web site https:\\moo.review tries to open on every firefox launch. My antivirus stops it from loading. This started with ff version 57.
When I launch ff v57.0 it tries to open https:\\moo.review but my antivirus keeps it from loading because it thinks the site is not safe. Never had a problem of ff trying to automatically load a web site until v57 installed on November 19. If I keep that ff instance open and launch another one it does not try to load moo.review. Opening a new tab does not try to load moo.review.
Option - When ff starts: show a blank page
Option - Home page is about:blank
I've tried ff safe mode.
This is really quite frustrating.
الحل المُختار
I went to the site before I posted the Malware info. Malwarebytes blocked me from having access. Norton Security did not. Ya ...do not go : 59 scans looked at last https://www.virustotal.com/#/search/https:\\moo.review RiskWare/JS.Cryptonight and BitCoinMiner (PUA)
I suggest going to the URL https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/ it is painless, been there before myself. Just follow instructions, do not need to ask much.
Please do not just put that back into the Hosts File. Do you know that it stops it from emailing itself or file transfer in other ways and by USB Key.........for sure.......
Please let us know if this solved your issue or if need further assistance.
Read this answer in context 👍 0All Replies (7)
If you would please as it is Malware on your system : Please use more than 1 scanner as each uses diff tech : https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware
Save your Report and google each before deleting anything as do not want to delete something you need, If need help : https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/ Post in only 1 forum, then wait.
Please let us know if this solved your issue or if need further assistance.
I placed an entry of:
0.0.0.0 moo.review
in my HOSTS file and that fixed the issue.
skornel said
I placed an entry of: 0.0.0.0 moo.review in my HOSTS file and that fixed the issue.
Yes, but it does not remove what is on your computer making it go to that site. A band-aid is not a solution to the issue. Do run https://www.malwarebytes.com/adwcleaner/
Please let us know if this solved your issue or if need further assistance.
I ran the malwarebytes adwcleaner but the problem persists after I took the line out of my HOSTS file.
malwarebytes deleted a few folders, files and registry entries it did not like but not fixed yet.
I'm not so sure it is a malware problem. It started when I downloaded ff v57.0 and it is now updated to v57.0.2. I have been running ff for many, many years without a problem and now this...
I appreciate your help. Any other ideas?
skornel said
When I launch ff v57.0 it tries to open https:\\moo.review but my antivirus keeps it from loading because it thinks the site is not safe. Never had a problem of ff trying to automatically load a web site until v57 installed on November 19. If I keep that ff instance open and launch another one it does not try to load moo.review. Opening a new tab does not try to load moo.review.
Went there with the link and it worked. I think it has to do with your overly aggressive A/V. So what errors are you getting when you get to the site?
I have not gone to the site. I'm the cautious type.
My A/V is ESET. If it's just a paranoid A/V then I can easily solve it with my entry in the HOSTS file. I believe I'll just stick with that.
Thank you for your help, I appreciate it.
الحل المُختار
I went to the site before I posted the Malware info. Malwarebytes blocked me from having access. Norton Security did not. Ya ...do not go : 59 scans looked at last https://www.virustotal.com/#/search/https:\\moo.review RiskWare/JS.Cryptonight and BitCoinMiner (PUA)
I suggest going to the URL https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/ it is painless, been there before myself. Just follow instructions, do not need to ask much.
Please do not just put that back into the Hosts File. Do you know that it stops it from emailing itself or file transfer in other ways and by USB Key.........for sure.......
Please let us know if this solved your issue or if need further assistance.