Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Lolu chungechunge lwabekwa kunqolobane. Uyacelwa ubuze umbuzo omusha uma udinga usizo.

pop-ups on screen when i click on firefox icon

  • 20 uphendule
  • 1 inale nkinga
  • Igcine ukuphendulwa ngu FredMcD

more options

when i click to open firefox, my homepage comes up for a few seconds. Then other popups appear on screen. look like ", and another window opens long narrow rectangle window asking for user name and password for something. another window asking to allow. I cannot get these off screen. Can you please help? I figured out I can go to bookmarks and click another website to get around this. Just ran malwarebytes. That didn't work.

                                    Thank you very much for any help you may provide

All Replies (20)

more options

Hi maidendallas, Also try the AdwCleaner from Malwarebytes

more options

After the above, Start Firefox in Safe Mode {web link}

A small dialog should appear. Click Start In Safe Mode (not Refresh). Is the problem still there?

more options

The AdwCleaner did not work or find anything. And when I started in safe mode, I was in safemode with networking but had no connection. Thanks for your help. I am not tech savvy or sure if I am posting on here correctly. So far nothing has worked. Thanks for getting back so quick. Any more ideas?

Thanks again
more options

Hi maidendallas, I saw something in another thread about 'brainestoune' the other day, but I can't find it now. We were able to remove it.

My anti-virus blocks the website that your link directs it to. It is categorized as a Fake Tech Support Domain. Which is a blanket category that includes ransomware.

I'm surprised that Malwarebytes didn't find it and quarantine it or that AdwCleaner missed it.

What anti-virus software do you use? Does it have a scan tool?

Try running Malwarebytes Threat Scan again. If that doesn't find anything, try the AdwCleaner again.

Be sure Firefox is closed when you run these.

If all of that fails, here is a Malwarebytes Browser Extension that you can try:

more options
more options

I am using Avast antivirus. Maybe I am not sure how to start up in safe mode I did select with networking but said no connection was available. Maybe I'm doing something wrong. I will try these other suggestions this afternoon after work. Just wanted to let you know I will keep checking back and I will let you know my results as soon as I can after work today. Thanks again. Just FYI the very first time I ran malwarebytes, not adware cleaner, it did find and quarantine two items. But that did not fix the problem. That was before I tried the adware cleaner which said no threats were found. I work until about 4 or 5 Central Time. Will post again ASAP. Thank you

more options

one more thing, when I bring up Firefox and the pop-up comes up on the screen my Avast does pop up and say threat was detected and it did block something. But apparently it's not blocking the brainestoune pop ups. And when I run my Avast scan it does not find anything either.

more options

Hi maidendallas,

I'll be happy to look into this some more for you today while you're at work. We'll get this fixed!

Have a great day.

more options

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

more options

The same name ("brainstoune") came up here :

No search results for that name ......

more options

Thank you McCoy,

My cheese was starting to slide off over that one.

I chased out "brainstoune" to "go.pub2srv" with the help of the Malwarebytes Extension. They are notorious for PUP's and adware.

I'm sure that we can help maidendallas with this.


Okulungisiwe ngu RobertJ

more options

My_Cheese_Is_Slippin said

I chased out "brainstoune" to with the help of the Malwarebytes Extension.

Don't let anybody click on that link (which I made unclickable here), cause it leads to "cobalten. com", which is a redirect virus .....

See :

more options

Ok I'm back. First off you guys are awesome. I didn't expect anyone to be so willing to help. I appreciate it so much.

 Seems to be fixed!!  I got home, read your replies then I ran malwarebytes again. It found and quarantined "pup.optionalremoteinjectionFF.  Then I ran Adwarecleaner and it did not find any threats. I've been closing and reopening firefox.  Restarted PC and opened firefox. Turned PC off and on and opened firefox. The popup seems to gone! I say seems because I thought it was gone once and it came right back. Hope it stays gone this time. I will definitely let you know if it comes back. Don't know why it didn't work last night? Maybe I had firefox open? I don't remember. 
  Can't thank you enough!!   
 So does that item it quarantined look familiar to you guys?
more options

That's Great!

You should look for any extensions that might have "cobalten" "go.pub2srv" "brainestoune" or anything else that you don't remember adding and remove them.

Do the same in Windows apps.

I've been using the Malwarebytes extension for Firefox. It works as well or maybe a little faster than Malwarebytes Premium. You should add it and try it out. I think you'll be impressed.

Let us know if we can help with anything else.

more options

Oh yeah,

The item "pup.optionalremoteinjectionFF" is a reference to a "Potentially Unwanted Program" with "remote injection" characteristics in "Firefox" and is "optionally" packaged with a program or extension.

The "remote injection" part is where it communicates with it's host to send you those really cool pop-ups and nuisances.

But there are other "remote injection" PUP's which can extract user id's and passwords or other personal data. And there are those which can really wreak havoc on your system, too.

Okulungisiwe ngu RobertJ

more options

Again, not too tech savvy here. When you say extensions, are you referring to the firefox add ons / extensions?

more options

Yeah, those.

Sometimes the "bad guys" are able to "package" these remote injection pup's with an add-on and they slip past Mozilla's scrutiny.

Let us know if you find anything suspicious. We can investigate into it and block it from availability and even kill it for other user's, if necessary.

more options

Got it. Thanks again for your help. Much appreciated.

more options

Not a problem. I'm glad we could help.

more options

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but other programs as well.

You have heard of the fine print in shady contracts, right? Well, some installers you need to look at the itsy bitsy teeny weeny fine print.

You are thinking you are giving the installer permission to install the program you want by using the recommended option. But if you use the Manual Option Instead, you discover all kinds of stuff that you do not even know what it is or what it does.

From now on, everyone needs to Use The Manual Option to put a stop to this.

Note that these programs can also change browser/computer settings.