Recommended Posts

Hey guys,

I downloaded some file from internet and executed it... (big mistake)

Now i am facing an annoying problem. When ever i open a .HTML file from my computer, the Firefox opens some sites itself (cam sites, ebook sites etc.) I scanned with Malwarebytes it didnt helped.

Another thing is that, this only happens with FireFox. I reset it, re-installed it, deleted my profile it didnt helped.

.HTML files open well in chrome and Internet Explorer.

I am using Windows 8, FireFox Nightly.

Please Help

Thank you.

Link to comment
https://www.neowin.net/forum/topic/1136422-some-virus-in-firefox-please-help/
Share on other sites

Try defaulting firefox.

http://support.mozilla.org/en-US/kb/reset-firefox-easily-fix-most-problems

(Scroll down to see instructions towards bottom of the page).

okay heres another thing i just found..

for example, if the file name is "This is My Page.html" and if i open it in firefox, 4 tabs will open and it will look for This, is, my, page as sites in each tab...

I checked hosts file, nothing there. how to check DNS/ DHCP setting?

thanks

do a windows key + R then type firefox /p and create a new profile and use that and see if your issues go away. If they do then just export your favorites and go back to firefox / p and nuke your old profile.

""This is My Page.html" and if i open it in firefox, 4 tabs will open and it will look for This, is, my, page as sites in each tab..."

So if your page was called one.html what happens

It opens up a second tab searching for site called one?

That doesn't sound like any sort of virus or malware - sounds like some sort of addon or something. Can you post a screen shot of this??

So when I open a html file in firefox it looks like this, only the 1 tab and address of the file I opened.. What does what your saying happen look like - post a screenshot!

post-14624-0-46787000-1360850256.png

If you downloaded a file and executed it, the problem is probably not with firefox, the problem is likely you have a virus

empty all temp folders, disable msconfig startup items, check registry run entries, reset IE, Run scans with > Spybot, Avast Boot time scan, malwarebytes, Hijack This

Also check the hosts file doesn't have a load of redirect entries

So i opened a file "Funny 3 Words.htm" and this is i got :

in tab 1: file:///D:/Zzz/Funny

tab 2: http://www.****.com/Funny

tab 3: http://3/

tab 4:http://words.htm/

it starts searching for the each words of the file name and then sometimes redirects.

some times one tab redirects to some specific site ebook site or cam site.

I ran scan with comodo 2013, bitdefender 2013, malwarebytes and they found nothing. I cleaned registry, checked startup, hosts files, all seem good.

Unfortunately i have no restore points. And this happens with only FireFox. There are NO addons installed and no extra plugins

There is a guide here for battling a redirect virus

http://malwaretips.c...redirect-virus/

You might want to scan for rootkits too if normal AVs / malware scanners can't find anything

I think Kaspersky has a rescue boot disk capable of finding rootkits

What was the file you downloaded and ran ?

Have you checked simple things like programs and features to see if there is some adware / spyware crap installed ?

Why would a virus do such a thing - makes NO sense.. Opening up sites that it wants, sure - opening sites to ads, ok..

But if you open a file and opens tabs with each word?? I highly doubt its redirecting anything, more like just seaching for the word or opening the domain what word matches up too. Sounds more like a bug with the file opening process to me.

So are you just clicking on these html files, or are you in firefox doing open file?

Why would a virus do such a thing - makes NO sense.. Opening up sites that it wants, sure - opening sites to ads, ok..

But if you open a file and opens tabs with each word?? I highly doubt its redirecting anything, more like just seaching for the word or opening the domain what word matches up too. Sounds more like a bug with the file opening process to me.

So are you just clicking on these html files, or are you in firefox doing open file?

I'm just going from OPs post saying: "When ever i open a .HTML file from my computer, the Firefox opens some sites itself (cam sites, ebook sites etc.)"

okay, i followed everything on this page: http://malwaretips.com/blogs/remove-browser-redirect-virus/

but no luck

Also, this only happens when i open .html outside of browser. If i open any html file from file menu of browser then it opens normally. If i double click on any .html file than it opens in an unusual way redirecting and searching for file name words..

okay, i followed everything on this page: http://malwaretips.c...redirect-virus/

but no luck

Also, this only happens when i open .html outside of browser. If i open any html file from file menu of browser then it opens normally. If i double click on any .html file than it opens in an unusual way redirecting and searching for file name words..

Have you gone to the HTML files properties via right click and made sure Firefox is set as the default program to open them ?

Does the same thing happen if you select IE as your default browser or right-click on the .html file and select IE? At least I would point to an OS issue vs. a Firefox one.

What OS are you running? Did you already post that? XP, Vista, 7, 8? Some other windows - linux?

