Random redirect in Firebox. Hoping this is simple.
Thx in advance.
If anyone were kind enough to take a look I’d be most appreciative.
Thank you.
This looks clean. Does it happen on every webistes or only on specific ones?
No rhyme or reason to the redirect, just random in Firefox. [I have no plug ins, extension, add on’s etc.]
Did a boot scan, nothing. Where does an annoying bugger like this hide? Grrr
Had a similar issue in 2015, dbrisendine had me run a fixlist script that basically reset things. Would just run that again but 1) wanted an expert opinion there was nothing else amiss and 2) a quick look to perhaps see if that file and fix process is appropriate.
https://forum.avast.com/index.php?topic=173507.msg1234044#msg1234044
Thank you for the reply Sass Drake . . .
Do you get redirects in Firefox if only YouTube is opened?
Nothing to do with what website I’m on. Usually just browsing the news; NPR, Yahoo, etc.
But for the third time I noticed it happens exactly at the top of the hour.
Are you getting them in Chrome? Can you copy address of webpage where you get rediretcted and paste it here.
I don’t have Chrome installed.
Here’s the most recent address when redirect occured:
https://www.yahoo.com/news/m/08ad8d60-6443-33c5-802a-bc312030f7df/ss_shark-drags-woman-into.html
(because sharks and crocodiles!!)
This would seem an infection, likely not related to the active web address.
FRST logs show that you have Google Chrome installed but they doesn’t show traces of infection. Do you have other PCs or phones in your home? If you do, do they have same problem?
LOL, yes I found Chrome. The bookmarks were so dusty.
One other computer in the house without similar issue.
Do security folks recommend Chrome, another specific browser? If so, why? OP was about FF so just curious why we’re focused on Chrome - learning opportunity perhaps?
Here’s the redirect page. Didn’t realize I missed the beginning of the URL before deleting, will try to nab that next occurrence.
In Firefox, visit this URL:
about:serviceworkers
And delete/unregister everything listed but before make a screenshot and post it here if possible.
No Service Workers registered.
Please post new FRST.txt and Addition.txt.
Attached
- Open Notepad (click Start button → type notepad.exe → press Enter)
- Copy text from code block below and paste it into Notepad
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]
- Go to File → Save As
- Make sure that UTF-8 is selected as Encoding (left side of Save button)
- Save it as fixlist.txt on Desktop
- Open again FRST and click on button Fix
- Wait until FRST finishes
- fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.
Attached
What is system status now?
Very little computer use the last few days but no “redirects”, will report back in a couple days after more testing.
Thank you SD.