X
點擊此處開啟此網站的行動版。

技術支援討論區

pop-ups on screen when i click on firefox icon

已張貼

when i click to open firefox, my homepage comes up for a few seconds. Then other popups appear on screen. look like "brainestoune.com, and another window opens long narrow rectangle window asking for user name and password for something. another window asking to allow. I cannot get these off screen. Can you please help? I figured out I can go to bookmarks and click another website to get around this. Just ran malwarebytes. That didn't work.

                                    Thank you very much for any help you may provide
when i click to open firefox, my homepage comes up for a few seconds. Then other popups appear on screen. look like "brainestoune.com, and another window opens long narrow rectangle window asking for user name and password for something. another window asking to allow. I cannot get these off screen. Can you please help? I figured out I can go to bookmarks and click another website to get around this. Just ran malwarebytes. That didn't work. Thank you very much for any help you may provide
引用

額外的系統細節

應用程式

  • User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0

更多資訊

My_Cheese_Is_Slippin'
  • Top 10 Contributor
85 個解決方法 882 個答案

Hi maidendallas, Also try the AdwCleaner from Malwarebytes

https://support.malwarebytes.com/docs/DOC-1160

Hi maidendallas, Also try the AdwCleaner from Malwarebytes https://support.malwarebytes.com/docs/DOC-1160
這篇文章有幫助嗎? 0
引用
FredMcD
  • Top 10 Contributor
4257 個解決方法 59604 個答案

After the above, Start Firefox in Safe Mode {web link}

A small dialog should appear. Click Start In Safe Mode (not Refresh). Is the problem still there?

After the above, [https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode Start Firefox in Safe Mode] {web link} A small dialog should appear. Click '''Start In Safe Mode''' (not Refresh). Is the problem still there?
這篇文章有幫助嗎?
引用

提出問題者

The AdwCleaner did not work or find anything. And when I started in safe mode, I was in safemode with networking but had no connection. Thanks for your help. I am not tech savvy or sure if I am posting on here correctly. So far nothing has worked. Thanks for getting back so quick. Any more ideas?

Thanks again
The AdwCleaner did not work or find anything. And when I started in safe mode, I was in safemode with networking but had no connection. Thanks for your help. I am not tech savvy or sure if I am posting on here correctly. So far nothing has worked. Thanks for getting back so quick. Any more ideas? Thanks again
這篇文章有幫助嗎?
引用
My_Cheese_Is_Slippin'
  • Top 10 Contributor
85 個解決方法 882 個答案

有幫助的回覆

Hi maidendallas, I saw something in another thread about 'brainestoune' the other day, but I can't find it now. We were able to remove it.

My anti-virus blocks the website that your link directs it to. It is categorized as a Fake Tech Support Domain. Which is a blanket category that includes ransomware.

I'm surprised that Malwarebytes didn't find it and quarantine it or that AdwCleaner missed it.

What anti-virus software do you use? Does it have a scan tool?

Try running Malwarebytes Threat Scan again. If that doesn't find anything, try the AdwCleaner again.

Be sure Firefox is closed when you run these.

If all of that fails, here is a Malwarebytes Browser Extension that you can try:

https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/

Hi maidendallas, I saw something in another thread about 'brainestoune' the other day, but I can't find it now. We were able to remove it. My anti-virus blocks the website that your link directs it to. It is categorized as a Fake Tech Support Domain. Which is a blanket category that includes ransomware. I'm surprised that Malwarebytes didn't find it and quarantine it or that AdwCleaner missed it. What anti-virus software do you use? Does it have a scan tool? Try running Malwarebytes Threat Scan again. If that doesn't find anything, try the AdwCleaner again. Be sure Firefox is closed when you run these. If all of that fails, here is a Malwarebytes Browser Extension that you can try: https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/
這篇文章有幫助嗎? 1
引用
My_Cheese_Is_Slippin'
  • Top 10 Contributor
85 個解決方法 882 個答案
Hi again maidendallas, Here's a link for Norton Power Eraser: https://support.norton.com/sp/en/us/threat-removal-solutions/current/solutions/kb20100824120155EN_EndUserProfile_en_us?inid=hho_supp_search-npe
這篇文章有幫助嗎?
引用

提出問題者

I am using Avast antivirus. Maybe I am not sure how to start up in safe mode I did select with networking but said no connection was available. Maybe I'm doing something wrong. I will try these other suggestions this afternoon after work. Just wanted to let you know I will keep checking back and I will let you know my results as soon as I can after work today. Thanks again. Just FYI the very first time I ran malwarebytes, not adware cleaner, it did find and quarantine two items. But that did not fix the problem. That was before I tried the adware cleaner which said no threats were found. I work until about 4 or 5 Central Time. Will post again ASAP. Thank you

