Over 1 million tech questions and answers.

Firefox has new suspicious ads and opens 3 tabs every time Firefox is opened. Da

Q: Firefox has new suspicious ads and opens 3 tabs every time Firefox is opened. Da

I don't know if these are related, which is why I'm posting this in the same thread and I honestly don't know what to do.
 
I have a pretty good feeling this is malicious since the ads starting showing up at the bottom of every webpage and look the same. The ad says "Brought to you by ...".
 
Each day around 7am I get a popup window on my desktop that tells me that I need to update Flash, yet I've already downloaded and installed Flash from the adobe website and verified that it is up to date. So I close the reminder since I don't know if it is a virus or not.
 
I scanned using hijackthis so I could have a log handy if needed. However when I ran it, there was a warning window that said:
 
For some reason your system denied write access to the Hosts file. If any hijacked domains are in this file, HijackThis may NOT be able to fix this.
 
If that happens, you need to edit the file yourself. To do this, click Start, Run and type:
 
   notepad C:\Windows\System32\drivers\etc\hosts
 
and press Enter. Find the line(s) HijackThis reports and delete them. Save the file as 'hosts.' (with quotes), and reboot.
 
For Vista and above: simply, exit HijackThis, right click on the HijackThis icon, choose 'Run as administrator'.
 

 

 
Any help would be appreciated. Thanks!
 

RELEVANCY SCORE 200
Preferred Solution: Firefox has new suspicious ads and opens 3 tabs every time Firefox is opened. Da

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Firefox has new suspicious ads and opens 3 tabs every time Firefox is opened. Da

Welcome aboard  HJT is not allowed in this forum.  Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to the following:

Launch Malwarebytes Anti-MalwareA 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
Click Finish.On the Dashboard, click the 'Update Now >>' linkAfter the update completes, click the 'Scan Now >>' button.
Or, on the Dashboard, click the Scan Now >> button.If an update is available, click the Update Now button.
A Threat Scan will begin.When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.In most cases, a restart will be required.Wait for the prompt to restart the computer to appear, then click on Yes.If you already have MBAM 2.0 installed:On the Dashboard, click the 'Update Now >>' linkAfter the update completes, click the 'Scan Now >>' button.
Or, on the Dashboard, click the Scan Now >> button.If an update is available, click the Update Now button.
A Threat Scan will begin.When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.In most cases, a restart will be required.Wait for the prompt to restart the computer to appear, then click on Yes.How to get logs:(Export log to save as txt)After the restart once you are back at your desktop, open MBAM once more.Click on the History tab > Application Logs.Double click on the Scan Log which shows the Date and time of the scan just performed.Click 'Export'.Click 'Text file (*.txt)'In the Save File dialog box which appears, click on Desktop.In the File name: box type a name for your scan log.A message box named 'File Saved' should appear stating "Your file has been successfully exported".Click OkAttach that saved log to your next reply.(Copy to clipboard for pasting into forum replies or tickets)After the restart once you are back at your desktop, open MBAM once more.Click on the History tab > Application Logs.Double click on the Scan Log which shows the Date and time of the scan just performed.Click 'Copy to Clipboard'Paste the contents of the clipboard into your reply.Download Malwarebytes Anti-Rootkit to your desktop.Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.Double click on downloaded file. OK self extracting prompt.MBAR will start. Click "Next" to continue.Click in the following screen "Update" to obtain the latest malware definitions.Once the update is complete select "Next" and click "Scan".When the scan is finished and no malware has been found select "Exit".If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
"mbar-log-{date} (xx-xx-xx).txt""system-log.txt"NOTE. If you see This version requires you to completely exit the Anti Malware application message right click on the Malwarebytes Anti-Malware icon in the system tray and click on Exit. Please download Rkill (courtesy of BleepingComputer.com) to your desktop.There are 2 different versions. If one of them won't run then download and try to run the other one.You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/Double-click on the Rkill desktop icon to run the tool.If using Vista or Windows 7 right-click on it and choose Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.Do not reboot until instructed.If the tool does not run from any of the links provided, please let me know.If normal mode still doesn't work, run the tool from safe mode.When the scan is done Notepad will open with rKill log.Post it in your next reply.NOTE. rKill.txt log will also be present on your desktop.NOTE Do NOT wrap your logs in "quote" or "code" brackets.Do NOT use spoilers.Do NOT edit your reply to post additional logs. Create new reply. I'll not get any email notifications about edits so I won't know you posted something new.

Read other 14 answers
RELEVANCY SCORE 104

I don't know what to do I'm out of resources. I tried multiple solutions including running ad-aware in safe mode no dice. I also tried a solution you gave to pabs which included BFU ,Alcra Plus Remover, ATF Cleaner, and AVG spyware no dice as well. This darn thing specially likes to pop up on the initial start up of Firefox and every couple clicks please help. Here is my HJT log

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:06:39 PM, on 4/25/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program... Read more

A:Solved: While running firefox I get IE popups, it also opens tabs in my Firefox.

Read other 13 answers
RELEVANCY SCORE 95.6

I use FireFox exclusively and a couple weeks ago I started noticing that tabs would start to open by themselves; in some cases FireFox would warn me "Reported Web Forgery! The web page at jvnewus.com has been reported as a web forgery and has been blocked.." or I get a page that says "You are currently using Windows 7 and your player might be outdated; Please update to the latest version for better performance". And I'm pretty sure all of these tabs are bogus but I can't figure out what is causing them to open. Another odd thing that started happening around the same time is that every once in a while I'll start to hear an audio clip of advertising or some person talking that usually lasts 20 to 30 seconds; when that happens about 1 in every 4 times FireFox crashes.
 
I've tried doing an in-depth scan with my anti-virus software ESet Endpoint 5.0.2229.1; which found nothing as well as full scans with the latest versions of Malwarebytes and Spybot. Malwarebytes and Spybot both turned up only minor stuff like tracking cookies and the like, I removed what they found but that didn't fix the problem.
 
I had looked up one of the pages that opened with Google and the site suggested that it was being caused by an add-on that may have been installed by an application like uTorrent or something like that but I've looked at both extensions and plug-ins and if there's something that shouldn't be there it's masquerading and something legitimate.
 
Any ideas on how to track... Read more

A:FireFox suspicious tabs open by themselves?

