Ok, for some reason I cannot figure out, Firefox has just gone insane! When I open it now it goes to some weird page, opens about 10 tabs ... I don't use tabs ... and goes to one of my Add On apps and this changes every time I open it now. I have disabled or uninstalled almost all my apps, I've gone to Options and UNCHECKED all the boxes in the TABS section [it keeps rechecking these boxes whenever I restart Firefox!!!].
I've run System Suite, Malware Bytes, Advanced System Care ... no bugs, viruses or any of that junk so far.
But something or someone has taken over my Firefox and I want it back!!!
Should I reinstall it? Update it? Any idea what is going on?
Marci
Hey Marci -That doesn't sound good!! LOL
[quote:2eybknzu]When I open it now it goes to some weird page[/quote:2eybknzu]
Can you supply more details about this "weird" page please. As much information as you can ascertain. Is it the same page every time??
Sounds very much like a browser hijack or rootkit infection...definitely has the hallmarks of malware of some kind, although there could be other possibilities.
[quote:2eybknzu]Should I reinstall it? Update it?[/quote:2eybknzu]
I wouldn't do either at this stage. Get back to us with all the details of your weird page and we'll take it from there.
Cheers.....Jim
Well, just now I opened it up and it had downloaded Firefox 3.5 automatically!!! CRAP!!!!!! Homepage changed, got tabs now ... the page didn't come up this time ... some Russian site. Maybe I should restore a previous time? This just really ticks me off so much!!!
Makes me want to quit Firefox and go to another browser!!!! ARGH!!!!
Marci
Marci - I still think you may need to scan your machine using a dedicated rootkit scanner or something similar. It is likely the malware will take over again and the same issue arise.
Please post back if the problem continues or happens again.
You should [i:22be6fy2]NOT[/i:22be6fy2] use system restore to try and fix this issue!!
Well, I FINALLY got it halfway working right again, but for some reason when I open THE LATEST VERSION OF FIREFOX WHICH GOT INSTALLED AUTOMATICALLY WITHOUT MY PERMISSION, it opens all my add-in in TABS!!! There isn't even an option for NOT USING TABS!
I am still running Malware Bytes and the rest. Nothing so far. I recall awhile back you showed me how to stop Firefox from updating and I unchecked that box AGAIN, but I don't know how to stop it from doing the TAB THING.
This is SO ANNOYING!
Thanks for the assist! I'll keep ya posted and updated as needed!
Marci
As Jim said, I'd go for a scan with a rootkit specialized application, like [url=http://www.gmer.net/:1solwq6n]gmer[/url:1solwq6n] or any other reliable one, as this could be some serious infection, in which case it only looks like you got control of Firefox back, but definetely not of your system.
If you make sure it's not an infection, you need to do some standard troubleshooting on Firefox. Read [url=http://kb.mozillazine.org/Standard_diagnostic_%28Firefox%29:1solwq6n]here[/url:1solwq6n] and [url=http://support.mozilla.com/en-us/kb/basic+troubleshooting:1solwq6n]here[/url:1solwq6n] how to proceed.
I am human
Hey guys.
I ran the Malware Bytes program you suggested awhile back as a good one, nothing found there. Ran Advanced System Care and System Suite and nothing found there either.
My Incredimail was buggy so I tried to reinstall it but the latest version was SO different than the one I got years ago that I didn't like it one bit and uninstalled it. Then I tried to reinstall an old version and ended up with a mutant combo of the new and old versions! Finally I had to uninstall it all and put the new version in just to get it work but I don't like it AND it's still buggy! Incredimail is notorious for hijacking your homepage too but that was easily fixed. I know lots of folks don't like Incredimail but it's the only email program I know of that has the emots which I like.
I'll run my AV programs again today.
I don't know what a gmer is? But I will check out those links, FD and the firefox troubleshooting too.
Probably about time for us to get a new computer again very soon. SIGH. I hate Vista.
Thanks guys! You're the best!
Marci - Gmer is software which scans for evil rootkit infections....and the symptoms you have described pretty much fit the rootkit bill.
Programs like MBAM and SAS scan for all different types of malware, whereas programs such as Gmer are dedicated to finding and removing just one type of malware...that is rootkits. There are several good similar freeware programs and Gmer is among the best, albeit a little short on ease of use.
If you have any trouble with Gmer or would like to get a second opinion I suggest Sophos Anti-Rootkit; it's pretty simple to use and quite effective. Get it here: http://www.sophos.com/products/free-too ... otkit.html
Another which is very easy to use and comes from the reputable Trend Micro is Rootkit Buster. It is portable too (doesn't require installation), you can get that here: http://downloadcenter.trendmicro.com/in ... #undefined
Cheers....Jim
[quote="yuko":3c9avruh][b:3c9avruh]incredimail[/b:3c9avruh].
