FF4 OS X unidentified malware?

My firefox began to act very strangely. I'm not sure if all of these symptoms are connected to the possible malware.
1. During startup it would sometimes hang, and a script error would appear in the far upper left corner of my screen having to do with Zotero.
2. Shutdown would take forever, usually not complete, and require a force quit.
3. Eventually, during startup my last window would not appear until I did File->New Tab. Then it would spring up with all my old tabs in it.
Finally, in the last two days, I noticed these three things.
1. When I go to the "Extensions" pane in the Add-On Manager, it tells me there are no extensions installed, which is manifestly false, as I have many installed, and they're all still functioning. This made me think that this is the malware trying to cover its tracks.
2. Whenever I go to a non-https google.com domain, I get a 301 or 302 redirect error. If I click on the link there, I get redirected to my google search page without problem, or I get the error again, ad infinitum. While clicking on these links, I don't see any strange URLs appear, not even for an instance, unlike other google hijackers I know of.
3. As of today, I noticed a seemingly invisible window in the list of invisible windows.
Restarting in safe mode completely eliminated these behaviors.
Finally, I manually removed three unidentifiable extensions from my extensions folder. Two of them turned out to be Flashblock and Adblock Plus, but the other one must be the thing, because all of the above symptoms have immediately disappeared. I've saved those .xpis for future reference.

Lex's short reply does not quite cover all the bases....
You may find this User Tip on Viruses, Trojan Detection and Removal, as well as general Internet Security and Privacy, useful:
https://discussions.apple.com/docs/DOC-2435
The User Tip (which you are welcome to print out and retain for future reference) seeks to offer some guidance on the main security threats and how to avoid them.
Bear in mind that from April to December 2011 there were only 58 attempted security threats to the Mac - a mere fraction compared to Windows malware:
http://www.f-secure.com/weblog/archives/00002300.html

Similar Messages

  • Trojan Horse? -- "Don't ask me about buying music again"

    I'm really worried -- I clicked to buy a song from the itunes store and instead of downloading, a strange screen popped up reading something like: "Don't ask me about buying music again!" I did not click again, thinking I just opened up a trojan horse. I shut it down and began running my Norton Antivirus immediately. It's still scanning; no results yet.
    I'd appreciate a response from anyone else who has seen this or knows something about it. Thanks!

    Thanks for your help, B!
    I have Norton Internet Security 2006, fully updated, which is supposed to pick up on adware, spyware and the like. It found nothing.
    I also use "NoAdware," which caught a few adware items and an "unidentified malware" item (could've been it). I let it delete all of those things.
    I also let my Iolo System Mechanic 2006 do a complete clean-off, just for good measure, then re-started.
    I haven't had trouble since, but I'm still nervous about the message that popped up because it did not seem to be related to any sort of advertisement and no one seems to have encountered the problem before.
    Anything else I should do? Anyone else ever seen this?
    Thanks,
    WR

  • Is Flash 10,2,1559,1 compatible with FF4.0.1(18)

    Windows XP sp3 home editon
    Firefox4.0.1(18)
    I received notices last weekend ref updates to Adobe Flash and Firefox. I downloaded both and the problems began. My computer started to hang  and freeze up and only hard reboot would let me back on. Biggest problems were in Facebook. Cursor hangs so I can't scroll even on home page. Started knocking me out of games or hanging up completely I saw a suggestion on your forum to go back to FF3.6.17 so I did. Then it would not even let me load any games. Had problems even getting on Facebook. I do love to play games on FB and Pogo.
    Is there anything else I can try? Any fixes? Firefox says the issue is with Adobe, and Adobe told me the other day it was the new FF4. Should I try a different plugin? If so, do you know of one and how I can get it? Sorry to sound so stupid, but, I'm not computer savvy.
    Maybe someone who uses FF4 and FP10 will have had issues to and already figured it out.
    Thanks so much for any help you can give.

    eidnolb said he had company and to follow instructions from Pat, which  I think is you?
    He asked if I had done request you sent me and I replied and I told him I did not know Pat's email log in name so no. I am so sorry, but I don't know what you asked me to get and send back to you.
    Since I just realized now that you are probably Pat and I had no idea who Pat was, I didn't perform or do any of his request because the subject line was different most of the time. Then eidnolb sent me an email and told me to ONLY reply and do requests received from him or Pat. He told me he would be unavailable most of this week and Pat would handle my problems.
    Would you possibly be able to either send your request again or direct me to your email request so I can get you the information you have been waiting on? I am sorry for not taking any action, but I had no idea what Pat's email name was. When I received email from eidnolb today asking if I had replied to you yet, I immediatley emailed back and asked who Pat was but I have gotten no reply. I guess he had left for the day.
    Thanks so much for putting up with my many questions. As I told eidnolb, I am not computer savvy at all.
    I did find a email from him asking me to go to regedit.exe and navigate to Key_HKEY_LOCAL_MACHINE\software\Microsoft\INTERNET Explorer\Active X Compatibility\(D27CDB6E-AE6D-11CF-96B8_44455354O00). I checked and there is no such Key showing. He also said if a DWORD w/name Compatibity Flags with any value other than 0x000000 kill bit for Flash maybe set.
    The only entries listed seem to apply to my Malware download. I found 2 entries named Newvalue #1-REG_DWORD with same number Ox00000000(0). Is this what you need? If not, please tell me how I can find the correct entry in the registry. I am not sure how to navigate in the registry, but I followed his instructions perfectly and the above is all I found. Sorry again if I am not looking in the correct place.
    I will wait for your reply before proceeding any further.
    Thank you very much for your patience.
    tcenters

  • Can't open FF4, and I get a Vista Home Security 2011 error message

    I downloaded FF v4 on my Dell laptop running Vista. FF worked fine, so I downloaded Aniweather, Forecastfox weather, and something else that I can't find now all from the Mozilla website.
    I tried to adjust the weather to my locale from the default New York City. Then everything went to crap. I got a pop-up from Vista Home Security 2011 that ran a scan, then told me I had 31 infections of Malware and trojans. Then it told me I had to subscribe to it's services to remove the infections.
    Then I tried to open FF4 and nothing happened. So I tried to open Internet Explorer and it won't open either. The Vista Home Security keeps popping up and acts like a trojan, so I haven't done anything with it. How can I find and remove everything I downloaded from Mozilla?

    Vista Home Security 2011 is a rogue application. Try running several malware scanners to ensure your computer is not infected. It is best to run several as each will pick up things that the others miss. Some scanners you can try are:
    * Malwarebytes - http://www.malwarebytes.org/mbam.php
    * SuperAntiSpyware - http://www.superantispyware.com
    * Ad-Aware - http://www.lavasoft.com/products/ad_aware_free.php
    * Windows Defender - http://www.microsoft.com/windows/products/winfamily/defender/default.mspx
    * Spybot S&D - http://www.safer-networking.org/en/home/index.html

  • Won't convert files, unidentifiable error

    I am trying to combine word files into one PDF, I've done this many times in the past.  Now it says there is an unidentifiable error
    I get a message that says "Missibg PDFMaker Files"
    Now I get a message that says "network resources unavailable"  Error 1706  I need to access "AcroStan.msi"  I don't know what any of this means

    We don't know that you have malware. I just think it's important that you find out what broke your copy of Acrobat (unless a small child had five minutes alone with the computer, that will do it...)
    Most malware is caught by antivirus software, try a scan.

  • Cannot get Toolbar with FF4 other than by pressing Alt button, have tried all methods suggested, also cannot get it to open in Safe Mode.

    Since downloading FF4 to replace 3.1.6 I cannot get the Toolbar other than by pressing the Alt button and whilst this shows the toolbar it will not stay. I have followed the Firefox instructions, other than opening in Safe Mode which it will not do either ,none of which have cured the problem. I am using Vista, with Trend Anti Virus and also have IE8 which is working OK.

    Hi collizz, welcome to the forum,
    if you have access to another computer I suggest you download Kaspersky Rescue Disc and create a bootable cd, below is a link to a knowledgebase article where you can download it and also find out how to use it.
    http://support.kaspersky.com/faq/?qid=208282173
    Good luck.
    p.s. moving to Security and Malware board.
    Andy  ______________________________________
    Please remember to come back and mark the post that you feel solved your question as the solution, it earns the member + points
    Did you find a post helpfull? You can thank the member by clicking on the star to the left awarding them Kudos Please add your type, model number and OS to your signature, it helps to help you. Forum Search Option T430 2347-G7U W8 x64, Yoga 10 HD+, Tablet 1838-2BG, T61p 6460-67G W7 x64, T43p 2668-G2G XP, T23 2647-9LG XP, plus a few more. FYI Unsolicited Personal Messages will be ignored.
      Deutsche Community     Comunidad en Español    English Community Русскоязычное Сообщество
    PepperonI blog 

  • Since FF4, FF has been slow on start-up or doesn't at all.

    This started since I upgraded to FF4. Last night I closed firefox to try something. I got on this morning, clicked the icon in my tray and it wouldn't load. Literally 5-10 minutes and it didn't open. I clicked again and it said it was already running. I end the process then click again and it opens in like 10-30 seconds with none of my tabs restored. I then tried shutting my laptop down then starting it back up. After leaving it alone for a couple minutes, I clicked the icon again and same thing, wouldn't open. What is causing this?

    This is the forum for Intel based iMacs. You need to be posting in the iMac G5 forums for your G5 and the Powerbook forums for the Powerbook.

  • I opened the attachment on a malicious email in error on my IPad and have been informed by the genuine company that it will download malware software. Is this possible on my IPad or is there a way of running a security scan to see if it has been infected?

    I received an email that I now know to be malicious and inadvertently opened up the attachment on my IPad that I've been informed will download malware or a virus. Can my IPad be infected this way or does anyone know if there is a way of running a security scan to check if there is a problem? I do have the most up to date IOS software installed.

    There is no anti-malware for iOS, at least none that actually does anything useful. The odds of getting any malware infection via an email attachment on an iOS device is quite low - practically non-existent. Unless you are seeing any issues, there isn't much to do, other than deleting the email and being more cautious in the future.

  • Acmcneill1ug 14, 2014 7:16 AM I have IMac OSX 10.9.4, 4GB,Processor 3.06 with Intell2Duo. I would like to check for Malware. I run a TechTool Pro 6 every month and that comes up great. When check how much memory I am using, with only Safar

    Acmcneill1ug 14, 2014 7:16 AM
    I have IMac OSX 10.9.4, 4GB,Processor 3.06 with Intell2Duo. I would like to check for Malware. I run a TechTool Pro 6 every month and that comes up great.
    When check how much memory I am using, with only Safari open I am using 3.9 and more of her 4.0 memory. She is very. very slow in processing. I had 4000
    trash to clean out and it took her over an hour to expel. Also for some reason Safari will not allow me to click on a link, in my G-mail, and let it go to the page.
    It has a sign saying a pop-up blocker is on and will not let me do it. I must open the stamp to look at my e-mails and if I have redirected link now I can do it.
    I have not changed my preferences so where is this pop-up blocker?
    I have looked at preferences on Safari and Google, which I do not understand Google, and do not see where this blocker could be.
    Malware is something I want to make sure is not on my computer. Tech Tool Pro 6 is all I know of and it does not detect Malware.
    Help.
    Ceil

    Try Thomas Reed's Adware removal tool. He posts extensively in the communities.
    Malware Guide - Adware
    Malware Discussion

  • Can't read or write some files, internet is failing, youtube won't load, software I tried to install was in Slovenian, not dutch or english like in my systempreferences settings, pictures and files won't preview with spacebar, etc. Malware?