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to t... Read more

Read other 9 answers
RELEVANCY SCORE 94

Hello, I've a new problem. Hope you guys can help me like you did before

Logfile of HijackThis v1.99.1
Scan saved at 22:04:48, on 03-24-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\system32\hphmon04.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Verizon\Servicepoint\VerizonServicepoint.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\program files\zango\zango.exe
C:\Documents and Settings\Ronnie\Local Settings\Application Data\Google\SearchWithGoogle\SearchWithGoogle.exe
C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Prog... Read more

A:IE opens new windows and Firefox opens new tabs

Read other 9 answers
RELEVANCY SCORE 92.4

Got something WRONG with my browsers. My computer, Dell 2400 w/Intel 2.4ghz, 1.5ghz RAM, WinXP Home SP3 works excellent and all programs run as they should. The problem is when I enable my LAN and connect to the Internet. When I first open my FireFox 3.6.8 it goes to my Home Page as it should. As long as I'm working on my Home Page everything works well. I can read all the articles on that page (Yahoo.com) and all is well. But, when I open a new tab and try to go to some site on that new tab, some MalWare opens a new FireFox browser and starts opening new tabs at an accelerated speed. It only takes a minute or less and the top of this new and 2nd FireFox is completely loaded with tabs, each displaying a different internet site. Well, all these tabs being opened at once causes my AVG 2011 to go bizerk! AVG uses 100% of my CPU trying to keep up with all the tabs being opened. After several minutes, I try to close that FireFox and FireFox warns me about closing multiple tabs....221 tabs to be exact. I got this MalWare from Google search engine by connecting to a medical site that Google had marked "SAFE". It took only seconds for AVG to open a window showing that it had found a virus "Win32/Cryptor" and had quarantined it in the Virus Vault and then a minute or so later it found another Malware "Win32.Arto.cbb" and quarantined it also. So, I disconnected from the side and in a few seconds, my ZoneAlarm asked for permission to connect a program ... Read more

A:FireFox browser opens 221 new tabs

Please click on Report and kindly ask to be moved to the Virus & Other Malware Removal forum. Be sure to provide the appropriate reports in that forum after reading THIS. From there, be patient. The malware removal experts are very busy! You should get an answer within the next 48 hours.
 

Read other 1 answers
RELEVANCY SCORE 92.4

Well like it says in the description i have been browsing the web on Firefox and random tabs constantly keep opening with malicious websites.I have ran my avast anti virus a couple of times and it hasn't found anything, i have yet to run Malwarebytes i don't know if that would find anything that avast hasn't. Although i am not much of a computer whiz.Thank you

A:firefox opens random tabs

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Do not Attach logs unless I ask you to.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.I would like to get a better look at your system, please do the following so I can get some more detailed logs.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appe... Read more

Read other 18 answers
RELEVANCY SCORE 92.4

hi my firefox seems to open unknown tabs such as loa.teebik and something how would it be possible to fix this
this happens completely randomly and i dont even have any extensions installed on my firefox
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 8.0.7600.16912  BrowserJavaVersion: 10.45.2
Run by Teemu at 1:08:17 on 2014-03-23
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.358.1033.18.1790.741 [GMT 2:00]
.
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
AV: Norton Internet Security *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
FW: Online Armor Firewall *Enabled* {BD3F5FCA-866B-1E2E-0A68-58900A751EA1}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSy... Read more

A:Firefox opens unknown tabs

Hi there,my name is Marius and I will assist you with your malware related problems.Before we move on, please read the following points carefully. First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding. Perform everything in the correct order. Sometimes one step requires the previous one. If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem. Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me. Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts. If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed. Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean. My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.    Multiple Antivirus Programs installed!I do not recommend that you have more than one anti-virus product installed and running on your computer at a time.The reason for this is that if both products have their automatic (Real-Time) protection switched on, then those products... Read more

Read other 2 answers
RELEVANCY SCORE 92.4

Ive tried everything, run every scanner i could find, there are no processes that shouldnt be there in task manager. Nothing in startup or in services of MSCONFIG. Im stumped. Every couple minutes a new tab will open in firefox(Or if Ff is not open then it will open) With and address that will have a website and then end "normal/yyy102.html"

For example

http://www.bigdiscountbuy.com/normal/yyy102.html

Where "http://www.bigdiscountbuy.com/" will change for other websites

Weird thing is the tab will just be Blank, nothing in there.
I had installed a something which gave m,e some spyware, but this was removed with Ad-aware, spybot, and webroot spysweeper. But this still clings on..

Heres my logfile.

Logfile of HijackThis v1.99.1
Scan saved at 23:26:54, on 18/01/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\BitComet\BitComet.exe
C:\Program Files\Winamp\winamp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LVComsX.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Sanjay\Desktop\Tempy\HijackThis.exe

R0 - HKCU\Softw... Read more

A:Ad-ware opens tabs in Firefox

I see you have disabled some startuo items with Msconfig. Please open it and select normal startup. I need to see everything that is running on your PC to help you clean it out, you may return it to the way it was when we are finished.

You have the latest version of VX2. Download L2mfix from one of these two locations:

http://www.atribune.org/downloads/l2mfix.exe
http://www.downloads.subratam.org/l2mfix.exe

Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.

Close any programs you have open since this step requires a reboot.

From the l2mfix folder on your desktop, double click l2mfix.bat and select option #2 for Run Fix by typing 2 and then pressing enter. It will process then start. Your desktop and icons will disappear (this is normal). L2mfix will continue to scan your computer and when it's finished, it will be ready for a reboot. Press any key to reboot. After the reboot notepad will open with a log. Copy the contents of that log and paste it back into this thread, along with a new hijackthis log.

IMPORTANT: Do NOT run any other files in ... Read more

Read other 19 answers
RELEVANCY SCORE 92.4

Hello there!

Firefox is opening new tabs, usually on crass and annoying sales sites, relating to search terms I've recently used in Google or the website I've just been looking at. It also sometimes takes me from Google searches to the wrong URL, again usually some site trying to sell me something related to the search. If I close Firefox and reopen it, and do the same search it will usually then take me to the right place.

I have run scans with Malwarebytes, Ad-Aware, Spybot and AVG, all of which came up clean. I have uninstalled and reinstalled Firefox. Google Chrome will not install on my PC, though this may be unrelated. Windows Update will not run on my PC, though again maybe unrelated. I do not use Internet Explorer if I can possibly help it. Any help greatly appreciated! Many thanks, OB.

