Random pop ups

General Topics
1

Hi.

I keep getting random popups whilst using Firefox. It seems to happen when I click on an empty space, or in a text field. Just occasionally.
Now I’m not talking about clicking on an advert that hasnt loaded yet (& so cant be seen), but on legit sites where nothing should be there.

eg entering my password or username text fields

eg a google search from my iGoogle page, I clicked in the search box (to start typing) & got this pop up.

Open DNS
You tried to visit wXw . d4ffr55 . com, which is not loading.

I clicked on a link on the BBC news website yesterday & got another pop up, “savings u . co . uk”

Yesterday I did a full thorough virus scan, & got 3 hits.

2 low threat, somethin about PuP. cant remember what exactly. but it was a cracked authenticator for Photoshop. This has been installed for over 2 years & has never shown up before. OK I shouldnt be using cracked software.

I dont recall what the 3rd threat was but it was high threat, a temp internet file

I also did a boot time scan which bought up 4 more threats, I dont recall the details.

Anyway I chose the delete option.

But its still happening. Todays one,
Open DNS
You tried to visit wXw . d4ffr55 . com, which is not loading.
has happened after doing a full system scan. No threat found. tested files/folders 320278/38482. Amount of data tested 608.9GB. Infected files 0.

This has only been happening for the last 3 or 4 days, & nothing has been installed recently. I dont use pop up blockers. I use Comodo firewall.

Any help curing the problem would be appreciated.

running Vista home premium 32bit

2

I take it that you weren’t actually trying to visit hXXp://wXw.d4ffr55.com/ This looks like some kind of redirection to probably a malicious site given the nature of the random domain name and it is not present, possibly taken down. OpenDNS would normally try to recover if it were a typo and send you to the right site, but since this doesn’t appear to be up (and a random looking name) it just throws up its default screen (can’t load/connect). I get the same issue if I try to directly connect to that site, cannot be found, see image.

Please ‘modify’ your post change the URL from http to hXXp or www to wXw, to break the link (as in the example above) and avoid accidental exposure to suspect sites (even though it is currently down, good safe practice), thanks.

Does this only happen if you are using firefox, have you tried using IE or another browser ?
What happens if you run firefox in safe mode (e.g. no add-ons) and try what you are experiencing the problem with ?

Are you getting any avast alerts ?

3

Thanks. sorry I didnt break the link, I should have though of that. Done now.

Correct, I wasnt trying to visit it. I dont know what it is, all I had done was click in the google search box for that to happen.

I’m not getting any avast alerts. It shouldnt be happening, hence why I am asking here.

I only use Firefox. So only when using Firefox.
I will switch to safe mode (if I can) ON Firefox & see what happens.
I am willing to try chrome for a bit, but I dont like chrome.
I dont even want to try using IE, I never use it.

It’s only happening occasionally.

4

I don’t like chrome either and only use IE for reference situations only.

If you are using Win7 you can open firefox, Help, Restart with add-ons Disabled…

If you have XP then there should also be an option in the Start, All Programs, Mozilla Firefox, to run it in safe mode.

5
Correct, I wasnt trying to visit it. I dont know what it is, all I had done was click in the google search box for that to happen.
Google or any other search results can and do become infected. (redirected to a malicious site) In Google, you're perfectly safe if the original search information displayed is sufficient. If you need more information and have to click on the provided URL for additional information, then it's possible that you're redirected to a malicious site. This would happen regardless of the browser you're using.
6

Thanks for the help peeps. Disabling addons stopped stopped the popups. Now I have found the culprit.

“ilivid download manager”

I’ve been modifying my android phone, & accidently clicked on that when trying to download files. Now I know the cause I can cure my PC properly.

7

You’re welcome and thanks for the feedback.

Glad that you have found the culprit.

8

Glad the problem has been solved.
Unfortunately some Download Managers download more than just the programs they are requested to download. :frowning: