Kukhonjiswa imibuzo ethegiwe: Veza yonke imibuzo
  • Okugcinwe kunqolobane

Firefox Exploit Screen-Captures

Hi guys, Well, I think I bring here a very interesting thing for the Mozilla team. I found I have some sort of exploit which takes screen captures whenever I click on any… (funda kabanzi)

Hi guys, Well, I think I bring here a very interesting thing for the Mozilla team. I found I have some sort of exploit which takes screen captures whenever I click on any web page. It is specially active whenever you are entering sensitive information like when I log-in onto site accounts, o whenever I check something on the bank. I checked processes using process explorer, and everything points at Mozilla being very active and nothing else. I check the creation of those screen captures and they are always, there. I normally kill every process which is not necessary, and the ones left are just essential. I ran several bootable antivirues like Eset, Kaspersky and Bitdefender and they don't detect anything weird. I removed from a bootable CD all temp files this "thing" creates while making files and take snap of my screen. I goes back on when you are back on Windows. I know that something was going on when on the bank site I had a AVG-antivirus alert saying that an exploit was active and gave me the option to remove it. Other than that, you don't feel a thing. As said, it goes back the alert everytime you visit the bank and some other log-ins, specially while banking. I also disable all Firefox add-ons, as well as the Java on my computer -I believe there's some connection with Java here-. I have the suspicion that it is pdf/exploit coz I saw a glimpse of that name while uninstalling something which I thing was Facemoods. Not too sure how it got there. So there, guys!! I don't know where this "thing" resides, really does -it could be doing more things-, or how to get rid of it. PS: I saw a while ago that I have to mozilla folder hanging from "program files". One is mozilla.bak. I'm digging into this now. Any shed on this, you pros!! I'm not a pro myself, yet I love IT :-) Thanks a bunch in advance to anyone taking the time to solve the one big problem Firefox has and is going to have in the short run. BR F

Asked by Fistro 5 iminyaka edlule

Last reply by guigs 5 iminyaka edlule

  • Okugcinwe kunqolobane

when i open firefox after restarting the pc i get a 2nd popup window, which I need to close manually. Why??

When starting my pc up and opening firefox for the first time, I always get a second window. which despite no menu or header behaves like a second instance of firefox. (… (funda kabanzi)

When starting my pc up and opening firefox for the first time, I always get a second window. which despite no menu or header behaves like a second instance of firefox. (not a tab). I have done searches, got add blockers on and removed all malware from my pc using kaspersky latest edition and databases.

HELP! I don't know where to go next.....

Asked by p.brookes 5 iminyaka edlule

Last reply by FredMcD 5 iminyaka edlule

  • Okugcinwe kunqolobane

Падения

постояные падения, в безопасный режим заходит, работает какое то время и падает, последняя ошибка Crash ID: bp-ab6058d9-b927-4627-8b53-7e5262141230, антивирусные программ… (funda kabanzi)

постояные падения, в безопасный режим заходит, работает какое то время и падает, последняя ошибка Crash ID: bp-ab6058d9-b927-4627-8b53-7e5262141230, антивирусные программы тоже не устанавливаются, касперский написал не хватает цифровой подписи и не завершил установку, аваст тоже не установился, проблема также есть сбраузером опера

Asked by irina1 5 iminyaka edlule

Last reply by cor-el 5 iminyaka edlule

  • Okugcinwe kunqolobane

Receiving texts in Spanish saying a session was started recently - are these legitimate and how do I make them stop?

Once or more every day (typically overnight) I receive a text saying, "Recientemente se inici sesi n en tu cuenta desde Firefox on Windows." Ignoring the grammatical err… (funda kabanzi)

Once or more every day (typically overnight) I receive a text saying, "Recientemente se inici sesi n en tu cuenta desde Firefox on Windows." Ignoring the grammatical errors/misspellings, it roughly translates to your Firefox account was recently logged into/a session was started. Each time the message is from short code 792273. Is this message legitimately from Firefox? If so, how do I get my number removed from whatever account it's been applied to in error?

Asked by khammes 5 iminyaka edlule

Last reply by guigs 5 iminyaka edlule

  • Okugcinwe kunqolobane

I have been phished and can't adjust settings without them being sent to an automatic redirected site

opened an email over a month ago from a friend. I got phished. Two days ago they sent the same email under my address and conversed with the recipients, impersonating m… (funda kabanzi)

opened an email over a month ago from a friend. I got phished. Two days ago they sent the same email under my address and conversed with the recipients, impersonating me to assure them it was safe and give further instruction. The have also tried to gain further access info to one of my credit cards. I have changed my password, but when I attempt to secure it Firefox notifies me the information will automatically be redirected to a site. can't perform the administration.