EDIT: I have just tried Firefox in Safe Mode, disabled all add-ons, and then went to Google and searched "Second Hand Cars". First five or six links I clicked on went to wrong URL. So it's not a FF addon!

Hijack This log for your consideration:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:03:29, on 17/02/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\M... Read more

A:Firefox goes to wrong URL and opens new tabs without asking

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 5 answers
RELEVANCY SCORE 92.4

Attached is my HiJackThis Log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:35:18 AM, on 11/14/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17103)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\msdtc.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDO... Read more

A:Firefox and IE opens up by themselves. Multiple tabs with different ads

Hello and Welcome to the forums!My name is Gringo and I'll be glad to help you with your computer problems.Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger:Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appea... Read more

Read other 17 answers
RELEVANCY SCORE 92.4

This is a weird case, and I'm pretty sure it's not attributed to a virus.Basically, I was playing full screen Starcraft whilst Firefox was running with multiple tabs open in the background. I alt-tabbed from the game to Firefox, and right clicked my taskbar and closed the game. As soon as I did this, a tab opened to Adtechus. (A legitimate AD company from what I can tell). I had a look on the website that was open when I alt tabbed before the new tab to Adtech opened and one of the ads on it had an Adtechus URL. The thing that perplexes me is that, my mouse didn't go near it, and so I couldnt have clicked it.After this, a short while later, I re-opened the game, alt tabbed and before I could close it, another tab opened automatically from a site I was on before with a Facebook box implemented into it, and for some reason the new tab contained the Facebook "like" box seperate from everything else. SEE HERE: http://www.facebook.com/plugins/likebox.ph...mp;header=falseFull website with the box to the left, here: http://www.gonintendo.com/I can recreate this by right clicking the Facebook box on this specific website and choosing "This Frame > Open Frame in New Tab". But the thing is, I never did this in the first place! Plus, the website was already closed 20 seconds previously before this new tab popped up. Then, automatically, another Adtechus tab popped up shortly after!I am quite sure I have not got any viruses as I have a multi lay... Read more

A:Firefox opens tabs randomly... but not in the way you'd think

Close out firefox and see if the issue continues.

Read other 9 answers
RELEVANCY SCORE 92.4

Hi, thanks for being here. I have suddenly become unable to utilize Google as my search engine utilizing Firefox. In addition, a new tab will occasionally open on its own while I am online after I have chosen to go to a site - i.e., my site will open and an additional site will open as well - an ad site usually. Even the most rudimentary Google searches are redirected to some sort of generalized info hub - somewhat on topic - but not what I desired. Clicking on a site I find in the Google search results takes me to one of these web clearinghouse sort of pages immediately.Any help would be appreciated. My log file is below. Thank you.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:44:29 AM, on 12/3/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe... Read more

A:Firefox redirected, occasional new tabs opened, cannot utilize Google search

I wanted to post the log files you require and noticed I had not previously - my apologies - but here they are.
DDS (Ver_09-12-01.01) - NTFSx86
Run by Kellie at 19:45:39.57 on Fri 12/04/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1331 [GMT -6:00]

AV: Trend Micro AntiVirus *On-access scanning disabled* (Updated) {7D2296BC-32CC-4519-917E-52E652474AF5}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe -k imgs... Read more

Read other 3 answers
RELEVANCY SCORE 91.2

Hi,

While I think I have temporarily stopped this problem, by blocking redirects in Firefox, I think there is still a malware/trojan on the system, which may cause other problems, so I?d appreciate help from a pro. Many thanks in advance.

Every five of so minutes firefox would open a new Window with 11 tabs 3 or four of them were Index of the folder where firefox is stored, another one is xn-eba.com and the others are page could not be loaded with addresses with lots of odd symbols, but always including the xn- characters. I can just close it but I notice in the Cookies section that a cookie is added each time there is the redirect that I have removed.

I have ran Malwarebytes and spybot search and destroy (which found three problems that I cleaned the first run and none the second) as well as the antivirus (avira). I?ve also cleaned out the temporary files and temporary internet files.

Thanks again,
Chris.

DDS.txt

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Berta at 13:11:18 on 2012-05-01
Microsoft Windows XP Professional 5.1.2600.3.1252.34.3082.18.1022.30 [GMT 2:00]
.
AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
FW: Norton Internet Worm Protection *Disabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Archivo... Read more

A:Firefox opens new window with 11 various tabs, including xn-eba.com

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE:... Read more

Read other 3 answers
RELEVANCY SCORE 91.2

Ever since I did a refresh of Firefox a few weeks ago, it now opens with TWO active tabs running my home page. How can I stop it from opening the second tab which is slowing down completion of opening the first tab?
 

A:Solved: Firefox opens with multiple tabs

check the Internet options and make sure the homepage is not listed twice
 

Read other 2 answers
RELEVANCY SCORE 91.2

Firefox has been opening a new tab with a webpage in it, I used ctrl alt delete to close firefox whenever this happens. This does not occur very often and does not seem to have a set time. svchost.exe under SYSTEM is running with high CPU usage and high Mem Usage around 99% and 280,000 K.

I have used mcafee and spybot search and destroy along with windows malicious software removal tool, all of them have come up clean.

Here is a Hijackthis log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:37:15 PM, on 6/6/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program F... Read more

A:Please help firefox opens new tabs and svchost.exe issues

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 91.2

I use version 3.5.1 When I open firefox it opens with multiple tabs.I tried to find the answer in the FF helpcentre however it's rather confusing for me. I looked at the answer for this problem "preferences not saved" and followed the steps in order to resolve the issue and have been looking to the prefs.js files in the profile folder but none exist Help indicates that those files may be duplicated or corrupted. Also the help centre indicates that if those files are corrupted the preferences are not being saved.I am sure that is the issue but I cannot resolve it.I reinstalled FF several times but the result is the same. Is here a FF user that is able to help in simple words.
I disabled all addons but no result.
My OS Windows Vista Home premium My Laptop:Toshiba Satellite P 200 dual core T5450 Ram 2GB processor 1,66 Ghz I use FF for many years but eversince the 3.5 version was introduced i have this problem. Thanks in advance
 

A:Firefox opens multiple tabs upon start up

Read other 13 answers
RELEVANCY SCORE 90.8

Hello, I'm having an issue when browsing the web via Firefox. Every now and then I'm getting an extremely suspicious new tab that I have to click a box that says "Leave Page." This has started since I appear to have "fixed" the google redirect virus. By that I mean I am no longer being redirected on google web searches. Spybot is detecting a Trojan named Smitfraud-C.generic that keeps returning time and time again. I am also concerned that when I tried to turn on my Windows Firewall as requested, I get an Error code 0x80070424, and have absolutely no idea if this is the result of a virus or not. Thank you in advance for any help.
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_25
Run by Mark Allen at 3:30:22 on 2012-01-31
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6143.4063 [GMT -5:00]
.
AV: Kaspersky Anti-Virus *Enabled/Updated* {56547CC9-C9B2-849D-8FEF-A496150D6A06}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Kaspersky Anti-Virus *Enabled/Updated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k Loc... Read more

A:Firefox popups (suspicious new tabs), Smitfraud-C.generic, and Error code 0x80070424.

