Suddenly, Firefox blocks most sites, Mozilla and Google included.
I'm in Mac OSX Sierra. No antivirus installed. Firefox is 56.0.2 since 57 gave me problems. It worked perfectly and, all of a sudden, wham! Some sites work, some others, MOZILLA.ORG and GOOGLE INCLUDED, no more. Restarted in safe mode, no way. Cleared cache. No way. Trashed the program and reinstalled in 56.0.2, no way, reinstalled in 57, no way. Erased the cert8.db files in profiles. No way, no way, no way. In some sites, I could add exception but then they open up with no images, not formatted, in a weird plain mode.
When I try google.com, it says:
Your connection is not secure The owner of www.google.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website. This site uses HTTP Strict Transport Security (HSTS) to specify that Firefox may only connect to it securely. As a result, it is not possible to add an exception for this certificate. Learn more…
When I click "learn more", it goes to Mozilla but... MOZILLA IS BLOCKED TOO! I open the same page in Safari but just say to fix the antivirus and I have no antivirus.
I click the "advanced" tag and this is what shows up:
www.google.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER
I click the SEC_ERROR and there's another window saying "copy text to clipboard" and... ok, I'm an idiot but I don't know what's the clipboard and where's it. Anyway, the text is this:
https://www.google.com/ Peer’s Certificate issuer is not recognized. HTTP Strict Transport Security: true HTTP Public Key Pinning: true Certificate chain:
BEGIN CERTIFICATE-----
MIIEbjCCAtagAwIBAgIEQON3FjANBgkqhkiG9w0BAQsFADB5MQswCQYDVQQGEwJV UzEMMAoGA1UECBMDQ0FMMRAwDgYDVQQKEwdBcHBsaWFuMRAwDgYDVQQLEwdBcHBs aWFuMRQwEgYDVQQDEwthcHBsaWFuLmNvbTEiMCAGCSqGSIb3DQEJARYTbm9yZXBs eUBhcHBsaWFuLmNvbTAeFw0xNzExMzAyMjA1MzBaFw0xODExMzAyMjExMzVaMGgx CzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1Nb3Vu dGFpbiBWaWV3MRMwEQYDVQQKDApHb29nbGUgSW5jMRcwFQYDVQQDDA53d3cuZ29v Z2xlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMODO2YxZ9pg OLoGAD6eti8nkPGSxfyB/E1OBSAkEqFKsnFjmnbZLT1oOs7bnibbB4ap6TCNPZcr o2Ftv9vioZaKK+tCwd620pb7HAjCtcd3G5kH+g+5w88V9NeIytADtltDa61UGmyI MjuSNg7s9xAynC6JgU1bF0tib0IJe/wiWWcy3pj7x0K1vhaAhbOSnQPYznLZT14s ifn/QFuOMgI8d4Qv+zr+seilv2FES98AvsVNZXsXvePUir9G7UXSIU/re2X9XDLG hf+Y8r5hz83g6/O1dTGQcPp+4Q9dP63BhnN4YpZwelYwutGNVAqaoGkhVLkGENCq paGeZ3g/Ky8CAwEAAaOBjjCBizAZBgNVHREEEjAQgg53d3cuZ29vZ2xlLmNvbTAM BgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDATAd BgNVHQ4EFgQU2jmj7l5rSw0yVb/vlWAYkK/YBwkwHwYDVR0jBBgwFoAU06Do/V5P cHClshXTQGm3OhfYSbswDQYJKoZIhvcNAQELBQADggGBAIT3dx3Ub+Vxi8M9BikW dLm8SRnXwLESPpQQLcuFQuH4+wOBAEGf3dHF09R3DVb5iukF0FCYOAuiHNGp49On U0yQkuisPgSqAn3rhl42JQG9Z2ouFdfUaCEoloYkG7caqIfv1JqXHSLtYgCovSzf iio0yYfshOGreLnHVQbmXoQYDcDOViweBkbdjlOR4dC/J64DuvJZqtl/EbN4e3tO FsjYijOmU7aZIxoreMRjtXUPViPKXshl6vgCjDK9xQjDFwX8OaDbZ4BhGLEs9+1i bzM+4ElUFCstQNM16hPhLZvTTzIRFMRXWmdGJNAWOCkVjNuSXhGOGF+r7zjUq60a vAEvbNIvsHSHd1FqViCKvbn1Yfl5kVbAQETYkUy+Aw7s0MzgNPJrCfuQM7aVf7ds QFbJUCdHUTHq7HoUUzY5xAD7z61xp8dZ6ME+POegdOkFoFUuDyfq3yfbJ3Iyqjs5 VNAUv6Ce9sxIe3XpG68x1G0J1zeyFQK8qRXRz2MPO9M3kg==