I am using Avast antivirus. Maybe I am not sure how to start up in safe mode I did select with networking but said no connection was available. Maybe I'm doing something wrong. I will try these other suggestions this afternoon after work. Just wanted to let you know I will keep checking back and I will let you know my results as soon as I can after work today. Thanks again. Just FYI the very first time I ran malwarebytes, not adware cleaner, it did find and quarantine two items. But that did not fix the problem. That was before I tried the adware cleaner which said no threats were found. I work until about 4 or 5 Central Time. Will post again ASAP. Thank you
這篇文章有幫助嗎?
引用

提出問題者

one more thing, when I bring up Firefox and the pop-up comes up on the screen my Avast does pop up and say threat was detected and it did block something. But apparently it's not blocking the brainestoune pop ups. And when I run my Avast scan it does not find anything either.

one more thing, when I bring up Firefox and the pop-up comes up on the screen my Avast does pop up and say threat was detected and it did block something. But apparently it's not blocking the brainestoune pop ups. And when I run my Avast scan it does not find anything either.
這篇文章有幫助嗎?
引用
My_Cheese_Is_Slippin'
  • Top 10 Contributor
85 個解決方法 882 個答案

Hi maidendallas,

I'll be happy to look into this some more for you today while you're at work. We'll get this fixed!

Have a great day.

Hi maidendallas, I'll be happy to look into this some more for you today while you're at work. We'll get this fixed! Have a great day.
這篇文章有幫助嗎?
引用
FredMcD
  • Top 10 Contributor
4257 個解決方法 59604 個答案

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.
這篇文章有幫助嗎?
引用
McCoy
  • Top 10 Contributor
545 個解決方法 5139 個答案

有幫助的回覆

The same name ("brainstoune") came up here :

https://support.mozilla.org/en-US/questions/1260300

No search results for that name ......

The same name ("brainstoune") came up here : https://support.mozilla.org/en-US/questions/1260300 No search results for that name ......
這篇文章有幫助嗎? 1
引用
My_Cheese_Is_Slippin'
  • Top 10 Contributor
85 個解決方法 882 個答案

Thank you McCoy,

My cheese was starting to slide off over that one.

I chased out "brainstoune" to "go.pub2srv" with the help of the Malwarebytes Extension. They are notorious for PUP's and adware.

I'm sure that we can help maidendallas with this.

Thanks

Thank you McCoy, My cheese was starting to slide off over that one. I chased out "brainstoune" to "go.pub2srv" with the help of the Malwarebytes Extension. They are notorious for PUP's and adware. I'm sure that we can help maidendallas with this. Thanks

由 My_Cheese_Is_Slippin' 於 修改

這篇文章有幫助嗎?
引用
McCoy
  • Top 10 Contributor
545 個解決方法 5139 個答案

My_Cheese_Is_Slippin said

I chased out "brainstoune" to go.pub2srv.com with the help of the Malwarebytes Extension.

Don't let anybody click on that link (which I made unclickable here), cause it leads to "cobalten. com", which is a redirect virus .....

See : https://www.2-viruses.com/remove-cobalten-com-redirect

''My_Cheese_Is_Slippin [[#answer-1226408|said]]'' <blockquote> I chased out "brainstoune" to go.pub2srv''.''com with the help of the Malwarebytes Extension. </blockquote> Don't let anybody click on that link (which I made unclickable here), cause it leads to "cobalten''.'' com", which is a redirect virus ..... See : https://www.2-viruses.com/remove-cobalten-com-redirect
這篇文章有幫助嗎?
引用

提出問題者

Ok I'm back. First off you guys are awesome. I didn't expect anyone to be so willing to help. I appreciate it so much.

 Seems to be fixed!!  I got home, read your replies then I ran malwarebytes again. It found and quarantined "pup.optionalremoteinjectionFF.  Then I ran Adwarecleaner and it did not find any threats. I've been closing and reopening firefox.  Restarted PC and opened firefox. Turned PC off and on and opened firefox. The popup seems to gone! I say seems because I thought it was gone once and it came right back. Hope it stays gone this time. I will definitely let you know if it comes back. Don't know why it didn't work last night? Maybe I had firefox open? I don't remember. 
  Can't thank you enough!!   
 So does that item it quarantined look familiar to you guys?
Ok I'm back. First off you guys are awesome. I didn't expect anyone to be so willing to help. I appreciate it so much. Seems to be fixed!! I got home, read your replies then I ran malwarebytes again. It found and quarantined "pup.optionalremoteinjectionFF. Then I ran Adwarecleaner and it did not find any threats. I've been closing and reopening firefox. Restarted PC and opened firefox. Turned PC off and on and opened firefox. The popup seems to gone! I say seems because I thought it was gone once and it came right back. Hope it stays gone this time. I will definitely let you know if it comes back. Don't know why it didn't work last night? Maybe I had firefox open? I don't remember. Can't thank you enough!! So does that item it quarantined look familiar to you guys?
這篇文章有幫助嗎?
引用
My_Cheese_Is_Slippin'
  • Top 10 Contributor
85 個解決方法 882 個答案

That's Great!

