Kukhonjiswa imibuzo ethegiwe: Veza yonke imibuzo
  • Kusonjululiwe
  • Okugcinwe kunqolobane

"New" Firefox Search Result Hijacker

Hi, I recently downloaded and installed some Android emulator named "Andy". Unfortunately, the .exe also installed all kinds of other Software on my Windows 7 system. I … (funda kabanzi)

Hi,

I recently downloaded and installed some Android emulator named "Andy". Unfortunately, the .exe also installed all kinds of other Software on my Windows 7 system.

I removed most of the unwanted Software but one problem remained: A search result hijacker was part of the package. It replaces the top 4 results with some cryptic redirect links that are luckily displayed in a different font, otherwise I wouldn't have noticed at all.

I tracked the issue down to a addon in Firefox (see attached screenshot) that I cannot remove, no matter what I try.

What I tried to remove it: - I tried to remove the addon via about:config - I tried to run Firefox in safe mode and uninstall it - I tried to factory reset Firefox - I Installed Avira and made a system scan - I installed MalwareBytes and made a system scan - I check all the extension folders for addons that I do not know but can't find anything - I checked my whole system for any xpi-files but couldn't find any.

I am out of ideas. I can disable the addon but thats about it. After a while Firefox will shut itself down and the next time I start it, the addon is on again. When I resinstall FIrefox, the same thing happens. The addon is always back.

When I inspect the element it loads some invisible icon file that is supposedly located in "src="jar:file:///C:/Windows/Installer/%7BB28AF4A4-C997-4A5B-A111-FD1E65138A8D%7D/%7B02E337C0-4D70-452D-AA64-92D0A8C5D953%7D.xpi!/icon48.png"", if that helps. But the location doesn't exist on my system.

Can anyone here help me? I alread sent a problem report via the official tool.

Sincerely Florian

Asked by flau 1 unyaka odlule

Answered by flau 1 unyaka odlule

  • Kusonjululiwe

pups prefs.js keep coming back found by malwarebytes plus several tries to hack my email account

I found some infos but I do not trust myself just deleting the files in question since they ared all over my system. The following I found per malwarebytes which found th… (funda kabanzi)

I found some infos but I do not trust myself just deleting the files in question since they ared all over my system. The following I found per malwarebytes which found the pups every day up to now:

PUP.Optional.DefaultSearch is Malwarebytes’ detection name for a family of browser hijackers targeting Chrome, Firefox and Internet Explorer. Symptoms The browsers’ default search engine was changed to one that belonged to the threat-actors. I am german so probably I need your patience in helping me to clean my system resp. Mozilla.

Looking forward Ingrid

Asked by iethomas 4 izinyanga ezidlule

Answered by jscher2000 4 izinyanga ezidlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

suspicious IP address

For the last several days McAfee has blocked the following IP address 52.216.241.14 as being suspicious. When I Google searched this IP address FF lit up with a red warni… (funda kabanzi)

For the last several days McAfee has blocked the following IP address 52.216.241.14 as being suspicious. When I Google searched this IP address FF lit up with a red warning message. What's up with this address? Also, is there a better forum to get more information about this address? Thanks

Asked by arejfour 1 unyaka odlule

Answered by RobertJ 1 unyaka odlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

My Firefox on Mac crashed after message to quarantine Ransomware. Reinstalled v75, now working but only opens with Profile Manager using terminal command.

Out of the blue I received a message stating I was being attacked on my Mac by software that maybe Ransomware. I was asked to close and delete the files. I run Mac Os 10.… (funda kabanzi)

Out of the blue I received a message stating I was being attacked on my Mac by software that maybe Ransomware. I was asked to close and delete the files.

I run Mac Os 10.14.6 and have never had any previous problems. After quarantining these files I quit Firefox and then could not open it. I therefore deleted the .app and reinstalled Firefox 75. I can only start up Firefox by using the Terminal Command window using the Profile manager. I created a new profile but cannot see my old profile within the Profile Manager. I can find the old profile under Profile's in Application Support/Users. So despite having a new default set created, I still cannot get the Firefox.app to open by clicking on it. I have now deleted the old profile and still cannot open the Firefox app from the dock or applications folder.

help please!

I could never find out why I got the message "Ransomware may be trying to access my computer", except two files have appeared in my bin; Edgar Poe Murder and Righteous Games.

Any help appreciated.

