Jump to content

Firefox google ads replacement malware?


Recommended Posts

Hi,

 

I believe I got infection in my PC now.   Win 8.1 pro 64 bit

The problem so far found on Firefox (30.0) only.   Firefox has Ad Block Plus plugin installed

 

  • When browsing site that have google ads banner (I live in japan so I expect to see some Japanese site ads) ,
    the banners will be replaced into some Russian or greek language ? banner
    post-169317-0-78374100-1405645313_thumb.

    with same sites, browsing with IE or chrome get correctly google ads banner.


     
  • When browsing site that don't have  google ads banner,  warning popup may be shown.  firefox may freeze after popup shown
    post-169317-0-48979900-1405645312_thumb.
    and it always re-pop after click stop script or continue

     
  • I tried to scan with Malwarebytes Anti-Malware (Free edition) , it always found PUP.Optional.Delta.A at "C:\Users\my name\AppData\Roaming\Mozilla\Firefox\Profiles\bevxfsct.default\prefs.js"
    (after saw replaced banner in firefox)​​
  • Scan with Avast (Free), AVG (Free), Windows Defender returned nothing much .....

 

Thank you in advance for any help.

 

Best regards,

 

Anuwat

 

 

FRST file here
FRST.txt

Addition file here
Addition.txt

 

 

 

 

Link to post
Share on other sites

  • 4 weeks later...
  • Staff

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.