It's like a plugin virus, but it's external... however, firefox is all it seems to affect.
XP Pro, DELL Latitude D520, Duo... 2 gig RAM, and plenty hdd, stock video chipset (naturally -.-)
After much scouring... i have run into a program on my drive called MRT.exe coupled in the same folder with a MRTSTUB.exe (not case sensative)... I never use iexplore, and immediately remove it from my machine shortly after any fresh installation of XP, and download firefox... other than that, the other things i do online are not likely to have allowed this in, and hijackthis seems to refer to it as a BHO... it came in through firefox guys... it records input, manipulates other programs (firefox), has no visible window and no log in the process manager... however, procedes to take up huge portions of page file memory. Naturally while on firefox... it reroutes me every chance it gets to one of those stupid search pages providing "enhanced searchability for the EXACT product,concept,idea,question that i am looking for -.-" just thought you guys might wanna know... mr t. funny guy -.-
''(Below content copied from [/questions/778647] - TonyE)''
This is a continuation of the last post I had up, it is basically a web site redirect virus that seems to pull up a new window at various times, or while I click on several google searches will intermitantly redirect me to a tizag.com website, or other various search falsity websites...
After several hours of work put into trying to find this bug, removing smaller useless bugs from my system, and so on... I still have the bug on the computer... Now I have taken the liberty of running a process analyzer and stopping the analyzer once the bug started affecting my google, and have a dump of all the processes running, firefox related (since it redirects me it must reach into the firefox.exe process somewhere along the line), and would like to share that with you.
I posted it in the troubleshooting section as it won't fit into this section... and i don't have a troubleshooting information option in my help menu anyhow.
If you can help me figure out which process is being performed here that is unusual as far as firefox content goes, I can search through the memory stacks of those processes and trace this bug back to it's origin... helping myself and you guys in the future.
SECOND HALF:
04:54:09,6170592 firefox.exe 2636 CreateFileMapping C:\WINDOWS\system32\MSIMTF.dll SUCCESS SyncType: SyncTypeOther
04:54:09,6171930 firefox.exe 2636 CloseFile C:\WINDOWS\system32\MSIMTF.dll SUCCESS
04:54:09,6197042 firefox.exe 2636 WriteFile C:\Documents and Settings\Owner\Local Settings\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\Cache\_CACHE_001_ SUCCESS Offset: 979 712, Length: 464
04:54:09,6444761 firefox.exe 2636 LockFile C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\content-prefs.sqlite SUCCESS Exclusive: True, Offset: 1 073 741 824, Length: 1, Fail Immediately: True
04:54:09,6446292 firefox.exe 2636 LockFile C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\content-prefs.sqlite SUCCESS Exclusive: False, Offset: 1 073 741 826, Length: 510, Fail Immediately: True
04:54:09,6447773 firefox.exe 2636 UnlockFileSingle C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\content-prefs.sqlite SUCCESS Offset: 1 073 741 824, Length: 1
04:54:09,6449999 firefox.exe 2636 QueryOpen C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\content-prefs.sqlite-journal NAME NOT FOUND
04:54:09,6451782 firefox.exe 2636 QueryStandardInformationFile C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\content-prefs.sqlite SUCCESS AllocationSize: 8 192, EndOfFile: 7 168, NumberOfLinks: 1, DeletePending: False, Directory: False
04:54:09,6454503 firefox.exe 2636 ReadFile C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\content-prefs.sqlite SUCCESS Offset: 24, Length: 16
04:54:09,6456271 firefox.exe 2636 UnlockFileSingle C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\content-prefs.sqlite SUCCESS Offset: 1 073 741 826, Length: 510
04:54:09,6469113 firefox.exe 2636 LockFile C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\signons.sqlite SUCCESS Exclusive: True, Offset: 1 073 741 824, Length: 1, Fail Immediately: True
04:54:09,6470602 firefox.exe 2636 LockFile C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\signons.sqlite SUCCESS Exclusive: False, Offset: 1 073 741 826, Length: 510, Fail Immediately: True
