Whenever self-repair launches, FF opens a tab to clickvideodownload. Is this malware?
This is the URL that I'm discussing;
http://www.clickvideodownload.com/getting_started.php?od=23-7-15&cd=31-7-15&rid=d2c7c937be61244
I believe this may be a malware site. I've deleted cookies and caches, but it keeps popping up randomly when I launch FF.
I finally blocked outbound access to that URL, so that my computer cannot connect to it. However, I finally figured out the "random" trigger... it comes up as an additional tab to my presets, whenever I allow FF to connect to self-repair.mozilla.org!
If I deny that request for outbound connection, I don't see this problem occur.
So, what is FF doing when it contacts "self-repair"? Is this tool rebuilding cookies and tabs from "flash cookies", or other meta-data? How can I disable this "feature", or can you explain why I shouldn't just make a permanent "deny" rule for this connection?
"On Jul 31, 2015, Firefox tried to establish a connection to self-repair.mozilla.org on port 443 (https). The request was allowed via connection alert."
Best regards, -Z-
Chosen solution
Regarding the self-support site, see this article: https://wiki.mozilla.org/Advocacy/heartbeat
Read this answer in context 👍 0All Replies (3)
See this article about the New Tab page (about:newtab):
https://support.mozilla.org/kb/new-tab-page-show-hide-and-customize-top-sites If you do not keep changes after a restart then see:
http://kb.mozillazine.org/Preferences_not_saved Do a malware check with some malware scanning programs on the Windows computer. You need to scan with all programs because each program detects different malware. Make sure that you update each program to get the latest version of their databases before doing a scan.
http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware http://www.superantispyware.com/ - SuperAntispyware http://www.microsoft.com/security/scanner/en-us/default.aspx - Microsoft Safety Scanner http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page http://www.safer-networking.org/en/index.html - Spybot Search & Destroy You can also do a check for a rootkit infection with TDSSKiller.
http://support.kaspersky.com/viruses/solutions?qid=208280684 See also:
"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked
Could you check whether this preference has been modified:
(1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful.
(2) In the search box above the list, type or paste self and pause while the list is filtered
(3) If the browser.selfsupport.url preference is bolded and indicates "user set" then could you right-click > Copy value and paste it here?
If it is not bolded and indicates default value, then this preference is not the source of the unwanted address. Which leaves the mystery unsolved.
Also, if you double-click and blank out the URL, then restart Firefox, Firefox will stop trying to connect to that address.
Chosen Solution
Regarding the self-support site, see this article: https://wiki.mozilla.org/Advocacy/heartbeat