Fórum podpory Firefox

(Automatic translation in English ) As what happened in the title, when I was collecting information on the internet, the webpage was redirected twice to a malicious website. And then I closed an advertising module with "X " in the center of screen, my firefox started to automatically download apk files from a webpage

Hi,

I recently downloaded and installed some Android emulator named "Andy". Unfortunately, the .exe also installed all kinds of other Software on my Windows 7 system.

I removed most of the unwanted Software but one problem remained: A search result hijacker was part of the package. It replaces the top 4 results with some cryptic redirect links that are luckily displayed in a different font, otherwise I wouldn't have noticed at all.

I tracked the issue down to a addon in Firefox (see attached screenshot) that I cannot remove, no matter what I try.

What I tried to remove it: - I tried to remove the addon via about:config - I tried to run Firefox in safe mode and uninstall it - I tried to factory reset Firefox - I Installed Avira and made a system scan - I installed MalwareBytes and made a system scan - I check all the extension folders for addons that I do not know but can't find anything - I checked my whole system for any xpi-files but couldn't find any.

I am out of ideas. I can disable the addon but thats about it. After a while Firefox will shut itself down and the next time I start it, the addon is on again. When I resinstall FIrefox, the same thing happens. The addon is always back.

When I inspect the element it loads some invisible icon file that is supposedly located in "src="jar:file:///C:/Windows/Installer/%7BB28AF4A4-C997-4A5B-A111-FD1E65138A8D%7D/%7B02E337C0-4D70-452D-AA64-92D0A8C5D953%7D.xpi!/icon48.png"", if that helps. But the location doesn't exist on my system.

Can anyone here help me? I alread sent a problem report via the official tool.

Sincerely Florian

Hello I sent a report of theft in the plugins section of your site some time ago, but I did not receive a response A robbery that robbed me of $ 42,600 I will explain it to you again and please take care so that more people do not fall victim This theft happened by Ledger live fake plugin eves in this theft, with small changes in the logo and the name of the Baba plugin, put it in the plugins section of your site and steal from the users' accounts. With a simple comparison between the fake plugins on your site and the original plugin, you can find out if the plugins in the plugins section of your site are fake or stolen. The name of the main plugin is Ledger live , and on your site, they are stealing with the same names and with a little change All plugins in this section of your site plugins are fake and thieves except SpeedLedger Which has a different topic and you can check https://addons.mozilla.org/fa/firefox/search/?platform=windows&q=ledger%20live I look forward to hearing from you to prevent further theft Thankful

Just ran a search in the address bar and was taken to this "Firefox search contest 2020" page. Never happened before and I assume it's a scam, have checked my add-ons and plugins but I don't see anything suspicious. Is this something to be concerned about?

If helpful, the url for this page is: https://sweetrelxme16.live/2262313374/?utm_campaign=QPF8euu28II5lw7O2iHhCugVqK5RzfdNsTpLaMM91qY1&t=main9_f90c820c180a04261c8d0973930afd&f=1&fp=4e4lHv53VRFsZD7g8DH8cHoGoZqhKuVVuUJjMi0vd9MavAzv9Ra8r35cGpaMIxPQMRUMvVHb0l82DIdO3468J0I1IGraOutgrge%2Bq9NWJxSgTtCArhRG9wrtn5m01%2Bx0n3MmjZiSV6rdotDp1uZK3X%2FC73QNaXrVEwU6oP9mIPSfJK%2B9iUDEhYFO3CUB0gqNmsYjipzEBg99p%2B0M3CKQbwifntTBZHvPFeMpyKOWKE7SKgze%2FpKn5JZBWY3pSSBh4y1pXXC3eYKb2LhL2ZoH4%2BWQ9hbMgWcybfFg5BkLBtWg1kwuZsikClxevJtm60RKV7prd51JiGjLrzf%2FNTDqxdrpwU2A0t4hnMG%2FGjpBHkvqc7jsROicHRQJdXvl6Xw%2BK1B4QHr4OdFM%2BRtvtMIuVoWNw3847b%2Bz5EijdBw1lIcKWD54y5Ykl2UHIWkWE3GJ0k%2Boz0qwm%2Bjks2VWfUk1dLIjwzZZ67mP3%2BIlzBvpAGyhYi%2FWISpYwui97wQ8U53uQKjnBTYIz1WN5e6HZkKCRHJTfzo%2FYcUJhu%2Fk4HDS04VDapoV6VLpeDv4JHDFP3AcqH5EPLVv648vIOUc%2B27TQByyZx70ORGYyOztbMH6xU0v%2B%2FM6DLecFWnHAPkQ8X%2Fk1igvbBNx8cPPUGQOchdh9Y1Hc7nm%2F4mZ%2BHsCVI5oeT%2FX7TJ15lDFHvc7uVp7J61DCWuWlQdtwjhqXu7Ms0k45AQQwlDJe4XvNbuDOTcti8QfPQw0zMaHTsoH6KjWUiBG6Qlk5UE4apuslT%2BVS8%2FhGlqRo190rqmBhsp3GLn%2B%2FkX8eoNQBK5adrrme1vjyuDFwg3XB1E0E9FY5RGGQuCmS2NgJ5NY1epvc0bT8qUYVwoKESw3dxc0I8oaHXm8pjJotg8dJ9p18vFzQfENSQ1Lif%2FXLA3qsLDDGOeLC5KQwPTUDb%2Bbwt5MjbLFbi09eakKIqSw1T6jyb6AzUIbIYU9CobdiZXlqXR1faA65a%2Bb49rHlYpFMsmtVMGAZGJ6GRcpqgidhwUeEfDWptpsKYjjcWxDXhB3bu93CuigV8dR%2FobTpbwwGmyFCtClfyPoqFgQ57R83bMHQta0ufdOf5rN%2BN%2BUUcgassNy4H84lggSNKjX1Tfle8JYPE8P850TKT8zL0qRyVHs9cq5ng7k%2FQl3TB847FICfrcWLUcxAU5Ed5hGOBPMcjGbc1pABVRV9%2BIivKKTvd06vBei1U27t1QJnlPCRub9A1wI2MEwWlJijoNtXlXN1odzAUFPLHNLG%2B3OjI80qmpNeUJoxRmfUN%2B%2BohI9hbzBle58Ij9659u%2FRIvLRx5Cs96YiHAeFadW%2FDvWvDJh3TzYhc798ZMqiB4KIcFtttKF8siLLCWSmhOmvNl0xVlAZBjrv%2Bs7beWbDKa2