You should look for any extensions that might have "cobalten" "go.pub2srv" "brainestoune" or anything else that you don't remember adding and remove them.

Do the same in Windows apps.

I've been using the Malwarebytes extension for Firefox. It works as well or maybe a little faster than Malwarebytes Premium. You should add it and try it out. I think you'll be impressed.

Let us know if we can help with anything else.

That's Great! You should look for any extensions that might have "cobalten" "go.pub2srv" "brainestoune" or anything else that you don't remember adding and remove them. Do the same in Windows apps. I've been using the Malwarebytes extension for Firefox. It works as well or maybe a little faster than Malwarebytes Premium. You should add it and try it out. I think you'll be impressed. Let us know if we can help with anything else.
這篇文章有幫助嗎?
引用
My_Cheese_Is_Slippin'
  • Top 10 Contributor
85 個解決方法 882 個答案

Oh yeah,

The item "pup.optionalremoteinjectionFF" is a reference to a "Potentially Unwanted Program" with "remote injection" characteristics in "Firefox" and is "optionally" packaged with a program or extension.

The "remote injection" part is where it communicates with it's host to send you those really cool pop-ups and nuisances.

But there are other "remote injection" PUP's which can extract user id's and passwords or other personal data. And there are those which can really wreak havoc on your system, too.

Oh yeah, The item "pup.optionalremoteinjectionFF" is a reference to a "Potentially Unwanted Program" with "remote injection" characteristics in "Firefox" and is "optionally" packaged with a program or extension. The "remote injection" part is where it communicates with it's host to send you those really cool pop-ups and nuisances. But there are other "remote injection" PUP's which can extract user id's and passwords or other personal data. And there are those which can really wreak havoc on your system, too.

由 My_Cheese_Is_Slippin' 於 修改

這篇文章有幫助嗎?
引用

提出問題者

Again, not too tech savvy here. When you say extensions, are you referring to the firefox add ons / extensions?

Again, not too tech savvy here. When you say extensions, are you referring to the firefox add ons / extensions?
這篇文章有幫助嗎?
引用
My_Cheese_Is_Slippin'
  • Top 10 Contributor
85 個解決方法 882 個答案

Yeah, those.

Sometimes the "bad guys" are able to "package" these remote injection pup's with an add-on and they slip past Mozilla's scrutiny.

Let us know if you find anything suspicious. We can investigate into it and block it from availability and even kill it for other user's, if necessary.

Yeah, those. Sometimes the "bad guys" are able to "package" these remote injection pup's with an add-on and they slip past Mozilla's scrutiny. Let us know if you find anything suspicious. We can investigate into it and block it from availability and even kill it for other user's, if necessary.
這篇文章有幫助嗎?
引用

提出問題者

Got it. Thanks again for your help. Much appreciated.

Got it. Thanks again for your help. Much appreciated.
這篇文章有幫助嗎?
引用
My_Cheese_Is_Slippin'
  • Top 10 Contributor
85 個解決方法 882 個答案

Not a problem. I'm glad we could help.

Not a problem. I'm glad we could help.
這篇文章有幫助嗎?
引用
FredMcD
  • Top 10 Contributor
4257 個解決方法 59604 個答案

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but other programs as well.

You have heard of the fine print in shady contracts, right? Well, some installers you need to look at the itsy bitsy teeny weeny fine print.

You are thinking you are giving the installer permission to install the program you want by using the recommended option. But if you use the Manual Option Instead, you discover all kinds of stuff that you do not even know what it is or what it does.

From now on, everyone needs to Use The Manual Option to put a stop to this.

Note that these programs can also change browser/computer settings.

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but '''other programs as well. ''' You have heard of the '''fine print in shady''' '''contracts, ''' right? Well, some installers you need to look at the '''itsy bitsy teeny weeny fine print. ''' You are thinking you are giving the installer permission to install the program you want by using the '''recommended''' option. But if you use the '''Manual Option Instead, ''' you discover all kinds of stuff that '''you do not even know what it is or what it does. ''' From now on, everyone needs to '''Use The Manual Option''' to put a stop to this. '''Note''' that these programs can also change browser/computer settings.
這篇文章有幫助嗎?
引用
問個問題

如果您還沒有帳號,您必須先 登入您的帳號 來回覆文章。請 開始一個新問題