Apparently some pop-ups are evading the filters...

Hi Sarah,

first of all, please take a look at our support article Troubleshoot Firefox issues caused by malware to help you identify if this still might be a malware problem - it does sound somewhat like you still have an infection of some form.

Also, try starting Firefox itself in its Diagnose Firefox issues using Troubleshoot Mode state, and see if this prevents the problem - if so, your Firefox itself could be infected thru an add-on, and we would very much like information on such things to protect Firefox against such infections for all users.

If this is the case (and basically also to help identify other problems related to this), please see our article Use the Troubleshooting Information page to help fix Firefox issues and post the troubleshooting information here.

Please let us know how above works out, and if we can be of further assistance. Detailed feedback is appreciated and helps us to help you better, plus enables us to better help other users with similar issues.

I was able to open the browser in safe mode with no pop ups or any of my settings being changed. So will I need to scan my computer for malware and try to remove it?

Scanning you system with additional tools as explained in the first link in my response - article Troubleshoot Firefox issues caused by malware - is a very good idea to make sure that the system is absolutely clean.

But as Firefox starts normally using Safe Mode, it is likely to be something in Firefox - maybe a fake add-on - and we would very much like to have information about what is causing this so Firefox can be hardened against this problem on a permanent basis for all users worldwide.

Please see our article Use the Troubleshooting Information page to help fix Firefox issues and post the troubleshooting information here in this thread. This may be enough to track down the problem and tell you exactly what to do to clean out Firefox and get rid of the popups.

If not, I will guide you thru fixing it step by step until we get it fixed, but let us start with the Troubleshooting Information and see if we can't nail the offender the easy way. :-)

 Application Basics

       Name
       Firefox

       Version
       3.6.3

       Profile Directory

         Open Containing Folder

       Installed Plugins

         about:plugins

       Build Configuration

         about:buildconfig

 Extensions

       Name

       Version

       Enabled

       ID

       BrowserZinc
       1.0
       true
       {52ED9673-0722-4A1D-B859-959FD56143DC}

       Norton IPS
       1.0
       true
       {8545daff-ad1e-493f-a37e-eed1ac79682b}

       Java Console
       6.0.14
       true
        

       Java Console
       6.0.17
       true
        

       Microsoft .NET Framework Assistant
       1.1
       true
       {20a82645-c095-46ed-80e3-08825760534b}

       Norton Toolbar
       3.7.2
       true
       {7BA52691-1876-45ce-9EE6-54BCB3B04BBC}

       WCS Helper Class
       4.7.0.2940
       true
        

       CCO Helper Class
       5.7.0.7330
       true
       {8141440E-08F0-4339-9959-5C31C6A69F23}

       CPS Helper Class
       4.7.0.2910
       true
        

       Contextual Content Manager
       1.7.0.3990
       true
        

       Textual Content Enhancer
       2.7.0.4370
       true
       {5909FC3D-7F8B-415d-A5D1-7C7E941E536E}

       HP Smart Web Printing
       4.60
       false
       smartwebprinting@hp.com

       AIM Toolbar
       5.96.10.5491
       true
        

 Modified Preferences

     Name

     Value

       browser.history_expire_days.mirror
       180

       browser.places.smartBookmarksVersion
       2

       browser.startup.homepage
       http://www.yahoo.com/

       browser.startup.homepage_override.mstone
       rv:1.9.2.3

       browser.tabs.loadInBackground
       false

       extensions.lastAppVersion
       3.6.3

       general.useragent.extra.mas

       general.useragent.extra.microsoftdotnet
       (.NET CLR 3.5.30729)

       keyword.URL
       http://slirsredirect.search.aol.com/redirector/sredir?sredir=2706&invocationType=tb50-ff-aim-ab-en-us&tb_uuid=1000000000…

       network.cookie.prefsMigrated
       true

       network.http.proxy.version
       1.0

       network.protocol-handler.warn-external.dnupdate
       false

       places.last_vacuum
       1276653376

       privacy.sanitize.migrateFx3Prefs
       true

       security.warn_viewing_mixed
       false

I would suggest you try to disable the BrowserZinc addon, as I suspect this could be the problem. Then restart the browser, and see if it behaves as it should without popups.

If you still get popups, I think you need to make a new profile. This is explained in the article Profiles - Where Firefox stores your bookmarks, passwords and other user data - this should fix the problem.

Please let us know how above works out, and if we can be of further assistance. Detailed feedback is appreciated and helps us to help you better, plus enables us to better help other users with similar issues. :-)

I removed the BrowserZinc addon but I kept getting pop ups.

So I removed my profile, including deleting all files, and created a new profile. I still get pop ups.

I've scanned my computer multiple times for spyware and viruses but still getting pop ups.

Is there anything else I can do?