Hello everyone, Trying to find out if my Mac Mini has been infected with flashback. Using this terminal command,

defaults read /Applications/Firefox.app/Contents/Info LSEnvironment,

I got this response:

{MallocNanoZone = 0;}

It should read:

The domain/default pair of (/Applications/Firefox.app/Contents/Info, LSEnvironment) does not exist

I cannot find anything about this and was wondering if it indicates anything malicious. Anyone know about this? Thanks.

I just want to report a malware attack I experienced yesterday (8/29/20) which seemed to affect only Firefox.

After I clicked on the link to Boston Globe article my Firefox screen was filled with what purported to be a message from Microsoft saying that my computer was blocked because of suspicious activity detected on my IP address and telling me to call 1-888-222-6480. It also wanted me to enter my Microsoft password and warned me not to turn off my computer. The whole thing looked suspicious to me, especially since a pop-up window on the page requesting me to enter something (I forget what) showed a URL that began https://drink3.ga At some point, I don’t remember whether it was when I did turn off my computer or whether it was because I didn’t respond to messages commands, the malware did something to make my computer heat up and caused the fan to run at a ferocious rate until a message appeared that a break point had been reached and Firefox closed down. I was then able to use another browser to get to the Firefox support page and learn about refreshing Firefox. After I did that, Firefox behaved normally.

I am sending this to you because it’s something you should be aware of and represents a vulnerability in Firefox that should be addressed.

Hi, I am running the french FF 79.0 64 bit I just started to download the latest iso of debian 10.5 from the official Mirror and got the FF warning that it contains a virus. I am not sure if you have a team to check false positive as this is the official site and that it was released only yesterday https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/debian-10.5.0-amd64-DVD-1.iso and I am getting worried after I got this message. Thank you in advance. Regards, Stephane

Firefox attempts to connect to a website with a known trojan every time a different website is chosen. Both Bitdefender and Malwarebytes block it. Windows Defender doesn't recognize it that I can tell. It's very annoying!

This is on a 64-bit platform using Widows 10 Home, with all updates applied, using the latest version of Mozillla Firefox. Microsoft Edge doesn't exhibit the same behavior. Haven't tried Internet Explorer.

Please fix Firefox.exe

Leaving my computer on/open through earling morning 5-6-20, find on my screen the following of I encountered, and wanted to report!

Asking first... Was this a ligitimate request? And then continues, actions I took,... to view control panel for dates of possible instals 'by recent dates',... intention to uninstall(s).

We're Sorry Firefox had a problem and crashed. We'll try to restore tabs and windows when it restarts. To help us diagnose and fix the problem, you can send us a crash report (?-checkmark box) Tell Mozilla about the crash so they can fix it Details (?) Add a comment (comments are publicly visable) (?-checkmark box) Include the address of the page I was on (?-checkmark box) Allow Mozilla to contact me about this report (?)Enter your email address here Your crash report will be submitted before you quit or restart.

I cancelled the checkmark, of the 'screen box asked for the query-report', did not submit! Then hard started-shutdown my computer!

GUESS WHAT? My OPEN SCREEN had a BACKGROUND of a CHINESE PAGODA and LAKE MURAL! Not anything I consciously I would open with!

Continuing I went to Control Panel! Control panel showed a 5-5-20 application, Publisher Google Chrome, I didn't install or reinstall this 'date period'! Next line showed a 4-29-20 application, Publisher Google Chrome, I'm sure I didn't need to install or reinstall, but while I often daily go to Google Search.

