Jump to content

Recommended Posts

Hello everybody,

I went to disinfection because I could not access the administration page of my box in authenticated mode.

I first went to the operator, they could bring me the authentication back on Internet Explorer, but I still cannot use it on Firefox.

AdwCleaner found nothing.

ZhpCleaner cleaned about 100 points.

ZhpDiag3 still found ten points.

Any advice ?

System is Windows 10 64 bits 1809, version 10.0.17763.437

ZHPDiag.txt

Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.
Click Attach this file.
Click the Add reply button.
===

Please post the logs  for my review.

Wait for further instructions
===

Link to post
Share on other sites

Hello, thank you for your help.

I already downloaded FRST64.EXE in last December, I presume I can use the same and execute it again ?

Here is FRST.ZIP containing FRST.TXT and Addition.txt

In case it arises a false positive as was the case with Zhp, I mention that I developed a program by Sopra, that uses a webbrowser component to display the list of ASCII characters, or receive an ASCII code to send the corresponding character to the clipboard. It is named WinKeyb. That helps cope with all those laptops that do not provide the Alt + numeric keypad functionality any more.

 

 

frst.zip

Link to post
Share on other sites

Hi,

Nothing suspicious was found in your logs.

Firefox may have been compromised.

Remove and re-install Firefox

Before proceeding save your Bookmarks. (Export)
https://support.mozilla.org/en-US/kb/export-firefox-bookmarks-to-backup-or-transfer

Firefox Password manager - Import your passwords.
Password Manager - Remember, delete, change and import saved passwords in Firefox
https://support.mozilla.org/en-US/kb/password-manager-remember-delete-change-and-import#w_protecting-your-passwords

If the problem persists in Firefox and you are Syncing with other Devices reset it.
https://support.mozilla.org/en-US/kb/how-do-i-set-sync-my-computer

When all is well you can re-sync your devices.

Clean the Firefox Cache.
https://kb.iu.edu/d/ahic#firefox

Remove Firefox using the instructions one this page.
https://support.mozilla.org/en-US/kb/uninstall-firefox-from-your-computer

Restart the computer normally.

Install the latest version of the application.
https://www.mozilla.org/en-US/firefox/new/

Import your Bookmarks. Same link as the Export function above.

Restart the computer normally.
<<<>>>

How is it now?

Link to post
Share on other sites

Oh you know what ?

Some points tend to confirm what you say, and some infer some doubt.

On one side, Firefox could not access the authentication on the Airbox either with a new profile, or while using a portable installation, or by using it on a smartphone.

On the other side, the payable program that is proposed on your site arises an alert at the level of the password input field, and the authentication is quite OK with Internet Explorer.

So, do you mean that program arises a false alert, and Orange programmed an authentication page that seems not to be compatible with Firefox ?

Except if there is something that is not detected by FRST and I have to analyse my smartphone too ?

Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.