04:54:09,6472061 firefox.exe 2636 UnlockFileSingle C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\signons.sqlite SUCCESS Offset: 1 073 741 824, Length: 1
04:54:09,6474053 firefox.exe 2636 QueryOpen C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\signons.sqlite-journal NAME NOT FOUND
04:54:09,6475706 firefox.exe 2636 QueryStandardInformationFile C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\signons.sqlite SUCCESS AllocationSize: 12 288, EndOfFile: 11 264, NumberOfLinks: 1, DeletePending: False, Directory: False
04:54:09,6477201 firefox.exe 2636 ReadFile C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\signons.sqlite SUCCESS Offset: 24, Length: 16
04:54:09,6479226 firefox.exe 2636 UnlockFileSingle C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\314qtu41.default\signons.sqlite SUCCESS Offset: 1 073 741 826, Length: 510
04:54:09,6489971 firefox.exe 2636 QueryOpen C:\WINDOWS\system32\MSIMTF.dll SUCCESS CreationTime: 14.04.2008 07:00:00, LastAccessTime: 22.01.2011 04:54:09, LastWriteTime: 14.04.2008 07:00:00, ChangeTime: 26.09.2009 19:55:19, AllocationSize: 159 744, EndOfFile: 159 232, FileAttributes: A
04:54:09,6491722 firefox.exe 2636 CreateFile C:\WINDOWS\system32\MSIMTF.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
04:54:09,6493061 firefox.exe 2636 CreateFileMapping C:\WINDOWS\system32\MSIMTF.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE
04:54:09,6493192 firefox.exe 2636 QueryStandardInformationFile C:\WINDOWS\system32\MSIMTF.dll SUCCESS AllocationSize: 159 744, EndOfFile: 159 232, NumberOfLinks: 1, DeletePending: False, Directory: False
04:54:09,6493399 firefox.exe 2636 CreateFileMapping C:\WINDOWS\system32\MSIMTF.dll SUCCESS SyncType: SyncTypeOther
04:54:09,6494751 firefox.exe 2636 CloseFile C:\WINDOWS\system32\MSIMTF.dll SUCCESS
04:54:09,6500151 firefox.exe 2636 QueryOpen C:\WINDOWS\system32\MSIMTF.dll SUCCESS CreationTime: 14.04.2008 07:00:00, LastAccessTime: 22.01.2011 04:54:09, LastWriteTime: 14.04.2008 07:00:00, ChangeTime: 26.09.2009 19:55:19, AllocationSize: 159 744, EndOfFile: 159 232, FileAttributes: A
04:54:09,6501802 firefox.exe 2636 CreateFile C:\WINDOWS\system32\MSIMTF.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened
04:54:09,6503090 firefox.exe 2636 CreateFileMapping C:\WINDOWS\system32\MSIMTF.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE
04:54:09,6503204 firefox.exe 2636 QueryStandardInformationFile C:\WINDOWS\system32\MSIMTF.dll SUCCESS AllocationSize: 159 744, EndOfFile: 159 232, NumberOfLinks: 1, DeletePending: False, Directory: False
04:54:09,6503411 firefox.exe 2636 CreateFileMapping C:\WINDOWS\system32\MSIMTF.dll SUCCESS SyncType: SyncTypeOther
04:54:09,6504746 firefox.exe 2636 CloseFile C:\WINDOWS\system32\MSIMTF.dll SUCCESS
04:54:09,6588123 firefox.exe 2636 Thread Exit SUCCESS Thread ID: 3540, User Time: 0.0000000, Kernel Time: 0.0000000
04:54:09,6602960 firefox.exe 2636 RegOpenKey HKLM\Software\Speedbit\Download Accelerator SUCCESS Desired Access: Query Value
04:54:09,6603373 firefox.exe 2636 RegQueryValue HKLM\SOFTWARE\SpeedBit\Download Accelerator\Log SUCCESS Type: REG_DWORD, Length: 4, Data: 0
04:54:09,6603714 firefox.exe 2636 RegCloseKey HKLM\SOFTWARE\SpeedBit\Download Accelerator SUCCESS
Similar Messages
-
I downloaded new Firefox but now can't open Firefox at all. It says it is not supported on my system. How can I get the earlier version which I deleted?
http://www.mozilla.com/en-US/firefox/4.0/system-requirements/ <br />
Mac
Operating Systems
* Mac OS X 10.5
* Mac OS X 10.6
Recommended Hardware
* Macintosh computer with an Intel x86 processor
* 512 MB of RAM
* 200 MB hard drive space
For older Macs that aren't supported in Firefox 4.0, try TenFourFox for PowerPC's running Mac 10.4.11 & 10.5.8 . <br />
http://www.floodgap.com/software/tenfourfox/ -
I was infected by a virus (i can't remember the virus name). Antivirus removed it, but i think it changed some config file on FF, 'cause every time i try to restart it , i find it configured to use proxy 127.0.0.1:64727. I change every time the config, i also tried to change the config on the about:config and set network.proxy.type 5 , no port and no network proxy (so it's all on default) . I changed the config on the gui, i removed the config from windows registry ( IE and chrome start normally, with no proxy), but every time i restart FF i find the proxy config there. How can i fix it ?
