Firefox virus - help

SexyGreyFox · 13 Nov 2008 at 18:41

Okay, I'm exaggerating a bit but its driving me nuts.
I usually fix peoples problems but this one has got me over the last 3 days.
Even Google only comes up with about 5 references and 4 of them are German.
I've been through my Startup files, been through my Registry and looked for suspicious entries in task Manager but I can't see anything obvious.

My problem -
I load Firefox and then all of a sudden it connects to http://67.205.95.105/ and brings up various web pages in another Firefox browser.

Any ideas?

Le_Petit_Lapin · 13 Nov 2008 at 18:43

Delete and re-install Firefox?

swinnie · 13 Nov 2008 at 18:48

Just had a quick google - http://answers.yahoo.com/question/index?qid=20081112013022AAkb7ni

And I did a trace on the IP, originates from Montreal in Canada.

-Aura- · 13 Nov 2008 at 19:22

Your browser has been hijacked. Funny, last reply I made I suggested to someone else to use a program called Hijack This. Run it in safe mode and you should be OK. It will probably be a reg entry changing your home page

GSDog · 13 Nov 2008 at 20:31

Take a look at your hosts file and post the contents here.

# Open the hosts file

1. Go to the Start menu and choose Run. Type the following in the Run dialog box:
1. For Windows NT and 2000: C:\winnt\system32\drivers\etc
2. For Windows XP / VISTA: C:\windows\system32\drivers\etc
2. Click the OK button (This should open a window with several files in it.)
3. Find the file called ‘Hosts’ and double-click it. If prompted, specify that you would like to choose a program to open the file with from a list of programs.
1. Choose ‘Notepad’ from the list of available programs.

braveheart · 13 Nov 2008 at 21:19

Yes delete Firefox also go into Regedit and enter Local Setting App and look for Firefox then delete the line then clean up before you reboot then enter safe mode then reinstall Fx again then you will be ok.

enter Regedit by open Run command from the Start Menu.

SexyGreyFox · 14 Nov 2008 at 07:49

Apologies for not replying earlier and I have been trying above suggestions.
Like I said, for the last 20 years I've been a bit of an 'expert' with the Registry and always fix other peoples problems but this got me stumped.
Anyway, things were happening concerning NOD and hopefully everything is OK now.
Heres a screen grab of at least one item that may have been responsible.
I'd normally type each file name into google but I can't be bothered at the moment.

BTW, for those who like messing with the Registry and other System files the best program I've ver come across is JV16.