Asked by blcweb 1 unyaka odlule

Answered by blcweb 1 unyaka odlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

I'm using Firefox with add ons including No Script. Something called jackhillty.net keeps following me around. What is it and how do I get rid of it ? Thanks

I'm using Firefox with add ons including No Script. Something called jackhillty.net keeps following me around. What is it and how do I get rid of it ? P.S. I'm not a pro… (funda kabanzi)

I'm using Firefox with add ons including No Script. Something called jackhillty.net keeps following me around. What is it and how do I get rid of it ? P.S. I'm not a programmer or IT person. Please keep it simple. Thanks

Asked by Ray 1 unyaka odlule

Answered by FredMcD 1 unyaka odlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Virus in distibutive - Trojan.Inject.bcbj

Hi all For security reasons, all new FF distributions are tested. When checking the distribution kit version 68.5.0esr (exe for x86 and x64) - the antivirus software "Vir… (funda kabanzi)

Hi all

For security reasons, all new FF distributions are tested. When checking the distribution kit version 68.5.0esr (exe for x86 and x64) - the antivirus software "VirusTotal" detected Trojan.Inject.bcbj. FortiSandbox also scolded the distribution on x86 - saying that it deleted the file "% programfiles (x86)% \ google \ update \ 1.3.33.17 \ googlecrachhandler.exe" - its installation is undesirable in the ESR version.

Asked by kittyfriend 1 unyaka odlule

Answered by kittyfriend 1 unyaka odlule

  • Kusonjululiwe

Firefox tries to access weird websites each time it starts

Hello Mozilla community! Merry Christmas! I have noticed since yesterday (but maybe it is related to the 95.0.2 Firefox update) that Firefox tries to access some weird we… (funda kabanzi)

Hello Mozilla community! Merry Christmas!

I have noticed since yesterday (but maybe it is related to the 95.0.2 Firefox update) that Firefox tries to access some weird websites each time it starts.

The websites Firefox tries to access are various (non-exhaustive list):

Kaspersky Internet Security blocks all those access attempts and notifies me with a "Download denied" event and a "Probability of unauthorized software download" message (see uploaded image).

I immediately suspected one of my Firefox extensions, so I disabled them all... But the issue kept on occurring. Could Firefox be infected? (I ran Kaspersky Internet Security through my whole PC, and it found nothing ; I did the same with the free version of MalwareBytes ; nothing again).

I find it hard to believe that this behavior is normal and that these alerts are false positives from Kaspersky Internet Security... What do you think guys?

Regards, Jerome.

Asked by Jerome 1 inyanga edlule

Answered by Jerome 1 inyanga edlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Firefox search contest 2020??

Just ran a search in the address bar and was taken to this "Firefox search contest 2020" page. Never happened before and I assume it's a scam, have checked my add-ons and… (funda kabanzi)

Just ran a search in the address bar and was taken to this "Firefox search contest 2020" page. Never happened before and I assume it's a scam, have checked my add-ons and plugins but I don't see anything suspicious. Is this something to be concerned about?