Asked by Jim888 5 iminyaka edlule

Last reply by FredMcD 5 iminyaka edlule

  • Okugcinwe kunqolobane

fire fox redirects or email to 92.242.140.0 - 92.242.140.255' is 'email@barefruit.co.uk at 92.242.140.2 It is happing in and out of the school district and doe

Fire fox redirects or email mail.usd383.org to ( other info here to 92.242.140.0 - 92.242.140.255' is 'email at barefruit.co.uk ) this IP 92.242.140.2 It is happening in… (funda kabanzi)

Fire fox redirects or email mail.usd383.org to ( other info here to 92.242.140.0 - 92.242.140.255' is 'email at barefruit.co.uk ) this IP 92.242.140.2 It is happening in and out of the school district and district. It only happens with firefox. WHY? Bitdefender has discovered this issue as a phishing attack.

Thanks Russel Dockins Network Service Manager Manhattan-Ogden


edit: removed personal information like phone, email and address from public.

Asked by RusselDockins 5 iminyaka edlule

Last reply by FredMcD 5 iminyaka edlule

  • Okugcinwe kunqolobane

Is this a security attack? See screen capture.

Somehow, the attached screen became visible after my browser had become unresponsive, trying to use Facebook. Looked very bogus to me. "Uploaded images" box, below, is no… (funda kabanzi)

Somehow, the attached screen became visible after my browser had become unresponsive, trying to use Facebook. Looked very bogus to me. "Uploaded images" box, below, is not clearing so I'm going to try to send this, anyway. It was just a small jpg file.

Asked by RobGoldsmith 5 iminyaka edlule

Last reply by FredMcD 5 iminyaka edlule

  • Okugcinwe kunqolobane

A program called pc keeper has attached itself to my Mozilla Firefox, and I am no longer able to use it. Even uninstalling and reinstalling is a no fix.

Yesterday I discovered a pop-up attached to my Mozilla Firefox, it was essentially a white box, with a grey bar inside, which I dangerously clicked as it would not allow … (funda kabanzi)

Yesterday I discovered a pop-up attached to my Mozilla Firefox, it was essentially a white box, with a grey bar inside, which I dangerously clicked as it would not allow me to close or access my Mozilla. Clicking the box revealed an ad for something call PC Keeper which now also shows in my remembered links as being in a second window. I was forced to shut down my computer to close the Mozilla, making all my links unavailable to me, and ultimately had to uninstall it from my computer. I attempted to reinstall a new version, but, again found this PC Keeper attached to it, it's white window firmly locking everything up, and forcing me again to uninstall the program. Please, find me a way to once more have my Mozilla without this PC Keeper.

Asked by AzizalSaqr 5 iminyaka edlule

Last reply by jscher2000 5 iminyaka edlule

  • Okugcinwe kunqolobane

A few days back this computer was infected with ad.ssl.imgfarm.com

Hello: A few days back this computer was infected with ad.ssl.imgfarm.com. So I did uninstall firefox to get rid of it. Slowly it is taking over all fuctions. Internet i… (funda kabanzi)

Hello:

A few days back this computer was infected with ad.ssl.imgfarm.com. So I did uninstall firefox to get rid of it. Slowly it is taking over all fuctions. Internet is not working with Internet explorer. When I go to the website....it does not show any information. I canot download any browser including Firefox. The virus has erased all system restore points.... I regularly run Microsoft Security Essential + I have run Microsoft Virus Removal tool+ I have End Protection from Trusteer...only that seems to work. Microsoft cannot detect anything. I have not created any System Restoration disc and I am copying files ....to try and reset to factory condition...wondering whether with the personal files wil carry the virus, into a restored computer or a different computer. How to get rid of this menace?

Regards

Subroto Biswas

Asked by Subroto_b 5 iminyaka edlule

Last reply by FredMcD 5 iminyaka edlule

  • Okugcinwe kunqolobane

Firefox keeps crashing on my pc I can only use it in safe mode

I had problems with that Binkiland browser intrusion, I thought I was by passing this browser by opening a new tab. I deleted the Binkiland browser from my programs and h… (funda kabanzi)

I had problems with that Binkiland browser intrusion, I thought I was by passing this browser by opening a new tab. I deleted the Binkiland browser from my programs and hardrive but it was still infecting my Firefox, I can no longer use my pc unless I start it in safe mode.