Hello and Welcome to the forums!My name is Gringo and I'll be glad to help you with your computer problems.Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 31. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the runn... Read more

Read other 3 answers
RELEVANCY SCORE 90.4

I've recently had an issue addressed in the 'Am I infected? What do I do?' forum that involves a suspicious advertisement tab randomly appearing on its own in Firefox once every few weeks. 
 
boopme had me run some additional scans (MiniToolBox, TDSSKiller, Adwcleaner, JRT, ESET, and Tweaking.com Windows Repair) to those I'd already done and looked over the logs. boopme found them to be fine and wondered if a faulty Firefox add-on might be responsible. 
 
User Bub12 had the same exact problem, and speculated in the thread that the cause isn't a local bug but a rogue Google ad. The ad appeared for me at least once while I was browsing Facebook, so perhaps a Facebook ad is to blame.
 
When I found no suspicious add-ons, boopme suggested I post in this forum to ensure there's nothing compromising on my machine locally.
 
Also, pages continue to often be slow to load or not load at all in Chrome, although this may be unrelated.
 
For my more detailed explanation of the problem and boopme's advice, here's the original thread: 
 
http://www.bleepingcomputer.com/forums/t/511159/firefox-opens-a-new-tab-on-its-own-and-loads-an-odd-womens-health-page/
 
 
Here's my DDS.txt, and attach.txt is attached.
 
Thanks in advance.
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 10.0.9200.16720
Run by ****** at 14:26:20 on 2013-10-27
Microsoft Windows 7 Professional   6.1.7601.1.1252.61.1033.18.81... Read more

A:Suspicious 'Women's Health' advertisement tab opens randomly in Firefox

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===I checked both your topics and found nothing suspicious in your logs.I can only suggest one thing for now Remove Chrome using the Add/Remove Programs.Restart the computer normally.Reinstall Chrome.If you want to keep your Bookmarks before proceeding, I suggest you save them.When the new re-install is complete you can import your saved bookmarks.Read these instructions before proceedinghttps://support.google.com/chrome/answer/96816?hl=en

Read other 9 answers
RELEVANCY SCORE 90.4

I have been fighting this thing for weeks now and cannot find it. I have Malwarebytes and iexplore installed from removing System Tool a few moths ago and I am currently running Avira (after ditching AVG when this all happened). To try and solve this I downloaded and ran Hijackthis but it still has not come up with any substantial fix. If you need the log I can attach it easily enough but it has been a dead end to me.

Thank you all for running this site

Andrew
DDS (Ver_10-12-12.02) - NTFSx86
Run by Owner at 12:08:18.34 on Tue 02/22/2011
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_16
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1527.919 [GMT -6:00]

AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Western Digital Technologies\Spindown\ExSpinDn.exe
C:\Program Fi... Read more

A:Google Redirect & firefox opens new tabs at random

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!These instru... Read more

Read other 2 answers
RELEVANCY SCORE 90.4

Hi,

I recently had a virus/rootkit or some type of malware installed on my computer. Basically because I accidentally clicked yes to one of those "you're computer is infected" links. I ran Malwarebytes and AD-Aware before hand and I thought I got rid of everything, unfortunately I did not as Firefox still opens random tabs.

I read the first steps, my logs are attached below. Unfortunately I do not have a Windows Install CD, I think it's forever lost somewhere.

I read the previous posts similar to mine but was not able to figure out what exactly to do. Any help would be greatly appreciated!




DDS (Ver_10-03-17.01) - NTFSx86
Run by Gov at 18:12:00.67 on Thu 05/13/2010
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_18
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3070.1727 [GMT -4:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe ... Read more

A:Firefox opens random tabs / redirects sites

Hi ettes and welcome to TSF.

If you still require assistance and are not seeking help elsewhere, then please carry out my instructions.

Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription.

** Note: Please stick with me until I declare that your system is free from malware. Even though your system may not have any symptoms of malware, it may still be infected. **

--------------------------------------------------------------
Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. You can find instructions HERE.

Reply back with the following: C:\ComboFix.txt

Read other 19 answers
RELEVANCY SCORE 90.4

When I'm browsing the internet with Firefox, strange sites (like yellowmoxie.com) will open in new tabs randomly. This happens without any input from me at all.

I'm also having problems with Vista failing to boot when I start-up (requiring a few attempts) and Vista crashing usually once a day. I have posted about that in Windows support forum, but the two problems started happening at the same time.

I have tried system restore 3 times, but it hasn't worked to fix any of my problems.

Please help.

------------------------------------------------------------
? OS - Vista SP1
? x86 (32-bit)
? What was original installed OS on system? Vista SP1
? Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? OEM
? Age of system (hardware) 2 years
? Age of OS installation - have you re-installed the OS? 2 years. No.
? CPU - AMD Athlon X2 Dual-Core QL-60 1.90 GHz
? Video Card - ATI Radeon 3100
? MotherBoard - ???
? Power Supply (brand & wattage) - Toshiba, 65 W
Access

-------------------------------------------------------

DDS (Ver_10-12-12.02) - NTFSx86
Run by Kyle at 1511.10 on 08/02/2011
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_21
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.2.1033.18.1789.860 [GMT -8:00]

AV: AVG Anti-Virus Free *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defend... Read more

A:Firefox Opens Strange Sites in New Tabs Without Input

Hello, Welcome to TSF.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.

Please download and run the programs in the order below.


TDSSKiller.zip

>>> Double-click on TDSSKiller.exe to run the application.Click on the Start Scan button and wait for the scan and disinfection process to be over.
If an infected file is detected, the default action will be Cure, click on Continue

If a suspicious file is detected, the default action will be Skip, click on Continue

If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.
If no reboot is required, click on Report. A log file will appear. Please copy and paste the contents of that file in your next reply.
===

Download ComboFix from any of the links below, and save it to your desktop. For information regarding this download, please visit this web page: A guide and tutorial on using ComboFix

Link 1
Link 2


**Note: It is important that it is saved directly to your desktop**

IMPORTANT....

1. Close any open browsers.

2. Close/disable all anti virus and anti malware ... Read more

Read other 2 answers
RELEVANCY SCORE 90.4

I launch Firefox, and almost immediately am interrupted by ten or so new tabs unexpectedly opening, with paid-for ad sites like news7daily.tv, and a few raunchy sites. Later I get random redirects, too, after closing all the tabs.

Last week I installed and ran malwarebytes' anti-malware software, because I was seeing similar unwanted behavior (redirects, pop-ups, continually checking "allow third party cookies".) I killed a couple processes (xxx.exe) and deleted a program whose name I have forgotten, but which another discussion forum identified as malicious. I thought it was fixed, but the issues cropped back up after a few days. I did not have Windows firewall on, I discovered today, which is unfortunate, as it might have saved me a lot of trouble.

Thanks in advance for your help!

-Sid

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_27
Run by Owner at 19:43:47 on 2012-01-05
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1277.66 [GMT -6:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
sv... Read more

A:Ad malware opens dozens of unwanted tabs in Firefox

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 3 answers
RELEVANCY SCORE 90.4

I'm getting random pop-up advertisements for a program called "Registry Defender" which I know for sure is a virus, and several other programs.

I have already scanned my computer with Avast and Malwarebytes and they don't detect any malware. How can I get rid of this virus?

A:Spyware problem: Firefox opens up random tabs

Depending of what your configuration is, the choices may vary, but I would recommend booting up with a LiveCD (i.e. not with your native OS), then scan your hard drive with a few of the online scanners - nowadays most major antivirus vendors offer free online scans. If your LiveCD contains some antivirus software, use that as well.

After that, you could go manually through your Program Files, with the LiveCD nothing will be hidden (or at least you can easily show hidden stuff) and find any file that may have a reference to the "Registry Defender" or any other program that bothers you. Just make sure to erase all instances of them, including from prefetch folders.

If everything fails and you have no earlier restore point to fall back to, there is always an option to re-install the OS, although personally I've never done that in a situation like that - it seems to drastic a move to me.

Read other 6 answers
RELEVANCY SCORE 89.2

Internet explorer won't stop opening tabs unless I end the process.
Also the internet settings for IE keep changing to accept all cookies and I don't use IE ever.
While surfing the internet Firefox opens a new window to random websites or ads and sometimes blank pages with a changing url similar to these two:
(Urls are really long so I'll only post part of it)

Code:
http://77.93.75.150/dot.gif/?ver=120&cmp=profiling4&uid=
Code:
http://82.98.235.113/dot.gif/?ver=120&cmp=profiling4&uid=
I found this within the urls if it helps any.

Code:
www.google.com%2Fsearch%3Fq=rundll32.exe
Also when I shut down my PC an end task window appears labeled SuperMwindow
and when my PC boots up, a window appears saying:
Windows Drive not ready
Exception Processing Message
c00000a3 Parameters 75b6bf9c 4 75b6bf9c 75b6bf9c
asking me to continue cancel or try again
I'm new here and I don't know what's going on Please Help

I read the the first sticky and and downloaded Hijackthis
Here's the log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:26:06 PM, on 1/27/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common F... Read more

A:IE tabs won't stop opening, FireFox opens up random sites

Read other 16 answers
RELEVANCY SCORE 89.2

Hi guys, how are you? My laptop is having an issue in Firefox. While using Google's RSS Reader to read my feeds, I get randomly open new tabs that have various different links but are completely blank or have very weird scroll bars inside.

I ran the following in plain safe mode with newest updates: Spybot (clean), Malware full scan (clean), Norton Internet Security full scan (clean) & TSSDKiller (found one threat, rescan was clean).

Should I follow this thread (www.bleepingcomputer.com/forums/topic462907.html/page__p__2790786__hl__firefox+random+tab__fromsearch__1#entry2790786) or post my own logs? Thanks

A:Firefox 14 opens blank tabs while reading Google RSS feeds

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/465907 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

Read other 50 answers
RELEVANCY SCORE 89.2

Hello,
 
I recently removed 2 instances of recurring malware ( I removed it and the following day it was back again, removed it again and it came back again) and an instance of recurring spyware off of my Windows 7 pro 64 bit PC with Spybot before removing an additional  piece of malware with Norton Internet Security. I ran a full scan with McCafee before this but it didn't detect anything (Mcafee did find something with its real time protection everytime I tried to remove and resinstall Firefox) that Spybot hadnt found already, so I decided to run some free scans from other antivirus platforms from the internet. Norton found some things so I switched over to Norton. I also ran Microsoft Safety Scanner and Norton Power Eraser neither of which found anything.
 
I am continuing to get popups and when i click on links in Firefox I continue to get multiple windows and tabs opening. I am running the most current version of Firefox from the Mozilla website. This makes me think that I might still be infected.
 
I'm sorry I did not record the names of the malware that were giving me problems. If they come up again I will post them.

A:Firefox opens multiple windows/tabs after malware removal

 Get the free version of Malwarebytes, get it up to date, then boot to Safe Mode and do a full system scan with it and your antivirus.  This could run for a couple of hours.
 
 As for the multiple tabs, just get the ones you want, then press ALT-t and click Options -> Use current pages.
 
Good luck.

Read other 2 answers
RELEVANCY SCORE 88.4

All of a sudden I can no longer open or close new tabs using the middle mouse click (clicking the scroll wheel) it doesn work in ie or in firefox. Also seems like it doesn't work on the desktop or any other application. I have'nt installed new updates or new programs, I don't have any "mouse software" like intellipoint. This affects both my wireless keyboard with built in trackball and a serperate wireless scrollmouse. The only think I can think of is that a few days ago I changed the the speed of my cursor.. of course this shouldn't have affected anything else.... but it is really annoying as I mostly use my computer for web browsing and always open links in new tabs... Please help!

A:Middle mouse click no longer opens or closes new tabs in ie or firefox

What make AND model of mouse do you have?

Read other 2 answers
RELEVANCY SCORE 88.4

This started about a week ago. I get popups like this: http://i.imgur.com/woPGCeq.png (screenshot) and webpages all stick double-underlined links into their text like this: http://i.imgur.com/w0zDkVW.png (screenshot).
 
I ran Malwarebytes, it removed a bunch of stuff, but apparently not what is causing these symptoms. Here's my log:
 Malwarebytes Anti-Malware 1.75.0.1300www.malwarebytes.orgDatabase version: v2013.12.14.05Windows 7 Service Pack 1 x64 NTFSInternet Explorer 11.0.9600.16476MacFall :: MACFALL-PC [administrator]12/14/2013 12:58:10 PMmbam-log-2013-12-14 (12-58-10).txtScan type: Quick scanScan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUMScan options disabled: P2PObjects scanned: 222271Time elapsed: 9 minute(s), 46 second(s)Memory Processes Detected: 1C:\ProgramData\QuickSet\SK.Enabler\SK.Enabler.exe (PUP.Optional.MultiPlug.A) -&gt; 696 -&gt; No action taken.Memory Modules Detected: 0(No malicious items detected)Registry Keys Detected: 5HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-1495795506 (PUP.Optional.MultiPlug.A) -&gt; Quarantined and deleted successfully.HKCU\SOFTWARE\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -&gt; Quarantined and deleted successfully.HKCU\Software\AppDataLow\SProtector (PUP.Optional.SProtector.A) -&gt; Quarantined and deleted successfully.HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -&gt; Quarantined and dele... Read more

A:Firefox opens tabs to sites like "findsection.net". Also, popups. Logs included

Please download and use the following tools (in the order listed) which will search for and remove many potentially unwanted programs (PUPs), adware, toolbars, browser hijackers, extensions, add-ons and other junkware as well as related registry entries (values, keys) and remnants.RKill created by Grinler (aka Lawrence Abrams), the site owner of BleepingComputer.AdwCleaner created by Xplode.Junkware Removal Tool created by thisisu.
1. Double-click on RKill to launch the tool. A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.Important: Do not reboot your computer until you complete the next step.
2. Double-click on AdwCleaner.exe to run the tool.Vista/Windows 7/8 users right-click and select Run As Administrator.
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
After reviewing the log, click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
Copy and paste the contents of that logfile in your next reply.
A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
-- Note: The contents of... Read more

Read other 5 answers
RELEVANCY SCORE 87.6

Hi,A couple days ago I got a virus or something that would pop up a fake Windows AntiSpyware (don't remember exact name) program. I was finally able to get rid of it using AVG and MalwareByte's Anti-Malware.Now Firefox will open up random tabs on it's on (don't have to click on anything) and when I click on links sometimes it will redirect me for like 5 clicks of the link and then after that allow me to go to the site and then it will repeat this action maybe 10 minutes later.It also will not let me go to the microsoft update site (in IE and Firefox), and when I search w i n d o w s u p d a t e . m i c r o s o f t (without the spaces) in google or any text field that I submit (tried it in a forum) (in IE or Firefox) it will just bring up a page that says connection was reset or page failed to load. I have also tried it in safe mode and I get the same symptoms.I have tried running MalwareByte's Anti-Malware, Spybot S&D, AVG, and HJT. At one time MalwareBtyes said something about a tcipip.sys thing but I don't remember too much about what was wrong.I followed the prep guide but I cannot get a full gmer scan to run. It either just restarts my computer, freezes, shuts down the program, or locks down my computer (have to do a hard reset).Thanks for any and all helpEDIT: One of the pop-up tabs lingered on a site for a second before going to an ad site, the url of this site was..hxxp://apachejct.com/key/?qs=9434cd09aed34cc216c628c7eac958b4aa78b00b6706ac1a... Read more

A:Firefox opens random tabs and redirects, blocks microsoft update - rootkit?

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Fo... Read more

Read other 8 answers
RELEVANCY SCORE 86.8

Ok so i've noticed that firefox randomly will open ad pages in new tabs and redirect my google searches.

I have run complete scans with superantisypware, avira, spybot, malwarebytes, iobit security 360 and inbuilt windows malware scanner. Some of which came up with detections which i got rid yet the problem remains. I tried to restore my comp but it failed, obviously one of the malwares clever tricks.

Here is my DDS log. The attach.txt file is attached but i could not get the GMER rootkit scanner to work. It would complete the scan but as soon as i tried to save it it would give a blue screen and restart...not good i would say. So hence i dont have an ark.txt.

Really starting to worry. I read that these things are usually to direct internet traffic to specific sites to increase ad revenue for the malware people. I havn't done any internet banking cos i am not that foolish but is there much of a chance they will get control of my gmail or facebook accounts? How paranoid should i be in terms of infections spreading to other networked computers and external hard drives?


DDS (Ver_09-12-01.01) - NTFSx86
Run by Darren at 16:35:42.58 on Wed 13/01/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Professional 6.1.7600.0.1252.61.1033.18.3323.2523 [GMT 10.5:30]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system... Read more

A:Due to adware/spyware/malware firefox opens random tabs and google redirects pages

BUMP, please

Read other 12 answers
RELEVANCY SCORE 86.4

According to the following I am not on the same page ;

In the Firefox menu toolbar, click Tools and the select Options. Next,
under the Startup section you want to check the drop down menu next
to where it says, ?When Firefox starts:?.

When I go to tools > options > there is no startup selection, . .
Maybe it's because I upgraded or Updated to Mozilla ????

Whatever but I would like to save my tabs and windows when I close Firefox,
Will appreciate your know how .

A:Firefox Windows and Tabs from Last Time ?