If helpful, the url for this page is: https://sweetrelxme16.live/2262313374/?utm_campaign=QPF8euu28II5lw7O2iHhCugVqK5RzfdNsTpLaMM91qY1&t=main9_f90c820c180a04261c8d0973930afd&f=1&fp=4e4lHv53VRFsZD7g8DH8cHoGoZqhKuVVuUJjMi0vd9MavAzv9Ra8r35cGpaMIxPQMRUMvVHb0l82DIdO3468J0I1IGraOutgrge%2Bq9NWJxSgTtCArhRG9wrtn5m01%2Bx0n3MmjZiSV6rdotDp1uZK3X%2FC73QNaXrVEwU6oP9mIPSfJK%2B9iUDEhYFO3CUB0gqNmsYjipzEBg99p%2B0M3CKQbwifntTBZHvPFeMpyKOWKE7SKgze%2FpKn5JZBWY3pSSBh4y1pXXC3eYKb2LhL2ZoH4%2BWQ9hbMgWcybfFg5BkLBtWg1kwuZsikClxevJtm60RKV7prd51JiGjLrzf%2FNTDqxdrpwU2A0t4hnMG%2FGjpBHkvqc7jsROicHRQJdXvl6Xw%2BK1B4QHr4OdFM%2BRtvtMIuVoWNw3847b%2Bz5EijdBw1lIcKWD54y5Ykl2UHIWkWE3GJ0k%2Boz0qwm%2Bjks2VWfUk1dLIjwzZZ67mP3%2BIlzBvpAGyhYi%2FWISpYwui97wQ8U53uQKjnBTYIz1WN5e6HZkKCRHJTfzo%2FYcUJhu%2Fk4HDS04VDapoV6VLpeDv4JHDFP3AcqH5EPLVv648vIOUc%2B27TQByyZx70ORGYyOztbMH6xU0v%2B%2FM6DLecFWnHAPkQ8X%2Fk1igvbBNx8cPPUGQOchdh9Y1Hc7nm%2F4mZ%2BHsCVI5oeT%2FX7TJ15lDFHvc7uVp7J61DCWuWlQdtwjhqXu7Ms0k45AQQwlDJe4XvNbuDOTcti8QfPQw0zMaHTsoH6KjWUiBG6Qlk5UE4apuslT%2BVS8%2FhGlqRo190rqmBhsp3GLn%2B%2FkX8eoNQBK5adrrme1vjyuDFwg3XB1E0E9FY5RGGQuCmS2NgJ5NY1epvc0bT8qUYVwoKESw3dxc0I8oaHXm8pjJotg8dJ9p18vFzQfENSQ1Lif%2FXLA3qsLDDGOeLC5KQwPTUDb%2Bbwt5MjbLFbi09eakKIqSw1T6jyb6AzUIbIYU9CobdiZXlqXR1faA65a%2Bb49rHlYpFMsmtVMGAZGJ6GRcpqgidhwUeEfDWptpsKYjjcWxDXhB3bu93CuigV8dR%2FobTpbwwGmyFCtClfyPoqFgQ57R83bMHQta0ufdOf5rN%2BN%2BUUcgassNy4H84lggSNKjX1Tfle8JYPE8P850TKT8zL0qRyVHs9cq5ng7k%2FQl3TB847FICfrcWLUcxAU5Ed5hGOBPMcjGbc1pABVRV9%2BIivKKTvd06vBei1U27t1QJnlPCRub9A1wI2MEwWlJijoNtXlXN1odzAUFPLHNLG%2B3OjI80qmpNeUJoxRmfUN%2B%2BohI9hbzBle58Ij9659u%2FRIvLRx5Cs96YiHAeFadW%2FDvWvDJh3TzYhc798ZMqiB4KIcFtttKF8siLLCWSmhOmvNl0xVlAZBjrv%2Bs7beWbDKa2

Asked by paulcharlesworth 1 unyaka odlule

Answered by James 1 unyaka odlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

virus detection - Checks

Hi, I am running the french FF 79.0 64 bit I just started to download the latest iso of debian 10.5 from the official Mirror and got the FF warning that it contains a vir… (funda kabanzi)

Hi, I am running the french FF 79.0 64 bit I just started to download the latest iso of debian 10.5 from the official Mirror and got the FF warning that it contains a virus. I am not sure if you have a team to check false positive as this is the official site and that it was released only yesterday https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/debian-10.5.0-amd64-DVD-1.iso and I am getting worried after I got this message. Thank you in advance. Regards, Stephane

Asked by Stéphane BLIN 1 unyaka odlule

Answered by cor-el 1 unyaka odlule

  • Kusonjululiwe

ChunkApp

How can I remove ChunkApp from my browser? It is not showing in my extensions, but i know its there because the internet service I use at a customers site wont allow me t… (funda kabanzi)

How can I remove ChunkApp from my browser? It is not showing in my extensions, but i know its there because the internet service I use at a customers site wont allow me to utilize my browser because of the redirect to Chunk App host/server.

Please help I do not want to switch to Google Chrome because of this legal search engine redirect virus.


Mac Operating System

Asked by mbosh 4 izinyanga ezidlule

Answered by jscher2000 4 izinyanga ezidlule

  • Kusonjululiwe

In my browser is a pic of an ugly man. When you click on him it says Browser is under remote control (reason:De

That ugly man in the browser won't let me enter websites or pages within the website ,like sweepstakes entries on Cabela's website for example. My numbers are [phone numb… (funda kabanzi)

That ugly man in the browser won't let me enter websites or pages within the website ,like sweepstakes entries on Cabela's website for example. My numbers are [phone number]. Michael Lodsin When I open Firefox, there are 3 or 4 blue screens pop up to make excutible orders to my computer, I always click them off. but they we not always there. Is someone using my computer from afar, or worse tracking my keystrokes or monitoring me ?

