Do a malware check with some malware scan programs. You need to scan with all programs because each program detects different malware. Make sure that you update each program to get the latest version of the database before doing a scan. * http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware * http://www.superantispyware.com/ - SuperAntispyware * http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page * http://www.safer-networking.org/en/index.html - Spybot Search & Destroy * http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and Searches are redirected to another site

This happened to me too. I analyzed the source codes of the extensions I'm using and found that a [https://addons.mozilla.org/en-US/firefox/addon/keylogger-220858/ keylogger] extensions developed by [https://addons.mozilla.org/en-US/firefox/user/5389748/ Lipo-Technologies] is behind the game. Just uninstalling it fixed all the issues for me. Extensions developed by them includes Play Your Piano!, Keylogger, Browser Server and Test Your memory!. Other interesting things which you guys will definitely find interesting: * Evil code starts from line 165 of keylogger-1.5-fx/chrome/content/overlay.js * Every time when I check the logs of keylogger, a GET request is made automatically to http://lipo-technologies.com/Keylogger/ajax2.php. If the response of this GET request is "no", nothing happens. If it is "yes", the sturcture will be like this: ''yes^^^http://google.com/^^^toolbar=0,location=0,titlebar=0,status=0,menubar=0,scrollbars=0, resizable=0,height=105,width=780,top=0,left=0'' and Firefox opens a new window with that URL. That simply means, those extension developers can open any page they wish on your browser at any point of time. * By the way, http://lipo-technologies.com/Keylogger/news.html actually redirects users to http://no1techblog.blogspot.com/. So if you are checking source codes of extensions, normally you won't find any direct links to no1techblog.blogspot.com * Check out the "Browser Server" extension developed by the same team, they also opens advertisement windows randomly. (We miss POW, really) Note: I just copy pasted my previous post from here: [https://support.mozilla.com/en-US/questions/857782#answer-279635 When I start Firefox the following website loads dozen of times: http://no1techblog.blogspot.com/ - How do I stop this? (not an issue with MSEx)]