Hihttp://support.mozilla.org/en-US/kb/restore-previous-sessionWhen session restore occursWhen you select Restore Previous Session from the default home pageIf you had tabs and windows open when you last closed Firefox, the default Firefox home page will have a Restore Previous Session button on it. To get your tabs and windows back, just click it.When you select Restore Previous Session from the History menuHere's how to get your tabs and windows from a previous session back if you don't use the default Firefox home page:At the top of the Firefox window, click the Firefox button, go over to History (History menu in Windows XP) and select Restore Previous Session.On the menu bar, click the History menu and select Restore Previous Session.At the top of the Firefox window, click the History menu and select Restore Previous Session.Please Note that if you have hit a malicious page and closed Firefox to get out o fit this will restore it too.Off to testGood LuckRogerThe restore previous session from the History menu Just worked for me

Read other 3 answers
RELEVANCY SCORE 85.6

Over the past week, there have been occasions when I'm in Firefox and when I type, no text appears. Instead the tabs at the top of the Firefox page (i.e. File, Edit, View, History) are selected. It seems that I need to close down all Firefox windows and reopen to get rid of the problem. But the fix is only temporary. It comes back a few days later. I'm not sure what the cause is. I've followed the steps on the "Read this first" section. Then I went through the steps in the Prep Guide. When I run rootrepeal, the scan seems to stop at c:/windows/winsxs/manifests. Of the files that seem to have been scanned in rootrepeal up until the manifests part, they all say "locked to the windows api!" in the status section. Since I can't get further, I'm attaching my dds and attach logs below. Would love to hear if I am doing something wrong. Thanks!!
DDS (Ver_09-12-01.01) - NTFSx86
Run by Rungostar at 17:47:57.67 on Tue 12/15/2009
Internet Explorer: 8.0.6001.18865 BrowserJavaVersion: 1.6.0_13
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3581.2257 [GMT -5:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Windows\system32\lsm.exe
C:\Program Files\AVG... Read more

A:Typing in Firefox Only Doesn't Create Text, But Opens File, Edit, View, History Tabs

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 9 answers
RELEVANCY SCORE 83.6

I ran Malwarebytes awhile back(I've been in and out of town for a couple weeks) and it found some Vendu trojan stuff that it got rid of, but can't find any issues now even though the problem exists. I've also ran spybot a few times but nothing is showing up malware wise anymore. I tried running gmer but the scan took a day and a half to run and when it was done and I tried to save the file it froze my computer completely. I've seen this issue on here a few times, but figured I had better let one of the experts have a crack at it before I messed anything up. Here is the DDS.txt as requested:DDS (Ver_10-03-17.01) - NTFSx86 Run by HP_Administrator at 23:13:27.07 on Sun 06/20/2010Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1111 [GMT -5:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}============== Running Processes ===============C:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exesvchost.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\ehome\ehtray.exeC:\Program F... Read more

A:Random new tabs in Firefox, along with Just-In-Time Debugger popups virus

Hi,If you still need help with this post fresh dds logs, please.

Read other 14 answers
RELEVANCY SCORE 81.6

Acer Aspire 5750-6636
Windows 7 64bit Service Pack 1
Intel Core i3-2310M (2.1GHz, 3MB L3 cache)
 
(Addition.txt would not attach so I pasted it at the end.)
 
 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-06-2015
Ran by Owner (administrator) on OWNER-PC on 08-06-2015 11:24:36
Running from C:\Users\Owner\Downloads
Loaded Profiles: Owner (Available Profiles: Owner)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe... Read more

A:Banners in Firefox window, unwanted programs, extra tabs opening in firefox.....

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
Please download the latest version of Farbar Recovery Scan Tool and save it to your desktop. Don't kill any malicious processes at your own.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Make sure that Addition.txt is checked before you press the ... Read more

Read other 20 answers
RELEVANCY SCORE 75.2

As explained in the topic title, I downloaded and installed a trojan from trying to watch the most recent episode of a TV show I had torrented. Installed the file License.v.3.setup.exe. Not a good idea. Trying to get rid of it. Please enjoy the following DDS results.

DDS (Ver_09-12-01.01) - NTFSx86
Run by quixorbl at 6:43:39.73 on Fri 12/18/2009
Internet Explorer: 8.0.6001.18865 BrowserJavaVersion: 1.6.0_17
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3071.1969 [GMT -5:00]

SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k Loca... Read more

A:New windows with multiple tabs in FireFox and IE8, blank tabs in Chrome

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 69.6

The Firefox Web Browser suddenly stopped working on my PC.Even after uninstalling and reinstalling it doesn't open.Google Chrome and IE are working fine but i need Firefox.Please help me to fix this issue?
 

A:Firefox is not getting opened?

Read other 6 answers
RELEVANCY SCORE 68

This may be that redirect thing i have been seeing around but idk. This is starting to become a serious issue and i cant seem to find a solution. i have run multiple checks with mbam and superanti but nothing shows up. i have disabled or removed any add-ons also. is there someone who can direct me to an appropriate solution or give me some help? i have seen other posts that are similar but i dont want to follow the instructions unless told to do so. please help!

A:Websites being auto opened in firefox....

any help would be appreciated. i dont want to have to get rid of this comp but nothing seems to work. it has slowed down so much it makes even basic things time frustrating.

Read other 2 answers
RELEVANCY SCORE 68

While running CCleaner a new screen came up in firefox asking me to create another identity besides the default. said the default was already in use. I just put my first name in and firefox opened up like it was my first time. All favorites are gone and so are all associated plugins and toolbars. the tool bar is minimal and it doesn't have any tabs. checked version and it says Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.6) Gecko/20050317 Firefox/1.0.2

what the heck happened here and if cc cleaner did it, why now and what to uncheck so this doesn't happen again. Been using both programs for several months!
 

A:Bummer! Firefox opened as new install

firefox does have something called a profile manager, though it takes a bit to set up, which allows you to set up different profiles so each user has their own preferences, ect. It sounds like somehow your firefox got bumped from that default browser and when you made a new profile, of course, it would have been all basic for the new "person" to create it as they wished. If I'm not mistaken, yours is probably still there.

I've known of several people that this has happened to (though not when using CCleaner) . Seems to be a glitch in the program related to the Profile Manager. The profile manager is an option you can set up, though it doesn't really seem to be known much or to be mentioned much on the Firefox website. Don't know why, as I find it very useful since my daughter and I have completely different tastes in browser looks and website favorites.

Anyway, once you set up the profile manager, you can then see all the "profiles" that are created. Your default profile should still be in there and you can switch it back to that one. You can delete the new one you just created, too.

Okay, here are the instructions for creating a profile manager which will let you switch back and forth between profiles.

First, click on your existing firefox desktop icon and create a second desktop icon from it and name it "Profile Manager."

Then, open that icon and click on "properties>Shortcut tab>"Target" field. In ... Read more

Read other 1 answers
RELEVANCY SCORE 68

Hi,
I have been having problems with Firefox ever since I installed the external IP add on. Every time I open a new page it closes half a second later, I usually have to try about 5x till it finally stays open.
I am running on a PowerBook G3 with Mac Os X 10.4.9 and an eMac G3 also with 10.4.9.
I was wondering if anyone here has had the same problems or if anybody has any solutions I would appreciate them.
I wanted to try to uninstall the addons but I did not know how.