I had the same problem.
Solution
'''Clear Virus First'''
-clear virus using either anti-virus or manually going into task manager and figuring out which processes are bad.
-If the manual way, go through each process in task manager and right click to "open file location". Depending on where it is located and the name of the process, you can google the process name online to see if it is bad.
-Delete the bad process file and as added security, create a folder using the name of the process so the file can't be recreated later. (example: If I had a virus "3dcr.exe" in folder c:\user, then delete "3dcr.exe" and create a new folder c:\user\3dcr.exe\ )
'''Fix Proxy Settings'''
-If your browser points an proxy server and you can't change the settings because every restart of firefox returns the settings back (even after changing in about:config or prefs.js or options>advanced>network>settings). The answer is to uninstall firefox with all its user preferences and the reinstall it.
*I know it is a bit brute force, but it was the only method I found to work. Just be sure to save your bookmarks first. -
My iPhone 4 has been disabled and it went to the "Connect to iTunes screen."
At first, iTunes told me to unlock the phone before I could use it in iTunes.
Until, I turned the phone off, pressed and held home while plugging the USB cord back into my device and now my phone is at the "Connected to iTunes screen."
However, it is not coming up in my iTunes and I have no idea what to do.
If there is anyway that any of you know how to keep all your data but restore or reboot your phone, I'd love to hear from you.
Regardless, I need to undisable my phone!! HELP! Please and thank you!You need to force the phone into recovery mode, as described here, & restore it:
http://support.apple.com/kb/ht1808
Sorry, you've already lost all data on your phone. -
Like many others, I've been having issues with firefox since the update. The plugin container seems to crash my browser, or freeze the whole of my computer, and I must restart. I've switched to internet explorer for now.
Moreover, now Firefox doesn't even seem to open now. I doubleclick on the icon, or try to launch the browser in any way, and it looks like it thinks about opening, but nothing ever occurs. I've watched my system processes, and firefox.exe appears for a moment, and then disappears, like its process has ended, but I've done nothing.
Additionally, I can't even seem to uninstall firefox---the uninstall setup doesn't open, and trying to do it from add/remove programs on windows xp doesn't seem to work either.
I also sometimes get an error that says windows can't find a file/path, related to a 'profile' but haven't had that for a day or so---since I can't even open firefox now.
== User Agent ==
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)Hello sprytely, go for a clean re-install, this means you '''remove Firefox program files''' and then reinstall Firefox. Please follow these steps:
'''Note:''' You might want to print these steps or view them in another browser.
#Download the latest Desktop version of Firefox from the next full installer https://www.mozilla.org/en-US/firefox/all/ and save the setup file to your computer.
#After the download finishes, close all Firefox windows (click Exit from the Firefox or File menu).
#Delete the Firefox installation folder, which is located in one of these locations, by default:
#*'''Windows:'''
#**C:\Program Files\Mozilla Firefox
#**C:\Program Files (x86)\Mozilla Firefox
#Now, go ahead and reinstall Firefox:
##Double-click the downloaded installation file and go through the steps of the installation wizard.
##Once the wizard is finished, choose to directly open Firefox after clicking the Finish button.
More information about reinstalling Firefox can be found [[Troubleshoot and diagnose Firefox problems#w_5-reinstall-firefox|here]].
<b>WARNING:</b>Do not use a third party uninstaller as part of this process. Doing so could permanently delete your [[Profiles|Firefox profile]] data, including but not limited to, extensions, cache, cookies, bookmarks, personal settings and saved passwords. <u>These cannot be easily recovered unless they have been backed up to an external device!</u> See [[Back up and restore information in Firefox profiles]]. <!-- Starting in Firefox 31, the Firefox uninstaller no longer lets you remove user profile data.Ref: Bug 432017 and https://support.mozilla.org/kb/uninstall-firefox-from-your-computer/discuss/5279 [Fx31] Windows uninstaller will no longer offer the option to remove personal data -->
Thank you. -
i want to add an application like winrar useing rar file so i can auto download it all thet i have is a zip fill but i want a rar file too the option to auto download it is gray so i cant use it plz help me.
== This happened ==
Every time Firefox opened
== all the timeHere is the answer: Not an add on or plug-in! In fact you can get rid of all those useless plugins and add-ons! Go and get it. Im using the Alpha version right now and it works great. Works better then anything else .......add multiple links for all files sit back and relax. Its all done for you with no more intervention on your part! Check it out!
http://wordrider.net/freerapid/
Only one downside to this. No proper installer. You will have to copy the files to your respective programs folder.