Asked by Andytmc 5 iminyaka edlule

Last reply by FredMcD 5 iminyaka edlule

  • Okugcinwe kunqolobane

When I updated Firefox my Internet Explorer won't open

I also got McAfee security that I don't want. Tried to uninstall both Firefox and the McAfee but that didn't work either. Malwarebytes came up with a Firefox Setup Stub… (funda kabanzi)

I also got McAfee security that I don't want. Tried to uninstall both Firefox and the McAfee but that didn't work either. Malwarebytes came up with a Firefox Setup Stub that they say is a Trojan.Dopper. So what can I do now? I run Window 8 on a Asus laptop

Asked by Eric73160 4 iminyaka edlule

Last reply by James 4 iminyaka edlule

  • Okugcinwe kunqolobane

Firefox freezes and requires forced shutdown multiple times a day

Basically, firefox often will freeze/not respond and requires me to force a shut down just to keep it from freezing up my entire computer. I run lots of tabs every day an… (funda kabanzi)

Basically, firefox often will freeze/not respond and requires me to force a shut down just to keep it from freezing up my entire computer. I run lots of tabs every day and I use a session manager to help keep on top of them and keep them from getting lost. When my computer was new this was not an issue but in the past few months I've cut down my tabs(less than 80) to try and speed my computer up and it has not worked. In fact, it is actually worse now. Sometimes it even actually crashes and sends a report, but not actually as often as it freezes and needs a forced shut down. I just finished cleaning up my computer(antivirus, malware, CC cleaner, etc.) and it's still freezing up. In fact, I've had to restart firefox three times in the past twenty minutes just to get to the point where I can ask this question. It's very frustrating.

Here are the last ten crash reports: bp-b2d18586-752c-491e-b128-e1c382150719 7/19/2015 10:56 AM bp-7925764c-4906-4093-b643-851d92150719 7/19/2015 10:09 AM bp-72c5f28a-e863-4236-9a3a-36d012150719 7/18/2015 8:18 PM bp-f0d1a8ab-64f0-434b-8639-98ccb2150718 7/18/2015 5:51 PM bp-809a83fe-a0d3-4fea-8f5d-b88c22150718 7/18/2015 5:45 PM bp-8160bab0-efda-4ab1-ae21-2df4c2150718 7/18/2015 5:08 PM bp-0f24531a-012c-44ce-9189-008ae2150718 7/18/2015 11:07 AM bp-b9cedefd-8bdf-474d-8235-964382150716 7/16/2015 5:36 PM bp-12edfcd7-563b-4253-9279-079972150712 7/11/2015 7:29 PM bp-b0745415-ae41-45c3-a717-f57fd2150709

As you can see even the actual recorded crashes happen a lot. I'm not sure what other information to provide, just let me know and I'll get it for you.

Asked by afastmachine 4 iminyaka edlule

Last reply by cor-el 4 iminyaka edlule

  • Okugcinwe kunqolobane

This keeps cropping up and is a real problem. How do i get rid of it. https://z.moatads.com/advertis…&zMoatDevice=1_device_category:56

Be descriptive. Saying "Playing video on YouTube is always choppy" will help our volunteers identify your problem better than saying "Something is wrong" or "Firefox is b… (funda kabanzi)

Be descriptive. Saying "Playing video on YouTube is always choppy" will help our volunteers identify your problem better than saying "Something is wrong" or "Firefox is broken".

Asked by chuckmabry 4 iminyaka edlule

Last reply by guigs 4 iminyaka edlule

  • Okugcinwe kunqolobane

MF profile is compromised with Redirecting to Advertiser virus

I reinstalled the whole PC from the scratch. Both partitions were deleted (not just formatted even!) and recreated, then I reinstalled the Windows. I downloaded a new, cl… (funda kabanzi)

I reinstalled the whole PC from the scratch. Both partitions were deleted (not just formatted even!) and recreated, then I reinstalled the Windows. I downloaded a new, clean .exe from the official MF website. Installed perfectly clean MF (this was literally the first programme I installed on the PC). It was all fine until I logged into my girlfriend's account in order to synchronize the newly installed MF with her profile (bookmarks, history, etc). Then that Redirecting to Advertiser virus came up. Then I reinstalled the Windows again and repeated everything all over again. It happened again on the very same moment - when I logged in her MF account. Which, obviously, means that her account is hacked/has virus. I tried literally everything that I found on the Internet, nothing really helped. I even removed MF + deleted ALL the entries in the Registry which relates to MF. When I did clear instal of MF, I got it again. Which probably means that once I log into the compromised account, the virus goes to the PC somehow (and somewhere).

PLEASE HELP ME GET RID OF THIS THING!!! Thank you very much in advance! :)

Asked by IlkoSarafski 4 iminyaka edlule

Last reply by jscher2000 4 iminyaka edlule

  • Okugcinwe kunqolobane

Firefox crashes with plugin stop working and Some unknow addons get added to my browser

I am using Fire Fox latest version and my browser crashes sporadically with plugin container stopped working and some unknown addons gets added to my system. I usually ju… (funda kabanzi)

I am using Fire Fox latest version and my browser crashes sporadically with plugin container stopped working and some unknown addons gets added to my system. I usually just remove them, but is happening more frequently now. The last unknown addons were "RespEactSeale" and "Steam Trade Helper". Some times it also removes my Adblock plus addon from the browser.

Asked by Ritvik 4 iminyaka edlule

Last reply by guigs 4 iminyaka edlule

  • Okugcinwe kunqolobane

Firefox crashes at startup

Firefox crashes at startup (even in safe mode). I've uninstalled and reinstalled a fresh copy of 40.0.2; and deleted and created a new profile. IE and Chrome both work … (funda kabanzi)

Firefox crashes at startup (even in safe mode). I've uninstalled and reinstalled a fresh copy of 40.0.2; and deleted and created a new profile. IE and Chrome both work fine.

The crash ID's that I've submitted are bp-1d1c5a1d-bacb-4ede-adce-d88542150824 and bp-89c9e6a5-2db9-4e6d-a426-aad5f2150824

Asked by gkishida 4 iminyaka edlule

Last reply by cor-el 4 iminyaka edlule

  • Okugcinwe kunqolobane

We have difficulty trying to connect to our server using a browser. Google Chrome can connect, but Mozilla Firefox cannot.

Problem: # We have difficulty trying to connect to our server using a browser. Google Chrome can connect, but Mozilla Firefox cannot. This problem is related to the "We… (funda kabanzi)

  1. Problem: #

We have difficulty trying to connect to our server using a browser. Google Chrome can connect, but Mozilla Firefox cannot. This problem is related to the "Weak Diffie-Hellman and the Logjam Attack" (https://weakdh.org/)


  1. Activity log, sequence of actions we have conducted to try and fix the problem, and things we already know: #
1. Everything was fine
2. Firefox complained about the Weak Diffie-Hellman ephemeral key
3. Firefox can no longer access our server
4. But, Google Chrome CAN STILL access
5. Found out about "Weak Diffie-Hellman and the Logjam Attack"
   (https://weakdh.org/)
6. Tested Firefox using their website, and responded "Good News! Your browser is safe against the Logjam attack."
7. Tested Chrome using their website, and it responded that Chrome was vulnerable.
8. This explained why we could still access our server using Chrome
9. Updated Chrome to the latest version.
10. Tested Chrome using weakdh.org, and responded "Good News! Your
    browser is safe against the Logjam attack."
11. Tried accessing our site using Chrome, and it has the same error
    with Firefox.
12. Both Chrome and Firefox can no longer access the site at this
    point.
13. We followed the instruction located at
    https://weakdh.org/sysadmin.html for Apache Tomcat servers.

`ciphers="TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_DSS_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_SHA256,TLS_ECDHE_RSA_WITH_AES_128_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_SHA,TLS_ECDHE_RSA_WITH_AES_256_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_SHA384,TLS_ECDHE_RSA_WITH_AES_256_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_SHA,TLS_DHE_RSA_WITH_AES_128_SHA256,TLS_DHE_RSA_WITH_AES_128_SHA,TLS_DHE_DSS_WITH_AES_128_SHA256,TLS_DHE_RSA_WITH_AES_256_SHA256,TLS_DHE_DSS_WITH_AES_256_SHA,TLS_DHE_RSA_WITH_AES_256_SHA"`

14. Fix did not work both for Chrome and Firefox, still the same error.
15. We followed the instruction at
    http://stackoverflow.com/questions/30931692/diffie-hellman-public-key-error-with-tomcat-7

`ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA"`

16. Fix WORKED for Chrome BUT NOT for Firefox.
17. Firefox has error code: ssl_error_bad_cert_alert
18. We experimented on lesser number of ciphers but none worked
19. `ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA"`
20. Same error for Firefox, still OK for Chrome.


  1. **TECHNICAL DETAILS** #
    1. Certificate: ##
   Signature algorithm: sha256RSA
   Signature hash algorithm: sha256
   Public key: RSA (2048 Bits)
   Thumbprint algorithm: sha1
    1. Environment: ##
   Apache Tomcat 6.0
   Java 1.6.0_34
    1. Current server configuration: ##
   <Connector port="443" SSLEnabled="true" maxThreads="150" scheme="https" 
   secure="true" clientAuth="true" sslProtocol="TLS" 
   keystoreFile="********.pfx" 
   keystoreType="PKCS12" 
   keystorePass="********" 
   ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA"/>

Asked by VicCebedo 4 iminyaka edlule

Last reply by jscher2000 4 iminyaka edlule