👍 1

All Replies (2)

more options

Chosen Solution

Could you check to make sure your home page was not modified? See: How to set the home page

Another possible vector is a modified shortcut. Normally your shortcut has a "Target" like this:

"C:\Program Files\Mozilla Firefox\firefox.exe"

but malware may add a URL to the target so that Firefox launches a page every time you use the shortcut.

Ctrl+Shift+N will re-open the last window you closed during your session, so I don't know whether you are just seeing that, or something specifically attached to Ctrl+Shift+N.

Helpful?

more options

jscher2000 said

Could you check to make sure your home page was not modified? See: How to set the home page Another possible vector is a modified shortcut. Normally your shortcut has a "Target" like this: "C:\Program Files\Mozilla Firefox\firefox.exe" but malware may add a URL to the target so that Firefox launches a page every time you use the shortcut. Ctrl+Shift+N will re-open the last window you closed during your session, so I don't know whether you are just seeing that, or something specifically attached to Ctrl+Shift+N.

Thanks for your reply. Firefox now works fine. The shortcut was checked and was not modified. So it should be a malicious add-on :) (which is common and I'll find it). I didn't realize Ctrl+Shift+N would open the last closed window (usually to open a new private window in other browsers). QAQ

Helpful?

Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.