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIFVDCCA7ygAwIBAgIJAOYPBGf+SndXMA0GCSqGSIb3DQEBCwUAMHkxCzAJBgNV BAYTAlVTMQwwCgYDVQQIEwNDQUwxEDAOBgNVBAoTB0FwcGxpYW4xEDAOBgNVBAsT B0FwcGxpYW4xFDASBgNVBAMTC2FwcGxpYW4uY29tMSIwIAYJKoZIhvcNAQkBFhNu b3JlcGx5QGFwcGxpYW4uY29tMB4XDTE3MDYyODE4MDQwMloXDTIyMDYyNzE4MDQw MloweTELMAkGA1UEBhMCVVMxDDAKBgNVBAgTA0NBTDEQMA4GA1UEChMHQXBwbGlh bjEQMA4GA1UECxMHQXBwbGlhbjEUMBIGA1UEAxMLYXBwbGlhbi5jb20xIjAgBgkq hkiG9w0BCQEWE25vcmVwbHlAYXBwbGlhbi5jb20wggGiMA0GCSqGSIb3DQEBAQUA A4IBjwAwggGKAoIBgQC/XwO1kEMVkotoXSDQ/U/Z2E5fRLcUPn8D9bGhq0DGVaG0 t88kUcsjOAwh0HboVfj6exZNirOGAijfVuoOeUKjNRLQyD27lYvtCcuS8XC7l6wr gdnnGi5nx9EsyEVm92vVeil8NFZUsCQd2tj4KkHsZ23n7DMaO9sm2KIG29YMTFge 9QbWsXl1MGRPVeLuvW0rLlyiMITMntcQllZdPk0ebf7KQ8y8SmO+8GvKez11mo1H mnWYhb/9Zq1yrsw3Q9BlDEsdEwxVSpoXNFJayHAIQReSkVT3Mxke58C0Fus7Lrlk jCe64xVydl8aHzmaipwoScXqyHehYJdhdzekgjy7ox7S6FXKOcbFJJ42G/lizoUm kvZW8i4/fqVJkhOSMeJ9m5IL7nSL5qvfPMCRrSO2UUw0anh9u5p0wBAs4NSWuVdy /9iwdMyJqg3A0JSsYjHUDKD1s5yoOpTFp2xF2clm3Pm9mBCKmndghfJvxeBOI3hO TA2LgXdPkdCZvMrZEvECAwEAAaOB3jCB2zAdBgNVHQ4EFgQU06Do/V5PcHClshXT QGm3OhfYSbswgasGA1UdIwSBozCBoIAU06Do/V5PcHClshXTQGm3OhfYSbuhfaR7 MHkxCzAJBgNVBAYTAlVTMQwwCgYDVQQIEwNDQUwxEDAOBgNVBAoTB0FwcGxpYW4x EDAOBgNVBAsTB0FwcGxpYW4xFDASBgNVBAMTC2FwcGxpYW4uY29tMSIwIAYJKoZI hvcNAQkBFhNub3JlcGx5QGFwcGxpYW4uY29tggkA5g8EZ/5Kd1cwDAYDVR0TBAUw AwEB/zANBgkqhkiG9w0BAQsFAAOCAYEAF1V/rY1jpp5yFTSnnaOL43EEb/WwGPXu 6kRHg/KmAdHbc8KGW1Kgq7+8dtbwMRjtaItMIaxKh5rd1UUERBartWSHiipa9Y8T 0zfUQ5PkyirA0ikmLHbSk85QUDlYaEl9lckz5JBa+w2bZEri3RFvD/OnXgrHo0x+ A9cPy4KtLGhPe843kmhxPG6TS4VFPiA97uLlm7LCzCfyi6r45X78hr1c7R17z1MY X0kkzvWzJ+hQmhNx934Q23aHCoYYnzCSLignK8+R+BtedlvLbr3Kje5C8g1/cAxl W7RtSLpaesf+cPXnA8Z3n5MPOxcE5M9eif6GWhnBc0aI9HFmzAh+V/rB5GZFbS5P nzFwL4C7J09zuuAWU3kpQwR3b3o0kdO+lUmt8ThCRRZE8DONQ6XGwaFdp3BWCHpr RvaLBXXrJ4z2nPP0vxELWgHyBvyG6TqCd72ohV6/+GB18FJ+cxYwJCO1wRkI7EE4 xUTczosDCZe83VJuI7MltfXyILh3D0dt
END CERTIFICATE-----
That's all folks. I'm lost. Firefox has been my favorite in years and now... I'm stuck. Thanks in advance for your help.
All Replies (3)
Thank you for the certificate chain. The Issuer of the site certificate is listed as applian.com which makes Freecorder and Replay Media Catcher. These programs intercept your browser connections and in order to decode the secure sites, they present fake certificates to Firefox. Do you have that software?
If you trust the program to read all your Firefox browsing traffic, you probably can set up Firefox to trust its fake certificates. If not, perhaps you can configure the program not to intercept your Firefox connections.
Thanks so much Jscher for your reply.
First of all, I tell you that I woke up this morning (I'm in Europe) and Firefox is working again flawlessly. All ok. All perfect. Same sites blocked last night are now running with no apparent trouble. But, of course, I'd like to have my guns ready in case the villain comes back...
About applian.com: you say a program from their bundle steps in between me and my connections (google or the same firefox). Problem is... I don't have that software on my machine! Maybe, not sure at all, I visited their site once but never downloaded any program, never tried it for free. I use videodownloadhelper add-on instead. How comes they intrude in my system like that? Is there a trojan in my Mac?
And one last question, if I may. What does it mean "copy text to clipboard"? I know how to copy and paste, of course, but I have no clue about what the clipboard is and where it is.
Thanks for your help and patience. Have a great day
Maybe, safer to check than not : Please use more than 1 scanner as each uses diff tech : https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware Save your Report and google each before deleting anything as do not want to delete something you need, If need help : https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/ Post in only 1 forum, then wait.
Please let us know if this solved your issue or if need further assistance.