Mozilla Popups

Discussion in 'Malware Help (A Specialist Will Reply)' started by CubsnCards, May 27, 2005.

  1. CubsnCards

    CubsnCards Private First Class

    Has anyone else started getting popups on Mozilla? Don't know if this is the correct forum for this or not but is their anything to do if you have been getting them.
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Havn't had any problems out of mine or heard of any. If your having pop up problems then your most likely infected with some type Malware. If this is the case I would recommend starting general cleanup procedures.

    First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    After doing ALL of the above if you still have a problem:


    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  3. CubsnCards

    CubsnCards Private First Class

    well hmmmm I would have swore i was fairly clean (at least Ad aware had said so lol) but spybot found two items. Going back to the same page where I was getting the popup before I took off the two malware items is not yielding a popup now so LOOKS good.

    The items found were wild tangent and Mini-bug.

    As an inside I currently use the following recommended protections am I doing enuff:

    Spygate Personal Firewall
    AVG anti virus
    Spyware Guard
    Spyware Blaster
    SecureIt
    CCleaner

    Regularly run and update Adaware and Spybot. Have run HiJack this occasionally every month or tow using the recommended guides on MajorGeeks as a checker.

    Thanks for the help and further input.
     
  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    If you like you can attach a current HJT log just to confirm your clean. Its up to you though!
     
  5. CubsnCards

    CubsnCards Private First Class

    here's the log
     

    Attached Files:

  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

  7. CubsnCards

    CubsnCards Private First Class

    I actually am following that guide pretty much all the way. Only used Mozilla since I started with this computer and use all the other recommended spyware protectors/firewalls etc. Some stuff still slips in though.

    Maybe it was Dell they had my computer for the last week becuase my AC cord wasn't working maybe they went crazy lol.

    Thanks for the help.

    I ran the log through the help2go and it said to remove one thing so I removed it.

    Thanks greatly. Hadn't noticed to many problems but had noticed popups which were unusual on Mozilla so I'll keep an eye out to see if they come back.
     
  8. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Those websites are NOT 100% accurate so be careful what you remove!
     
  9. CubsnCards

    CubsnCards Private First Class

    will do thanks for the heads up. do you want me to post what was removed and see if I should reverse it with Hijack this?
     
  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    If I had to guess I would say it was the O18 entry below. This is legit, the file mshtml.dll refers to Microsoft HTML Viewer. Its a module containing HTML-related utility functions. Its part of MSIE and shouldnt be removed.

    O18 - Protocol: shell - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
     
  11. CubsnCards

    CubsnCards Private First Class

    hmmm you do this stuff before lol
     
  12. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Everyday, All day! LOL! :p
     
  13. CubsnCards

    CubsnCards Private First Class

    Ok its restored and thank you very much for all your help. When I go to my mother's house again I hope you have the day off last time Ad Aware only found 300 entries this time I'm gonna try to really get it clean, lol.
     
  14. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Yeah, thats not good! lol

    When your ready and can get to it we will be here.

    Browse Safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds