Rechercher dans l’assistance

Évitez les escroqueries à l’assistance. Nous ne vous demanderons jamais d’appeler ou d’envoyer un SMS à un numéro de téléphone ou de partager des informations personnelles. Veuillez signaler toute activité suspecte en utilisant l’option « Signaler un abus ».

En savoir plus

malware not in add-ons

  • 2 réponses
  • 1 a ce problème
  • 10 vues
  • Dernière réponse par kakakali

more options

Note': Such problems do exist when all add-ons disabled and in safe mode Firefox (by "refresh firefox" option).

When Firefox is started, an advertising window would occur. The hijacked address: https://winxuan[.]jd[.]com/?cu=true&utm_source=kong&utm_medium=tuiguang&utm_campaign=t_1000623798_&utm_term=19dca519301545a6b711007896b3b333 hijacked address

Also, Ctrl + Shift + N was hijacked to the same window.

The window is strange: When I click the "+" button to open a new tab, the new tab directly opens in the previous window.

Perhaps something in Firefox itself was maliciously modified, I guess.

I am using 88.0.1 (64-bit) version Firefox on Win10.

'''Note': Such problems do exist when all add-ons disabled and in safe mode Firefox (by "refresh firefox" option).''' When Firefox is started, an advertising window would occur. The hijacked address: https://winxuan[.]jd[.]com/?cu=true&utm_source=kong&utm_medium=tuiguang&utm_campaign=t_1000623798_&utm_term=19dca519301545a6b711007896b3b333 hijacked address Also, Ctrl + Shift + N was hijacked to the same window. The window is strange: When I click the "+" button to open a new tab, the new tab directly opens in the previous window. Perhaps something in Firefox itself was maliciously modified, I guess. I am using 88.0.1 (64-bit) version Firefox on Win10.

Modifié le par Andrew

Solution choisie

Could you check to make sure your home page was not modified? See: How to set the home page

Another possible vector is a modified shortcut. Normally your shortcut has a "Target" like this:

"C:\Program Files\Mozilla Firefox\firefox.exe"

but malware may add a URL to the target so that Firefox launches a page every time you use the shortcut.

Ctrl+Shift+N will re-open the last window you closed during your session, so I don't know whether you are just seeing that, or something specifically attached to Ctrl+Shift+N.

Lire cette réponse dans son contexte 👍 1

Toutes les réponses (2)

more options

Solution choisie

Could you check to make sure your home page was not modified? See: How to set the home page

Another possible vector is a modified shortcut. Normally your shortcut has a "Target" like this:

"C:\Program Files\Mozilla Firefox\firefox.exe"

but malware may add a URL to the target so that Firefox launches a page every time you use the shortcut.

Ctrl+Shift+N will re-open the last window you closed during your session, so I don't know whether you are just seeing that, or something specifically attached to Ctrl+Shift+N.

more options

jscher2000 said

Could you check to make sure your home page was not modified? See: How to set the home page Another possible vector is a modified shortcut. Normally your shortcut has a "Target" like this: "C:\Program Files\Mozilla Firefox\firefox.exe" but malware may add a URL to the target so that Firefox launches a page every time you use the shortcut. Ctrl+Shift+N will re-open the last window you closed during your session, so I don't know whether you are just seeing that, or something specifically attached to Ctrl+Shift+N.

Thanks for your reply. Firefox now works fine. The shortcut was checked and was not modified. So it should be a malicious add-on :) (which is common and I'll find it). I didn't realize Ctrl+Shift+N would open the last closed window (usually to open a new private window in other browsers). QAQ