Yes if you could try IE, I believe it is an addon within firefox but as of yet I am not 100% sure
Funny you mentioned that it might be a firefox addon i started this tread saying that there was an infection on firefox addon which showed an add of a company in all of my google searches. There am shearing a link where i have warmed other about it on another forum. Also It was the same time when i made the switch from MSE to avast.
http://www.thinkdigit.com/forum/internet-www/175983-fake-link-appers-google.html
Think this might shead some light.
Run Firefox in safe mode https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode let me know if that stops it, then we will start looking for the bad boy
o.k i have read the Make permanent changes to Firefox in the Safe Mode window n will disable all add-ons,Reset toolbars and controls:,Reset all user preferences to Firefox defaults,Restore default search engines, execpt bookamrks. o.k will work for a week to see if any thing comes n report back
Ta, the reason I think it is an addon is that the files are transient and not permanently visible
It seems i am not able to make permanent changes to Firefox in the Safe Mode window for a better study & shift + starting firefox is not always reliable … I was following this guide http://www.sevenforums.com/tutorials/210670-firefox-start-firefox-safe-mode.html but after step 3 the diagonal box where you can select the opions never opens firefox starts without it. & so i can not select user profile. Please if there is any other way to do this.
The other option is to do a full uninstall and then clean install of Firefox, but this means you will lose all your addons
I can do that i will write download all the addon n after reinstalling firefox will install them back from firefox addon from settings. The only thing i wanted to keep or to backup is my passwords list & bookmarks … and Is there any way that i can install them back after reinstalling firefox automatically & do not have to do manual … if this is a left over from that infection Well uninstalling really fix the issue … I have revo uninstaller i can use it to uninstall firefox well that be good euogh or you can do it from OTL some thing same & uninstall ever thing related to it …
Revo would work fine
Backup the two files mentioned here (save them to the desktop)
You can only access passwords stored in [b]signons.sqlite [/b] if you have the correct [b]key3.db [/b] file that stores the encryption key needed to decrypt the names and passwords. If copying the two files to the current Firefox profile folder doesn't work then you may have a wrong key3.db file.
Make sure that you have copied the two files to the correct location with Firefox closed.
You can use this button to go to the Firefox profile folder:
•Help > Troubleshooting Information > Profile Directory: Show Folder
O.k found the two files you specified & backed up them also noted there location just one thing What is the Kic9xlvr.default in the starting of the location .
That is firefox’s designation for that user
Is it important case folder only opens C drive … Also should delete profile n every thing
Aye clear the lot (except the two files you backed up)
o.k I did the uninstalling went to firefox website downloaded the latest version v23.0.1 Installed it … where did appear an error that came when i fired up firefox for the frist time … Firefox did provided trible shooting guide went thought that i was able to locate the first file mentioned but did not find the second file. As it was specified i renamed it to .old. The reason i did not restart to slove the problem wa that i thought the infection would be intergeted with the new installation also. Am attacheding the snap short which will provide you with better detail. Bookmarks & password along with the addon that where in the last firefox has been installed too. No pomp up for now …
Problem have not been resolved … Just got the tread again it still there …
I think will have to use I.E … but before it has not reported an alert & there are not any addon on it … Will try to update it to the latest version advice me how should i strat …
Run this quick OTL fix please
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
https://dl.dropbox.com/u/73555776/OTL_Fix.GIF
:Commands
[CREATERESTOREPOINT]
:OTL
O4 - HKU\S-1-5-21-2241014270-4267057124-2651974131-1001..\RunOnce: [WindowsLiveUpdate] C:\Users\KING JOHN\AppData\Roaming\MCommon\WindowsLiveUpdate.exe File not found
:Files
C:\Users\KING JOHN\AppData\Roaming\MCommon
:Commands
[resethosts]
[emptytemp]
[Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
Here i have done with the OTL quick fix. Attaching log .
Could you check for alerts now in FF
Ya will reply back … I did wanted to ask a couple of thing but thought to wait for fix to finish … 1. Should i use comodo secure DNS for internet. 2. I did not visited so many sites after i freshly installed firefox I can make a list of those site & do another fresh installation then check for infection by visiting the sites in the list one by one at an interval of three days to see where i got this infection from so that i avoid that site. 3. If this is not a sites related n the infection is not an addon then what ?.. Sorry if this sounds noob to you. I do not under stand much of what is going on n complying just as told to soo wanted to know …
No problem first lets see if the last one killed it 