Jump to content

Firefox low key hijacking?


Recommended Posts

Hi,

I have been a licensed MWB user for years. Lately though, MWB is blocking attempts by Firefox to contact a series of outgoing IPs. My W7 64 bit is up to date as is MWB and McAfee. When I am not using my system it is shutdown. I booted it up this morning and then again this afternoon. Here is the log:

05:40:09 TOSHIBA USER MESSAGE Protection started successfully

05:40:13 TOSHIBA USER MESSAGE IP Protection started successfully

06:19:14 TOSHIBA USER IP-BLOCK 216.18.239.236 (Type: outgoing, Port: 50279, Process: firefox.exe)

06:24:19 TOSHIBA USER IP-BLOCK 67.29.139.153 (Type: outgoing, Port: 51173, Process: firefox.exe)

06:24:19 TOSHIBA USER IP-BLOCK 206.53.56.19 (Type: outgoing, Port: 51174, Process: firefox.exe)

17:40:44 TOSHIBA USER MESSAGE Protection started successfully

17:40:48 TOSHIBA USER MESSAGE IP Protection started successfully

17:45:07 TOSHIBA USER IP-BLOCK 88.208.1.113 (Type: outgoing, Port: 49492, Process: update.exe)

17:46:12 TOSHIBA USER IP-BLOCK 89.248.169.32 (Type: outgoing, Port: 49627, Process: update.exe)

17:47:56 TOSHIBA USER IP-BLOCK 78.140.143.207 (Type: outgoing, Port: 49802, Process: update.exe)

17:49:20 TOSHIBA USER MESSAGE IP Protection stopped

17:49:21 TOSHIBA USER MESSAGE Database updated successfully

17:49:23 TOSHIBA USER MESSAGE IP Protection started successfully

Full MWB and McAfee scans show nothing but my McAfee firewall now seems to turn off while the W7 firewall is still active. I have tried allowing both Firefox.exe as well as update.exe in the Mozilla Firefox main directory. Any suggestions? Thanks.

Link to post
Share on other sites

  • Staff

Hi and welcome to Malwarebytes.

Does it happen only when visiting a specific site?

Please update MBAM, run a Quick Scan, and post its log.

Next, download DDS by sUBs and save it to your Desktop.

Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply.

Link to post
Share on other sites

  • 2 weeks later...
  • Staff

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.