I had this several years ago (as a noob) and loved it. I noticed however my computer began slowing way down even though I kept the darn thing cleaned out. I started noticing a lot of forums giving Incredimail bad press so I decided to run a full scan on my computer and I came up with several viruses all pointing right back to Incredimail.
I had a heck of a time getting rid of it but when I finally got rid of all the crap my computer was like a new computer again.
I then told all of my friends who had Incredimail and told them to run scans.
You guessed it - ALL of them had these same infections.[/quote:3c9avruh]
Yeah I'm beginning to think it would be easier to just insert an emot into Outlook or some other email client rather than using Incredimail any more, and I've used it for years now. Even bought the darn thing!
I'm guessing it would be a major undertaking to uninstall every nook and cranny full of junk deposited via Incredimail, am I right? I wouldn't know where to start. I couldn't even uninstall Incredimail, let alone all the crap that came with it. The fact that they hijack your homepage without your permission really shows the kind of program it is!!
Got some step by step advice to uninstall everything of Incredimail origins including the program itself?? I would love to make my computer brand new again!!!
[quote="ozbloke":1ubsumvp]Marci - Gmer is software which scans for evil rootkit infections....and the symptoms you have described pretty much fit the rootkit bill.
Programs like MBAM and SAS scan for all different types of malware, whereas programs such as Gmer are dedicated to finding and removing just one type of malware...that is rootkits. There are several good similar freeware programs and Gmer is among the best, albeit a little short on ease of use.
If you have any trouble with Gmer or would like to get a second opinion I suggest Sophos Anti-Rootkit; it's pretty simple to use and quite effective. Get it here: http://www.sophos.com/products/free-too ... otkit.html
Another which is very easy to use and comes from the reputable Trend Micro is Rootkit Buster. It is portable too (doesn't require installation), you can get that here: http://downloadcenter.trendmicro.com/in ... #undefined
Cheers....Jim[/quote:1ubsumvp]
Thanks Jim! Sort of like getting to the ROOT of the problems eh?
I started the gmer program like twice already and it took SO LONG I ended up stopping the scan both times because I couldn't use my computer for anything else! Gee whiz, I thought the Malware Bytes program took a long time! I have no idea how long the gmer takes YET. Maybe if I ran it before I went to bed?
Maybe I'll try the ones you suggested instead.
UPDATE: Ok apparently the Sophos program wants me to register and thinks I run a company because it's asking me all sorts of questions. On to the next program!
UPDATE #2: The Rootkit Buster worked fine and found four 'hidden' files, but didn't explain what they are and I couldn't figure it out from the list so I did not delete them. I think I'm already in WAY over my head here.
What is the best overall all around easy to use anti virus, anti spyware, anti everything bad program that one can use?
Marci - Yes, run Gmer just before you go to bed and it will be finished when you get up.
If Rootkit Buster flagged 4 files, chances are those files are nasty. You can always submit the details of the files here for us to have a look at and advise.
[quote:2dhk0zkd]What is the best overall all around easy to use anti virus, anti spyware, anti everything bad program that one can use?[/quote:2dhk0zkd]
First of all mate, there isn't really 'a one program does all' solution among the freebies. Most of the commercial security suites cover most bases but they are expensive and often heavy on resources.
Which is the best of the freebies is a matter of opinion; I am an Avast fan, it has very good detection rates and covers a lot of bases, plus it is easy to use. Microsoft Security Essentials (MSE) is also fast gaining a very good rep. There are other free security programs you can use to augment the free anti-virus. A HIPS based program like Threatfire would be a good choice or a free firewall such as Online Armor which also includes a HIPS component.
If you are prepared to pay for security software then you cannot go past Eset Nod32. It is very effective, simple and easy to use, and light on resources. The best!!!
Cheers....Jim
Gmer does take a long time to do its job but does it effectively, so follow Jim's advise.
[quote="Selahgal":1bhwi4jl]
snip
UPDATE: Ok apparently the Sophos program wants me to register and thinks I run a company because it's asking me all sorts of questions. On to the next program!
snip
[/quote:1bhwi4jl]
You can download Sophos Anti-Rootkit form [url=http://majorgeeks.com/Sophos_Anti-Rootkit_d5238.html/:1bhwi4jl]MajorGeeks[/url:1bhwi4jl] without having to register or anything.
On the link Jim provided you can also find the User Manual for it (first download under Resources).
As for uninstalling Incredimail, you could try [url=http://www.revouninstaller.com/:1bhwi4jl]RevoUninstaller[/url:1bhwi4jl] which is usually very effective (though I haven't tried it on Incredimail), but you need to make sure all the registry entries it'll tell you to remove are related to that program. It's got a portable version (at the very bottom of the download page), so just download, unzip and run.
Good luck!
I am human
Jim Hillier
Richard Pedersen
David Hartsock
Carol Bratt
dandl
Jason Shuffield
Jim Canfield
Terry Hollett
Stuart Berg
John Durso
1 Guest(s)