FOLLOWING:

Also showed three (3) issues in Control Panel, on 'close dates other installs', I am going to UNINSTALL Verified Publisher London Jamocha-xyz,... were of SAME TYPE 'AdoptOpenJDK - Open source, prebuilt OpenJDK binaries (adoptopenjdk.net)

About 36,700 results (0.49 seconds) Search Results Web Result with Site Links

AdoptOpenJDK - Open source, prebuilt OpenJDK binaries adoptopenjdk.net Choosing the right JVM. HotSpot is the VM from the OpenJDK community. It is the most widely used VM today and is used in Oracle's JDK. It is suitable for all ... Latest release HotSpot is the VM from the OpenJDK community. It is the ...

About AdoptOpenJDK provides rock-solid OpenJDK binaries for the ... Installation Installers are currently available for Windows®, Linux®, and macOS ...

FAQ The JDK and JRE binaries we produce are published under ... Build archive HotSpot is the VM from the OpenJDK community. It is the ...

Release Notes S8010500: [parfait] Possible null pointer dereference at hotspot

I shutdown and restart! Still have the Chinese mural!

Robert!

No need to contact, if only questions re-verification any of the above, YOU have my Net ID!

I've realised that once in a while my anti-virus (BullGuard) detects Trojan and I didn't think much of it because I thought my anti-virus would just get rid of it but just about 10 minutes ago (BullGuard detected it at 20:53) and when I open it and realise it's detected a Trojan about 5-6 times and it's automatically put it to quarantine which I have now deleted and forgot to screenshot beforehand, but it seems Trojan is attached to firefox somehow? I got Firefox about 2-3 weeks ago-ish so I am not sure why this is happening and I am concerned, is there anything I can do? I am currently running two full scans with BullGuard and Malwarebytes. Any suggestions would be highly appreciated.

Out of the blue I received a message stating I was being attacked on my Mac by software that maybe Ransomware. I was asked to close and delete the files.

I run Mac Os 10.14.6 and have never had any previous problems. After quarantining these files I quit Firefox and then could not open it. I therefore deleted the .app and reinstalled Firefox 75. I can only start up Firefox by using the Terminal Command window using the Profile manager. I created a new profile but cannot see my old profile within the Profile Manager. I can find the old profile under Profile's in Application Support/Users. So despite having a new default set created, I still cannot get the Firefox.app to open by clicking on it. I have now deleted the old profile and still cannot open the Firefox app from the dock or applications folder.

help please!

I could never find out why I got the message "Ransomware may be trying to access my computer", except two files have appeared in my bin; Edgar Poe Murder and Righteous Games.

Any help appreciated.

I'm using Firefox with add ons including No Script. Something called jackhillty.net keeps following me around. What is it and how do I get rid of it ? P.S. I'm not a programmer or IT person. Please keep it simple. Thanks

Hi all

For security reasons, all new FF distributions are tested. When checking the distribution kit version 68.5.0esr (exe for x86 and x64) - the antivirus software "VirusTotal" detected Trojan.Inject.bcbj. FortiSandbox also scolded the distribution on x86 - saying that it deleted the file "% programfiles (x86)% \ google \ update \ 1.3.33.17 \ googlecrachhandler.exe" - its installation is undesirable in the ESR version.

Without my intention Relosoun.com starts Firefox browser. When using the Firefox regularly (every 10-15 minutes) relosoun.com tryies to open the new tab being blocked by antivirus Avast. All efforts including reinstalling Firefox, using CC cleaner, Malwarebytes etc do not help. On other gadgets Relosoun.com doesn't appear in Firefox in the same account.

For the last several days McAfee has blocked the following IP address 52.216.241.14 as being suspicious. When I Google searched this IP address FF lit up with a red warning message. What's up with this address? Also, is there a better forum to get more information about this address? Thanks

I had this problem with Safari & Chrome but I was able to fix it. I cannot get rid of "search manager." I have looked into all the items listed that I can find but every time I sign onto Firefox, I'm directed to search manager. I just open a new tab. It is NOT listed as one of the search engines. How can I get rid of it? My home page is a blank page.

I do a search and a black screen with white font appears blocking me and claims you must be 18+ and I already claimed that earlier with safesearch off. I think this is a virus of some kind and wondering how to get rid of it. Have you heard of this happening? I look in Control Panel under programs to uninstall and don't find it there. What can I do?

On only one of my computers a "tab" is opening on its own that presents itself as being from ROGERS my ISP. I took a screen shot and captured the URL. Contacted Rogers - It is not them - They recommeded I REMOVE FIREFOX and INSTALL CHROME. I have some computer knowledge but not an expert. I tried to get rid of this by running Norton antivirus, and FIX ME STICK antivirus and I removed and then re-installed Firefox - the bogus page keep coming back. this is the page https://ivisitorapp.top/43fee1ba2ffc1ec8587395fc843ce6c5/index.html?ip=2607%3Afea8%3A9920%3Ad8e6%3A8467%3Acf0b%3Acca0%3A8171&trackid=2020011401450327 It is NOT ROGERS

Virus www.windowsxlive.net once on the computer changes the home page in the browser. Cannot be removed by antivirus software. Removes the check box for opening the previous session. Does not disappear after reinstalling. This makes it impossible to work with the browser.