C:\Program Files\FreeRapid or C:\Program Files (x86)\FreeRapid
Then create shortcuts to your desktop from FRD app. Thats it then start downloading!
By the way this not an add. I just spent the whole night looking for the solution to this problem because I was so frustrated with the whole thing. I download tons of files and I have lots of other projects going and I dont have time for all this nonsense with RapidShare and Firefox. Hope this helps some other poor souls out there! -
Same as above
I don't know why it says that I use firefox 4... When I check in my About window it says 18.
I do ignore the message about the plugins. But I've started to get a little bit annoyed that I have to move up and press the little x every time I navigate to a site that needs something like flash. It eats up the size of about two text rows... it feels so unnecessary that it's there. If I want flash I will install it... The browser doesn't have to inform me about it every time.
I really hoped for a better answer. Hopefully the firefox crew will add an option to not show that kind of messages in the future. -
Having trouble making a Facebook "Like Us" plugin look good.
Hello.
I'm having troulble getting a Facebook "Like Us" link to look good on a site I built. It seems that no matter where I insert the code for the plugin it just doesn't fit or look right.
Here's the site: http://friendsoflafayette.org/index.html
If I put the plugin in the rightside div it extends past the box. If I put in in the footer it isn't centered. As you can tell, I'm not a master with code and aren't sure how to make this fit properly. Ideally I'd like to put it in the rightside div but is there a way to line-break the text "American Friends of Lafayette" or somehow shorten the width to make it fit the div box? Alternately, how can I center the plugin in the footer so at least it looks presentable?
Any suggestions welcome.
Best Regards,
JohnIn code view, try changing this:
<div class="fb-like-box fb_iframe_widget" data-href="http://www.facebook.com/pages/The-American-Friends-of-Lafayette/168772073195787" data-width="292" data-height="200" data-show-faces="false" data-stream="false" data-header="false">
to this with an inline style noted in red:
<div class="fb-like-box fb_iframe_widget" style="margin-left: 35%" data-href="http://www.facebook.com/pages/The-American-Friends-of-Lafayette/168772073195787" data-width="292" data-height="200" data-show-faces="false" data-stream="false" data-header="false">
Nancy O.
Alt-Web Design & Publishing
Web | Graphics | Print | Media Specialists
http://alt-web.com/
http://twitter.com/altweb -
Hello, My I Mac is a 2008 unit. Quite offen it will not power on, mouse lights then it goes off with no screen even if i press control/command rp keys.
Some other information the unit is from USA, a 110V and now in Philippines which is 220V I have it on a 110 voltage regulator.(can i plug in to 220 v directly?) I also ran MacKeeper thinking it could be a virus, but its not, i notice if i leave unit on without shut down, the problem occurs less, thinking its a battery problem but I'm not sure.
Here in Philippines we have no Mac stores and service is not like in the USA. Any ideas of what wrong?MacKeeper is highly invasive malware that can de-stablize your operating system. It is also unethically marketed and a rip-off.
Further opinion on it and how to uninstall MacKeeper malware:
http://applehelpwriter.com/2011/09/21/how-to-uninstall-mackeeper-malware/
This is also worth reading:
http://www.reedcorner.net/news.php/?p=245
It sounds like a faulty power unit. You need to get it professionally checked. -
i updated my 4s yesterday, but my phone will not work at all now, and will not turn off. It has a itunes image on the screen with an arrow underneath and what looks like the charger lead. i've had it on charge! is there anything else i can do?
Cconnect it to your computer with the latest version of iTunes installed.
-
HI, I just got a Macbook Pro. It's great but my mail doesn't work at all. It will come up correctly, but take forever to download messages, then won't delete them, then won't save them to folders. Then when I go to quit mail it's like it gets stuck between quitting and not. I have to force quit, then restart my computer if I want to pull up my mail again. How can I fix this?
If you just got your new MBP you have phone support from Apple (which is quite good) call them. 800-692-7753 tell the automated answerer "mail technical support" you'll have human quite quickly. Hope this helps.
-
Using the mini hdmi cord to connect the macbook air and my tv I cannot seem to have anything appear or be heard on my tv.. the MacBook air will flash blue like it is connecting but nothing will seem to work Any advice?
Hi kxh3011,
Thank you for using Apple Support Communities.
This feature is called closed clamshell mode. To learn more about using closed clamshell mode with an external display and how to set it up, please take a look at the article below.