Regards, Icy

A:Firefox Windows closing right after being opened

Hi

Firstly try in Firefox Safe Mode. If it stays stable it's one of your addons.

Have Firefox closed. Go to Utilities (in the Applications folder) and open Terminal, then run:

/Applications/Firefox.app/Contents/MacOS/firefox -safe-mode

If you don't encounter the problem there, then close and open in normal mode as usual and in Tools>Addons, uninstall the faulty extension.

If you have more than one, keep disabling one by one and restarting Firefox to find the culprit. Yes, a pain but that's to save you from deleting all of them. If you don't really want them then you can delete all of them and it'll work.

This also applies to themes.

Read other 1 answers
RELEVANCY SCORE 68

Hi everyone,

We recently started having this problem on my wife's desktop. I hope someone can give us some direction to fix this problem. When we try to open Internet Explorer, Firefox, and Google Chrome the pc goes to a blue screen and automatically restarts. This happens even when we are not connected to the internet!

My wife's pc is running Windows XP Home Edition with service pack 3. She did all the Windows updates regularly and all her drivers are the latest as far as I know. I think she has Internet Explorer 9 and Firefox 4. Not sure which version of Chrome she has because I can't go into the browser to check!

We use Vodafone wireless modem for our internet and she says that all the other programs works just fine. We appreciate any help...

A:IE, Firefox, & Chrome BSOD when opened!!!

are you sure you have msie 9 installed? it is not supported by xp.

Read other 2 answers
RELEVANCY SCORE 68

Hi guys,

Im absolutely desperate to find a solution to this. Ill outline the problem and then tell you what ive tried..


Problem
Whenever I open firefox.exe or iexplore.exe, before even the first webpage has opened both applications will crash. When viewing the crashlog, it says the following error:

Quote:




AppName: firefox.exe AppVer: 1.8.20080.40413 ModName: unknown
ModVer: 0.0.0.0 Offset: 01f28313




or

Quote:




AppName: iexplore.exe AppVer: 7.0.6000.20733 ModName: unknown
ModVer: 0.0.0.0 Offset: 0035620c




Once, an error came up like "The memory could not be 'read'".


What I've Tried
I have done full virus scans with 4 different anti-viruses. No problem there.
I have done registry doctors, nothing.
Then 5 different antispyware programs, nothing.
I ran a RAMtest program overnight, no problem.
Reinstalled both iexplore and firefox, and it didnt work.
I inserted my Windows XP SP2 CD, and did a repair installation, nothing.

I have tried absolutely everything, and search everywhere.
My immediate suspicion was that it could be an inetsrv corruption, but after repair installation of windows making no difference, thats out the window.

Please let me know, am desperate for help.
Kind Regards x
Neerajmorz

p.s. This happened instantly yesterday, the day before it was working fine, and I made no changes. Perhaps WindowsUpdate ran overnight, but I doubt it. Oh, an... Read more

A:Firefox & IE7 immediately crash when opened

oh and something that may help, not all thigns related to internet dont wor.
i.e. im transferring via ftp fine
im using RDC with no problems
using a myspace program called friendblaster, it has an internet browser, and that works fine too.

argh :P
x

Read other 2 answers
RELEVANCY SCORE 67.6

Every so often e.g. when i am searching on google and I click on a link a random tab opens up noramlly advertising something. It has only started to happen recently and think it maybe a virus??
Im not too sure but i would love to know what you guys think and any suggestions that you have to solve the problem. REP will be given to all who contribute. Thanks

A:FireFox Tabs

Hi there, dont need to greed for rep.
It looks like your browser is hijacked. Go to Tools>Clear Recent History>Everything>Clear.

Read other 4 answers
RELEVANCY SCORE 67.6

Ive also downloaded, spybot, they scanned and find things and remove them, but even before i got the internet 2010 security virus, I was seeing the very same pop up tabs. I purchased the internet security 2010 thinking it was a real program, Found out it was fake and had to change my credit card number, I downloaded malware to get rid of it also. Any reason why i keep getting tab pop ups for advertisements asking me to buy registry defender and website surveys? someone please help me.

A:Pop up Tabs in Firefox

If this is the same computer that has the sekanawo.dll I recommend that you submit a DDS logPlease read the pinned topic titled "Preparation Guide For Use Before Posting A Hijackthis Log". If you cannot complete a step, then skip it and continue with the next. In Step 6 there are instructions for downloading and running DDS which will create a Pseudo HJT Report as part of its log. You will also be instructed to create a Root Repeal LogWhen you have done that, post your log in the HijackThis Logs and Malware Removal forum, NOT here, for assistance by the HJT Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the HJT Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.The HJT team is very busy and it will take awhile to get to your postPlease be patient and good luck

Read other 1 answers
RELEVANCY SCORE 67.6

Whenever I go to File>New Tab or Ctrl+T a new tab shows up but with nothing on it (about:blank in IE). Is there a way to make new tabs automatically load web pages. For example when I go to File>New Tab I want the new tab to open with techguy.org in it already.

Have a good day,
The guy from Pluto
 

A:Firefox Tabs...

The new tab will open blank unless it has a link. If you have a wheel mouse, you can middle click any link or bookmark and it will open that link in a new tab.
 

Read other 3 answers
RELEVANCY SCORE 67.6

Hi since using 'Firefox 4' my pin apps keep disappearing? I think it some thing to do with 'CCleaner' Tried unticking 'Internet History', Internet Cache', 'Cookies', 'Download History' & they still disappear? Any one having the same problem?

Appreciate any help

Thx
 

A:Firefox 4 & Pin App Tabs?

Can't solve....guess just 'buggie'
 

Read other 1 answers
RELEVANCY SCORE 67.6

I set my Firefox preferences to always open new windows in a new tab. But it does not do that. It always opens a new window in the same tab. Are there any other settings I may have missed.

A:Tabs in Firefox

Use an extension called Tab Mix Plus You can find it below. I always use the Dev version as it is better. I have been using TMP for years and can vouch that it is one of the best add-ons out there. It should do what you want. Get it Here:

Tab Mix Plus &bull; View topic - Tab Mix Plus v0.4.0.5 is out

Read other 9 answers