If only happens when you click on it or use open with in explorer, then sure it could be something wrong in the way the file is passed to firefox.. I like the idea of the test of using different browser to open the file the same way. I assume you have done this already since you stated it doesn't happen with other browsers. So are you using open with, or just doubleclicking and its using firefox as default to open html files. What if you change the association of html files to different browser so that if you double click them its opened in IE or Chrome, Opera, etc. What happens then?

If we know what OS your using it will help us pinpoint where the issue might be.

curious what your HKEY_CLASSES_ROOT\FirefoxHTML\shell\open\command

is?

For example mine is

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1"

Do you happen to have maybe %2 %3 or something added to yours? Im going to edit mine to see if I can duplicate your issue. This is from a XP box btw.

okay, I tried making chrome and IE my default browsers, everything works normal in IE and Chrome. I changed associations and tried on both, chrome and IE, everything works normal.

then again associated or not, theres problem with firefox.

I am using Windows 8

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I don't believe them that anyone using threads, at least meaningfully. It's the same thing for Facebook, people just don't engage with Meta platforms like they are thinking. This isn't 2006.
    • Not taking AI slop on the go with me, hard pass for me.
    • Same Internet Archive seemed to grab the new version https://web.archive.org/web/20...d/Setup_MakeMKV_v1.18.4.exe Here's the link to an additional file it periodically downloads https://web.archive.org/web/20260213092148/https://www.makemkv.com/sdf.bin I think update's keys, etc. To manually trigger this update, put the sdf.bin file in the root of where the program is installed. When you launch the program it will pick up the file and import it. Typically put it here: C:\Program Files (x86)\MakeMKV\sdf.bin
    • Windows 11 KB5094126, KB5093998 bugging out Office apps but it may not be Microsoft's fault by Sayan Sen Microsoft last week released Windows 11 KB5094126 and KB5093998 as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. Although the tech giant did not acknowledge any major problems, some users online reported various issues ranging from OneDrive and Dropbox access problems, BitLocker recovery lockouts, to blue screens and BSODs. You can read about them in this dedicated piece. While there is still no confirmation about those problems from Microsoft the company has admitted to another bug which we did not report on. The tech giant has confirmed it has received reports of an issue in which certain third-party applications may be unable to launch Microsoft Office apps or open Office documents after installing the Patch Tuesday. This affects both Windows 11 as well as Windows 10. The company says the problem impacts a subset of applications that rely on OLE (Object Linking and Embedding) automation to communicate with Microsoft Office programs. According to Microsoft, affected scenarios involve third-party software attempting to open Office applications or documents from within their own interface. In such cases, the Office program may fail to launch altogether, or the requested document may not open. Oddly there may not be any error message, which probably makes the issue difficult to diagnose. The bug affects several Office products, including Word, Excel, PowerPoint, Access, and other apps in the Microsoft Office suite when they are launched through the affected software. These include tax and accounting software such as CCH Engagement and Workpaper Manager, dental practice management solutions like Dentrix and Softdent, as well as the popular research and reference management tool Zotero. Microsoft adds that other applications using similar Office integration methods could also experience the same problematic behavior. To understand the issue it is important to look at OLE, the Microsoft technology involved. OLE allows different applications to work together and share data, while its Automation feature lets one program control another. Thus this enables third-party software to launch Microsoft Office apps, open documents, and perform tasks automatically without requiring users to switch between programs. Because many accounting, healthcare, research, and business applications rely on OLE automation to interact with Word, Excel, PowerPoint, and other Office apps, any disruption can break those workflows. As a result, affected software may be unable to open Office documents or launch Office applications even though the programs themselves continue to work normally. At the moment the company has not provided a permanent fix though it has confirmed that engineers are actively working on a resolution, which will be delivered through a future Windows update. As such additional details will be shared once more information becomes available. In the meantime, Microsoft recommends a simple workaround for affected users whic is to open the Office application or document directly rather than launching it through the third-party program. For enterprise customers and organizations managing larger deployments, Microsoft says an additional mitigation is available. Admins experiencing the problem on their managed devices are advised to contact Microsoft Support for business to obtain and apply the workaround.
    • It saddens me when cars are such dull colours now. Mine is bright metallic blue and I absolutely adore it for standing out in contrast to that depressing backdrop of traffic.
  • Recent Achievements

    • Reacting Well
      Dys Topia earned a badge
      Reacting Well
    • Conversation Starter
      NovaEdgeX earned a badge
      Conversation Starter
    • One Year In
      Console General earned a badge
      One Year In
    • Week One Done
      Twozo Technologies earned a badge
      Week One Done
    • One Month Later
      Twozo Technologies earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      517
    2. 2
      +Edouard
      184
    3. 3
      PsYcHoKiLLa
      106
    4. 4
      Steven P.
      88
    5. 5
      ATLien_0
      68
  • Tell a friend

    Love Neowin? Tell a friend!