    Specs:
    iMac 10.8.5
    3,4 GHz Intel Core i7
    32 GB 1600 MHz DDR3
    Can't read or write some files, internet is failing, youtube won't load, security software I tried to install was in Slovenian, not dutch or english like in my systempreferences settings, pictures and files won't preview with spacebar and are randomly corrupted, when I entered something in the Youtube searchbar (when it was still working) it send me to a site with sexadds.
    I tried restart my iMac and when I was logged back in, my dock preferences were reset.
    Also tried to download some security software to check my Mac for malware, but when I did, I tried several, I got a notification that said something like 'dumpfiles (don't know if this is the right translation...) damaged'.
    I'm taking screenshots from all the weird notifications I get and even three quarters off the screenshots I took in the last three hours are already unreadable.
    It started this morning when I tried opening a Premiere Pro file on which I worked the night before.
    When I tried opening it, it said the file was damaged and could not be openend.
    I tried opening it with AE or importing the file in a new project but nothing helped.
    When I tried looking for autosaves, this is the really weird part, there were none.
    Even though there are autosaves from my other projects, this one was completely gone.
    It looked like the day before never happened on my computer.
    Also when I openend Premiere all the recent projects had been wiped.
    So at first I thought it was a Premiere Pro failure.
    But than, later on the day, I tried loading some RAW files from my compact flash card.
    This is where I would get an error (error -36) which said some data cannot be read or written.
    I tried importing the files with a view different technics, from dragging to importing via Lightroom and I succeeded with Image Browser.
    But when I tried moving the files to an other folder the same error occurred.
    While dealing with this issue I wanted to put on some soothing music on youtube.
    This is when the next weird thing occurred: youtube wasn't completely loading in Chrome. I refreshed a view times, checked the internet connection and still no difference.
    When I tried in Safari it did work but when I clicked enter on the searchbar in Youtube, a page with sexadds appeared (I didn't install AdBlock in Safari...).
    I read about this 'phishing' where you are redirected to a site were a possible malware installment can take place...
    I don't know if it's connected to any of the problems I've been having but I just never experienced this on a mac, I have been a Mac user for 10 years now.
    On top of it all, internet started working worse and worse and now it's not even working at all. I had to fill in the password over and over, normally it remembers.
    Just like my system preferences, all the preferences I had with Chrome where also reset.
    Also somewhere in between I got this notification: Mac OS X must restore library to run programs. Type your password to allow.
    To me this is all very weird and suspicious. I have clearly no idea what's going on. Could this be another sort of trojan horse or malware?
    Some background info which could be helpful for solving this mystery:
    two months ago the one year old Fusion Drive in my iMac just broke out of nowhere.
    I got it replaced by a qualified apple repair store.
    When I got my computer back, all the files where gone.
    I got on the internet without AdBlock installed yet.
    A game or whatever it was, can't clearly remember, got installed by accident.
    I deleted it immediately.
    Only two weeks later, I couldn't log in to my account. It didn't recognize my password and username. 
    So I brought my mac back to the store.
    Here the repair guy said it was a minor thing and he just needed to reconnect my account. He also mentioned he found a downloaded game name Sparta and it probably had something to do with the error.
    I asked him; could it be a virus? He replied no way.
    I don't know why I couldn't be a virus, just because it's a mac doesn't mean it cannot be done.
    So today I tried installing anti virus software (such as avast- was in a weird language looked like slovenian, clamxav - was in slovenian) but I couldn't install them.
    PLEASE help me! I don't know what to do anymore, I work fulltime and I need my computer, I have no time to bring it in for repair, are there other perhaps easier ways?
    Could this be the work of a virus or a malware? Or is it a disk permissions issue?

    It sounds like you may have multiple problems, but none of them are likely to be caused by malware.
    First, the internet-related issues may be related to adware or a network compromise. I tend to lean more towards the latter, based on your description of the problem. See:
    http://www.adwaremedic.com/kb/baddns.php
    http://www.adwaremedic.com/kb/hackedrouter.php
    If investigation shows that this is not a network-specific issue, then it's probably adware. See my Adware Removal Guide for help finding and removing it. Note that you mention AdBlock as if it should have prevented this, but it's important to understand that ad blockers do not protect you against adware in any way. Neither would any kind of anti-virus software, which often doesn't detect adware.
    As for the other issues, it sounds like you've got some serious corruption. I would be inclined to say it sounds like a failing drive, except it sounds like you just got it replaced. How did you get all your files back after the new drive was installed?
    (Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

  • Malware no Firefox 20.01 , como corrigir?

