Strange issue with home page of Firefox.

Discussion in 'malware problems & news' started by infini, Apr 12, 2016.

  1. infini

    infini Registered Member

    Joined:
    Oct 11, 2002
    Posts:
    110
    Everytime i open Firefox, the start page is "file:///C:/Windows/system32/" no matter which page i set. I made a refresh from the troubleshooting information with no luck. I have scanned with MalwareBytes Antimalware and found no infections. Any help?
     
  2. mick92z

    mick92z Registered Member

    Joined:
    Apr 27, 2007
    Posts:
    499
    Location:
    Nottingham
    Have you tried restore to default ?
    Also are any of your security programs protecting your homepage from changes ? firefox.PNG
     
  3. infini

    infini Registered Member

    Joined:
    Oct 11, 2002
    Posts:
    110
    I tried the "restore to default" with no result. I have avast free antivirus but i haven't found an option to protect the homepage.
     
  4. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    7,290
    Location:
    England
    I know this may sound strange, but have you tried setting Internet Explorer settings back to default?

    Also perhaps try a sfc (system file check)
     
  5. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    2,969
    Location:
    U.S.A.
    That is pointing to a global root area in kernel space. Appears you have a serious malware infection. I would seek assistance in one of the malware removal forums.
     
  6. infini

    infini Registered Member

    Joined:
    Oct 11, 2002
    Posts:
    110
  7. infini

    infini Registered Member

    Joined:
    Oct 11, 2002
    Posts:
    110
    When i enter safe mode the start page appears as blank (this is what i have set". When i enter safe mode with networking i get the same problem.
     
  8. mick92z

    mick92z Registered Member

    Joined:
    Apr 27, 2007
    Posts:
    499
    Location:
    Nottingham
    I cannot find anything on google. Did find a post , where someone kept getting Index of file:///C:/Program Files/Mozilla Firefox/
    https://support.mozilla.org/en-US/questions/927491
    Turned out to be a rootkit.
    You could try Malwarebytes anti rootkit. It's been a while since I ran it, but I believe it does not take any action unless directed to.
     
  9. infini

    infini Registered Member

    Joined:
    Oct 11, 2002
    Posts:
    110
    Finally solved. I used Emsisoft Emergeny kit but found nothing. Zemana antimalwre did the job. It found some internet explorer and firefox shortcuts which marked them as suspicious browser settings. And it also found another file marked as PUA.FirefoxExt!Gr in the folder where Firefox was installed. This folder was somehow renamed as nightly.bak.
     
  10. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    2,969
    Location:
    U.S.A.
    It sounds like a rootkit to me. But "each to their own" ...................................
     
Loading...