Asked by nocowfarm2001 1 inyanga edlule

Answered by FredMcD 1 inyanga edlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Regularly Relosoun.com loads without permission and even starts Firefox - How to erase it?

Without my intention Relosoun.com starts Firefox browser. When using the Firefox regularly (every 10-15 minutes) relosoun.com tryies to open the new tab being blocked by … (funda kabanzi)

Without my intention Relosoun.com starts Firefox browser. When using the Firefox regularly (every 10-15 minutes) relosoun.com tryies to open the new tab being blocked by antivirus Avast. All efforts including reinstalling Firefox, using CC cleaner, Malwarebytes etc do not help. On other gadgets Relosoun.com doesn't appear in Firefox in the same account.

Asked by sergestrd 1 unyaka odlule

Answered by user1262953 1 unyaka odlule

  • Kusonjululiwe

why did my firefox crash

bp-186b028e-4571-4ea8-8dd6-e13c40211120 bp-b9a18a59-0808-43e2-a103-0c4580211120 bp-88a97ccf-6ac8-4669-9265-a1e3b0211120 bp-1c47ef47-258a-4ad6-92ee-97aee0211120 bp… (funda kabanzi)

bp-186b028e-4571-4ea8-8dd6-e13c40211120

bp-b9a18a59-0808-43e2-a103-0c4580211120

bp-88a97ccf-6ac8-4669-9265-a1e3b0211120

bp-1c47ef47-258a-4ad6-92ee-97aee0211120

bp-8652fdde-3903-4415-8dc8-10cf20211120

bp-13ade298-bb74-45ca-8912-af80c0211120

Asked by 2102395503 2 izinyanga ezidlule

Answered by FredMcD 2 izinyanga ezidlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

mabydick.com contains a trojan

Firefox attempts to connect to a website with a known trojan every time a different website is chosen. Both Bitdefender and Malwarebytes block it. Windows Defender doesn… (funda kabanzi)

Firefox attempts to connect to a website with a known trojan every time a different website is chosen. Both Bitdefender and Malwarebytes block it. Windows Defender doesn't recognize it that I can tell. It's very annoying!

This is on a 64-bit platform using Widows 10 Home, with all updates applied, using the latest version of Mozillla Firefox. Microsoft Edge doesn't exhibit the same behavior. Haven't tried Internet Explorer.

Please fix Firefox.exe

Asked by fmuir 1 unyaka odlule

Answered by Shashank Shekhar 1 unyaka odlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Malware Attack on Firefox

I just want to report a malware attack I experienced yesterday (8/29/20) which seemed to affect only Firefox. After I clicked on the link to Boston Globe article my Firef… (funda kabanzi)

I just want to report a malware attack I experienced yesterday (8/29/20) which seemed to affect only Firefox.

After I clicked on the link to Boston Globe article my Firefox screen was filled with what purported to be a message from Microsoft saying that my computer was blocked because of suspicious activity detected on my IP address and telling me to call 1-888-222-6480. It also wanted me to enter my Microsoft password and warned me not to turn off my computer. The whole thing looked suspicious to me, especially since a pop-up window on the page requesting me to enter something (I forget what) showed a URL that began https://drink3.ga At some point, I don’t remember whether it was when I did turn off my computer or whether it was because I didn’t respond to messages commands, the malware did something to make my computer heat up and caused the fan to run at a ferocious rate until a message appeared that a break point had been reached and Firefox closed down. I was then able to use another browser to get to the Firefox support page and learn about refreshing Firefox. After I did that, Firefox behaved normally.

I am sending this to you because it’s something you should be aware of and represents a vulnerability in Firefox that should be addressed.

Asked by acferg62 1 unyaka odlule

Answered by FredMcD 1 unyaka odlule

  • Kusonjululiwe

Accidental search engine download

I mistakenly loaded a browser called Freshy Search. I was trying to access a CarMax type program, and Freshy downloaded. I now get the Freshy search window every time I o… (funda kabanzi)

I mistakenly loaded a browser called Freshy Search. I was trying to access a CarMax type program, and Freshy downloaded. I now get the Freshy search window every time I open a new tab on Firefox. I want to delete Freshy from my computer. Thanks

Asked by swan.jamest 3 izinyanga ezidlule

Answered by FredMcD 3 izinyanga ezidlule

  • Kusonjululiwe

new tabs popping up

I've noticed this happening in the past week. Example #1 I used Google search to look for Japanese dogs & clicked on Wikipedia In addition a tab on debt popped up o… (funda kabanzi)

I've noticed this happening in the past week. Example #1 I used Google search to look for Japanese dogs & clicked on Wikipedia In addition a tab on debt popped up on its own. Here's a link to it: https://go.debthelpguide.com/api/offer

Example #2 I logged into citi.com to check my credit card activity In addition a tab which was of a sexual nature popped up on its own. I was so shocked I didn't think of saving a link for it.

It doesn't happen on all tabs I am using. Thank you in advance for your help.

Asked by Dolly 3 emasontweni adlule

Answered by FredMcD 3 emasontweni adlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Of severe phisting encounter to report to Mozilla-Firefox!

Leaving my computer on/open through earling morning 5-6-20, find on my screen the following of I encountered, and wanted to report! Asking first... Was this a ligitimate… (funda kabanzi)

Leaving my computer on/open through earling morning 5-6-20, find on my screen the following of I encountered, and wanted to report!

Asking first... Was this a ligitimate request? And then continues, actions I took,... to view control panel for dates of possible instals 'by recent dates',... intention to uninstall(s).

We're Sorry Firefox had a problem and crashed. We'll try to restore tabs and windows when it restarts. To help us diagnose and fix the problem, you can send us a crash report (?-checkmark box) Tell Mozilla about the crash so they can fix it Details (?) Add a comment (comments are publicly visable) (?-checkmark box) Include the address of the page I was on (?-checkmark box) Allow Mozilla to contact me about this report (?)Enter your email address here Your crash report will be submitted before you quit or restart.

I cancelled the checkmark, of the 'screen box asked for the query-report', did not submit! Then hard started-shutdown my computer!

GUESS WHAT? My OPEN SCREEN had a BACKGROUND of a CHINESE PAGODA and LAKE MURAL! Not anything I consciously I would open with!

Continuing I went to Control Panel! Control panel showed a 5-5-20 application, Publisher Google Chrome, I didn't install or reinstall this 'date period'! Next line showed a 4-29-20 application, Publisher Google Chrome, I'm sure I didn't need to install or reinstall, but while I often daily go to Google Search.

FOLLOWING:

Also showed three (3) issues in Control Panel, on 'close dates other installs', I am going to UNINSTALL Verified Publisher London Jamocha-xyz,... were of SAME TYPE 'AdoptOpenJDK - Open source, prebuilt OpenJDK binaries (adoptopenjdk.net)


About 36,700 results (0.49 seconds) Search Results Web Result with Site Links

AdoptOpenJDK - Open source, prebuilt OpenJDK binaries adoptopenjdk.net Choosing the right JVM. HotSpot is the VM from the OpenJDK community. It is the most widely used VM today and is used in Oracle's JDK. It is suitable for all ... Latest release HotSpot is the VM from the OpenJDK community. It is the ...

About AdoptOpenJDK provides rock-solid OpenJDK binaries for the ... Installation Installers are currently available for Windows®, Linux®, and macOS ...

FAQ The JDK and JRE binaries we produce are published under ... Build archive HotSpot is the VM from the OpenJDK community. It is the ...

Release Notes S8010500: [parfait] Possible null pointer dereference at hotspot


I shutdown and restart! Still have the Chinese mural!

Robert!

No need to contact, if only questions re-verification any of the above, YOU have my Net ID!

Asked by MAGiiCRYSTAL 1 unyaka odlule

Answered by Andrew 1 unyaka odlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Trojan Detection

I've realised that once in a while my anti-virus (BullGuard) detects Trojan and I didn't think much of it because I thought my anti-virus would just get rid of it but jus… (funda kabanzi)

I've realised that once in a while my anti-virus (BullGuard) detects Trojan and I didn't think much of it because I thought my anti-virus would just get rid of it but just about 10 minutes ago (BullGuard detected it at 20:53) and when I open it and realise it's detected a Trojan about 5-6 times and it's automatically put it to quarantine which I have now deleted and forgot to screenshot beforehand, but it seems Trojan is attached to firefox somehow? I got Firefox about 2-3 weeks ago-ish so I am not sure why this is happening and I am concerned, is there anything I can do? I am currently running two full scans with BullGuard and Malwarebytes. Any suggestions would be highly appreciated.

Asked by David Morais 1 unyaka odlule

Answered by FredMcD 1 unyaka odlule