    Um malware se instalou no meu firefox, versão 20.0.1. Não consigo identificá-lo nos plugins, também já fiz uma varredura com o avast, e não resolveu o problema. O malware faz com que apareça janelas de verificações de plugins e outros pop-ups. Identifique este mesmo malware no Google Chome, mas consegui resolver o problema, já no firefox não. Pensei em desinstalar o firefox e instalá-lo novamente, mas não consegui, isso pode ser devido ao malware? Como faço para desativá-lo?
    a malware has been installed on my firefox, 20.0.1 version. I can't identify it on plugins. I've scanned with avast, but the problem was not resolved. The malware pop ups windows with verification plugins and another information like it. I can not unistall the firefox. How can I correct this problem?

    Consegui resolver o problema. Caso alguem também venha a ter
    O malware neste caso chama-se '''FindLyrics''', ele é um complemento. Consegui removê-lo no "Adicionar/Remover" no painel de controle.
    I managed to resolve the problem. If someone comes to have the same problem: the badware calls '''FindLyrics''', it's a expansion. I could to unistall on the control panel.

  • My system failed the anti-phishing/malware test. What can I do to fix it? I have Firefox 7.

    I use the up to date version of AVG security. Does this interfere?

    Firefox does not send e-mails to random users. You only receive mail when you have registered on some official Mozilla e-mail list. Normally these are scam e-mails. They try to scare you and say that you are infected with malware. Then afterwards you are offered a so called "security update" which in reality will infect you computer with a virus. Do not install a fake update.

  • I have firefox 4 beta on Windows XP - do I need vista or W7 to have that orange menu button on the left? on my notebook with Vista FF4 looks different than on pc with XP - why?

    what do I have to do to have that orange button in FF4 on Win XP?

    Right-click the Menu bar ''(File, Edit, etc)'' and click on the Menu bar item in that Context menu, so the check-mark is gone.

  • How to install elements 9 on a mac book pro? i click install icon but cannot start because it sais that is from unidentified developer

    how to install elements 9 on a mac book pro? i click install icon but cannot start because it sais that is from unidentified developer
    any suggestions?

    Mac Unidentified Developer Issue
    Here's how to open apps that apple should not be blocking: 
    http://www.imore.com/how-open-apps-unidentified-developer-os-x-mountain-lion

  • I think I might have a virus or malware

    I know that the likelihood is very slim that I have a virus but I have been having some problems lately. Earlier I had my laptop on and then I closed it and when I opened it back up and typed my password in it kept saying it was wrong. I even checked to see if caps lock was on and it was not. I had to restart my laptop for it to work. I also opened firefox today and it said that it was the first time I used it when it was not. The "you have never used this application before." message popped up. My Internet has also been slow. Graphics/images have not been loading on the Internet or they're pixilated and take a long time to become the resolution the image is at. I also have been having trouble with charging. I will leave it unplugged and then I'll charge it but it will say "battery not charging" but it is plugged in and it shows that it is plugged in it is just not charging but it is still not decreasing in battery power. If it is not a virus what is it and how could I stop these glitches from happening? Thank you.

    Hi...
    Doubtfull it's a virus or malware.
    "battery not charging" but it is plugged in and it shows that it is plugged in it is just not charging but it is still not decreasing in battery power
    Try troubleshooting the MagSafe adapter
    If that didn't help, try Resetting the System Management Controller (SMC)
    And since there are numerous issues, the startup disk may need repairing.
    If you have Lion v10.7 insatlled, use Lion Recovery to repair the startup disk or reinstall the Mac OS X.
    If you have a prior Mac OS X installed, help here > Using Disk Utility to verify or repair disks
    And make sure there's enough free space on the startup disk.  Right or control click the MacintoshHD icon on your Desktop.
    Click Get Info. In the Get Info window you will see Capacity and Available. Make sure there's a minimum of 15% free disk space.

Maybe you are looking for