Firefox popup problem no one can solve

In the past few months I've had a problem I've never seen in FF 26 and 27. Windows 7, HP Compaq.

These are zero bite dialogue boxes, nothing ever downloads, no ads. It doesn't happen in IE or chrome. It isn't similar to the threads listed above.

I did everything in the Firefox forum, then did a procedure in the malware forum here.

It's become more pronounced recently, if anything.

Here's the Firefox thread

https://support.mozilla.org/en-US/questions/985787?esab=a&s=&r=0&as=s

The Major Geeks Malware forum.

http://forums.majorgeeks.com/showthread.php?t=283932

I'll post 2 old and 2 new screenshots if anyone would like to take a crack at this. Thanks in advance

older

http://s14.postimg.org/wzluoefch/strange_1.png
http://s14.postimg.org/kts209b8x/strange_2.png

new

http://s14.postimg.org/rzjt2pkc1/strange_3.png
http://s14.postimg.org/u2u8adk4x/Strange_4.png

 

Thanks for any help. I just cited the threads rather than say what I tried, because I tried everything I found suggested at Mozilla support.

 

I'm not sure what you mean. I've read I shouldn't try to open them with firefox because it will cause an endless loop.

Do you think I should try what you say?

 

http://googleads.g.doubleclick.net/...&p=http://forums.majorgeeks.com&pfi=8&dtd=618

I got one on this page. Hit open with firefox which is one of the choices and got a download box of unknown time at zero bites. Couldn't get a screenshot of it, though.

Don't see an option to go into the file system.

 

Open with Firefox.exe just gives a small box in the download area (arrow) that says unknown time zero bytes like an endless download.

I have Adblock on other pages, it doesn't affect these popups.

 

Thanks. Already uninstalles with revo and reinstalled. I'll probably ignore them and hope FF fixes the bug.

 

Right then let's try a couple things.

Since you have already done complete uninstall/reinstall of FireFox, it would appear to have something to do with your OS or another program that is interacting with it.

Have you tried creating a new user profile and testing it on there?

Have you tried running the computer in Safe Mode W/Networking?


Going on from there, are you familiar with using AutoRuns?
Using AutoRuns, take a look around for anything suspicious looking. Feel free to post if you suspect it. Stick with simply using the check boxes to "disable" the item, rather than fully deleting it.

Check under the Browser Helper Objects and Browser Extensions. Alot of BHO's tend to get "hung" even after you think you fully removed it and it can cause alot of issues.

Try these steps and see what happens

 

Thanks for responding. The popups still happen under a different profile, but do not so far under safe/networking.

I can't figure out what to do with Autoruns, specifically how to identify Browser Helpers or Extensions.

Thanks for any further advice.

 

Still working good in safe mode w/network?

Please play around with it while in that mode for a while and attempt to replicate the issue. It will narrow down the field a ton based on that information.


Since you are not familiar with AutoRuns, please use Hijack This, obviously do not actually touch anything after the scan, but simply post the logs here for me to look at

http://www.majorgeeks.com/files/details/trend_micro_hijackthis.html

 

I did use it problem free in safe/networking mode, then didn't have a problem all night in regular.

Unfortunately, just got a few as soon as I opened some web pages tonight.

I'll go back to safe mode and see if I remain free of popups on problem pages.

Here's the hijack log.

Thanks again

 

Well. First things first. Do you really need all these AV type programs running? Even though you might "disable" them, alot of them continue running heh.
I would say try disabling everything as much as possible and see if anything changes. I know a couple of those will not run while in SMwN, which could explain why it continues while in Normal Mode.
Disable them and if it seems to be good, try re-enabling them one at a time to figure out which one, or possibly even having a combination that might cause this.

You may need to completely uninstall them. Several AV places actually have seperate "Uninstall Cleanup" tools for their products, because alot of the time a ton of leftover files are still loaded, but malfunction and therefore cause issues.


Let me know how it works out for you. There were a few other items that are... not really suspicious but more "unrecognized" to me. They could be legit though, so until we start digging any deeper, let's start with the simple/basic step to disable all the AV

 

Do you mean audiovisual programs? If you wouldn't mind being specific, I could see about disabling some things.

Thanks again.

 

Anti-Virus software is what I term all these types of things.

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Rocket Software\Rocket Mobile & Security Apps\RocketTime.exe
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe


Thats alot of different "protection" type softwares running at the same time. I know many are fine either by themselves, or in a combination... But when you have a bunch all running, it could cause alot of random things.

 

I only have Avast anti virus and an old Zone Alarm firewall. I've had those for ages. Rocket time is a small application to keep the clock accurate.

Super anti spyware is a malware detector. It shouldn't be running, I'll uninstall it. I'll see if there are some settings (Avast toolbar?) that shouldn't exist with my AVS. Thanks.

 

Seems like Avast AV, which I've had for years, was the culprit. I changed AVs to AVG and no popups.

Thanks for all the help!

 

Glad I could help =]