
When I try to follow a link, I often get this: http://jsf.jsticket.net/sd/cpops-1.2.0.html?u=http%3A%2F%2Fjsf.jsticket.net%2Fsd%2Fapps%2Ffusionx%2F0.0.4.html%3
A new Firefox window opens (not a new tab) with the above address in the address line.
How do I stop it?
All Replies (6)
hello hofer5, you have various malicious modifications present. please try these steps:
- reset firefox (this wil keep your bookmarks and passwords)
- afterwards go to firefox > addons > extensions and in case there are still extensions listed there, disable them.
- finally run a full scan of your system with different security tools like the free version of malwarebytes and adwcleaner to make sure that adware isn't present in other places of your system as well.
Uninstall ViewPassword extension and delete User.JS file (open file explorer, enter %AppData%, and there search for user.js ). [ jsf.jsticket.net is often used by semi-malicious add-ons.]
Link to removal guide that includes a download button for "SpyHunter Installer.exe" removed by moderator. SpyHunter is questionable software (ref.1 - ref 2.). For malware removal recommendations, see Troubleshoot Firefox issues caused by malware. aw
Modified
Hi Giedrius_M
I wonder whether it was necessary to link to your article?
The main information was contained in the last pragraph about scanning for malware. And that is already covered by our own official article as linked from a post above.
Your article mentions
The purpose of these messages is to promote several websites and increase their traffic as well as get money from clicks on affiliate links.
I think I could be forgiven for thinking that sort of thing could be your intention.
You also say
Important Note: Although it is possible to manually remove jsticket popup, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using
May I suggest that in future you consider very carefully what information you link to. I suggest you consider avoiding linking to information promoting paid services for malware removal.
John, one of the forum Moderators
Modified
John99 : While in this case it is pretty much obvious which plugin is responsible for popups, it is not so obvious who and what installed this plugin in the first place.
Personally I know only one decent enough free anti-malware program that provides real time protection aka Spybot that would protect from reinfection if there is aggressive installer for hijacker from legitimate program.... and its database is still not good.
Giedrius_M,
Thanks for the reply.
That is a better information to impart then, rather than link to a site offering paid for support and links relating to software that may be difficult to remove. However I also notice this
Lets also remember many readers of this thread will use WIndows and so have available free basic security software
- note Microsoft Security Essentials http://windows.microsoft.com/MSE
is satisfactory permanent antivirus for Windows 7/Vista/XP for those that don't already have one.
John99 : Against trojans - there is no other free Antivirus I would use except MSE (though I prefer Kaspersky or ESET for myself). For PUPs (and hijacker installers are treated like PUPS or even undetected) and for (partly) adware MSE is not so reliable in my experience.