Mac notebooks: How to use your computer in closed clamshell (display closed) mode with an external display
Cheers,
Alex H. -
I have my a song purchased from Itunes and would like to use part of it for a ringtone and get all the way thur the process of getting it to my phone but it goes to sync to my phone it doesn't show up in my phone like it says it is suppose to under ringtones. Does anyone have any tips on how to do this.
http://osxdaily.com/2010/09/04/make-free-iphone-ringtones-in-itunes-10/
https://discussions.apple.com/message/17777381 - making a ringtone
Getting ringtones folder to show in iTunes - https://discussions.apple.com/thread/2629494 - iTunes > Preferences. Under the General tab below Show, confirm Ringtones is selected -
firefox plays video, but no sound. when I type about:plugins in location bar, it shows the firefox default plugin is not enabled. When I look at my plugins, it says it is enabled. I have uninstalled 3.6 and re-installed with the same result. Why do I have no sound. Computer plays I-tunes and all other sounds, just no web browser sounds.
Glad you seem to have sorted things out.
The warning about the warranty is light hearted, I think at one stage it warned "here be dragons" but also intended to make us think as it warns that making changes may produce problems. -
It has been over a week since I click to open mozilla and it won't. This has never happened before. I decided to uninstall it and install it back again to see if it would work, but a window pops up and says to close it. I can't get it to open it, so how can I close it?
It is probably not necessary to uninstall/reinstall.
Must be the "hang at exit" problem.<br /><br />
#Stop the Firefox process:
#*[http://kb.mozillazine.org/Kill_application Mozillazine - Kill application]
#*Windows 7 users click [http://www.techrepublic.com/blog/window-on-windows/reap-the-benefits-of-windows-7s-task-manager/2576 here]
#*Mac users: http://techheavy.com/2011/02/the-mac-task-manager/
#Why Firefox may hang:
#*[http://support.mozilla.com/en-US/kb/Firefox+hangs Firefox hangs] (see Hang at exit)
#*[http://kb.mozillazine.org/Firefox_hangs Firefox hangs (Mozillazine)] (see Hang at exit and Closing Firefox properly)
#*[https://support.mozilla.com/en-US/kb/Firefox+is+already+running+but+is+not+responding Firefox is already running but is not responding]
#Use Firefox Safe Mode to find a problem with an Extension or Plugin:
#*Don't check anything when entering Safe Mode, just continue
#*If the problem does not occur in Safe Mode it is probably and Extension or Plugin causing the problem
#*See:
#**[[Safe Mode]] and [http://kb.mozillazine.org/Safe_Mode Safe Mode (Mozillazine)]
#**[http://support.mozilla.com/en-US/kb/Troubleshooting+extensions+and+themes Troubleshooting extensions and themes]
#**[http://support.mozilla.com/en-US/kb/Troubleshooting+plugins Troubleshooting plugins]
#**[http://support.mozilla.com/en-US/kb/Basic+Troubleshooting Basic Troubleshooting]
'''If this reply solves your problem, please click "Solved It" next to this reply when <u>signed-in</u> to the forum.'''
Maybe you are looking for
-
I can't run powershell to install IIS and Application server... whats going on here?
PS C:\Windows\system32> Add-WindowsFeature -Name Application-Server,AS-Web-Support,Web-Common-Http,Web-ASP,Web-Includes, Web-CGI,Web-Asp-Net,Web-Net-Ext,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Http-Logging,Web-Request-Monitor,Web-Basic-Auth,Web-W indo
-
On a Leopard Server running 10.5.5, I am seeing frequent log entries every few minutes for one of my virtual hosts that look like the following: XXX.XX.XX.XX - - [15/Oct/2008:08:38:44 -0500] "OPTIONS * HTTP/1.0" 200 - XXX.XX.XX.XX - - [15/Oct/2008:08
-
Problems after efi 2.5 update on macbook pro 13 inch(mid 2010)
i don't know if it's related but after i updated my macbook pro 13 inch mid 2010 efi firmware to 2.5 i'm having usb problems. the problem started after i went to software updates and downloaded efi firmware 2.5, but i didn't restarted right away actu
-
HP 8500A Plus does not reconnect to computer after coming out of sleep mode for scanning.
I have my HP 8500A Plus connected via network to my iMac running 10.6.7. Once I "wake up" the printer from sleep mode it does not show connected to the computer for scanning purposes. It has no problems printing after "waking up", just can't scan f
-
HT201386 migrating from IPhoto to Photos
Since I accepted migrating from IPhoto to Photos, both applications gave up working and the quit as soon as I open them. Could you olease help me? Thank you!