There sure is, we're not gonna give up so easily! We will get it fixed.

Next step is starting Firefox in Safe Mode again, this time disabling all add-ons. Then restart it normally, and turn on the add-ons one by one, restarting Firefox for each, to find out exactly which one is causing these popups.

We must be getting close.

Ok I went through each add-on and I think I found the one that was enabling pop ups to appear.

CCO Helper Class 5.7.0.7330

I'm hoping this solves the problem.

Still getting popups from this site:

http://www.bestsampleresume.com/construction-resumes.html

I've tested Firefox in both normal and safe mode. firsttimesettingsdone set to FALSE.

Popup doesn't show up in Safemode. Shows up in normal mode.

Still getting popups from this site:

http://www.bestsampleresume.com/construction-resumes.html

I've tested Firefox in both normal and safe mode. firsttimesettingsdone set to FALSE.

Popup doesn't show up in Safemode. Shows up in normal mode.

Do a malware check with a few malware scan programs.
You need to use all programs because each detects different malware.
Make sure that you update each program to get the latest version of the database.

• http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
• http://www.superantispyware.com/ - SuperAntispyware
• http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
• http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
• http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page

See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and What to do when searches take you to the wrong search website

#

 Application Basics

       Name
       Firefox

       Version
       7.0.1

       User Agent
       Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1

       Profile Directory

         Open Containing Folder

       Enabled Plugins

         about:plugins

       Build Configuration

         about:buildconfig

 Extensions

       Name

       Version

       Enabled

       ID

       Java Quick Starter
       1.0
       true
       jqs@sun.com

       LivingPlay TextLinks
       1.0.0
       true
       textlinks@lplay.com

       StumbleUpon
       3.95
       true
       {AE93811A-5C9A-4d34-8462-F7B864FC4696}

       Yontoo Layers
       1.20.00
       true
       plugin@yontoo.com

       Anti-Banner
       11.0.2.579
       false
       KavAntiBanner@Kaspersky.ru

       Java Console
       6.0.24
       false
       {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

       Java Console
       6.0.26
       false
       {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

       Kaspersky URL Advisor
       11.0.2.579
       false
       linkfilter@kaspersky.ru

       Kaspersky Virtual Keyboard
       11.0.2.579
       false
       virtualKeyboard@kaspersky.ru

       Microsoft .NET Framework Assistant
       1.1
       false
       {20a82645-c095-46ed-80e3-08825760534b}

       RebateInformer
       1.0.0.18
       false
       {ED76C299-85BC-4891-9237-74A140C28832}

       Search Helper Extension
       1.0
       false
       {27182e60-b5f3-411c-b545-b44205977502}

 Modified Preferences

     Name

     Value

       accessibility.typeaheadfind.flashBar
       0

       browser.places.smartBookmarksVersion
       2

       browser.startup.homepage
       https://mail.google.com/mail/?hl=en&shva=1#inbox

       browser.startup.homepage_override.buildID
       20110928134238

       browser.startup.homepage_override.mstone
       rv:7.0.1

       dom.max_script_run_time
       0

       extensions.lastAppVersion
       7.0.1

       general.useragent.extra.microsoftdotnet
       (.NET CLR 3.5.30729)

       general.useragent.extra.searchtoolbar
       SearchToolbar/1.2

       gfx.blacklist.direct2d
       2

       gfx.blacklist.layers.direct3d10
       2

       gfx.blacklist.layers.direct3d10-1
       2

       keyword.URL
       http://toolbar.inbox.com/search/dispatcher.aspx?tp=sf&tbid=80324&language=en&qkw=

       network.cookie.prefsMigrated
       true

       places.database.lastMaintenance
       1318215749

       places.history.expiration.transient_current_max_pages
       31893

       places.last_vacuum
       1300078776

       print.print_printer
       Send To OneNote 2007

       print.printer_Send_To_OneNote_2007.print_bgcolor
       false

       print.printer_Send_To_OneNote_2007.print_bgimages
       false

       print.printer_Send_To_OneNote_2007.print_command

       print.printer_Send_To_OneNote_2007.print_downloadfonts
       false

       print.printer_Send_To_OneNote_2007.print_edge_bottom
       0

       print.printer_Send_To_OneNote_2007.print_edge_left
       0

       print.printer_Send_To_OneNote_2007.print_edge_right
       0

       print.printer_Send_To_OneNote_2007.print_edge_top
       0

       print.printer_Send_To_OneNote_2007.print_evenpages
       true

       print.printer_Send_To_OneNote_2007.print_footercenter

       print.printer_Send_To_OneNote_2007.print_footerleft
       &PT

       print.printer_Send_To_OneNote_2007.print_footerright
       &D

       print.printer_Send_To_OneNote_2007.print_headercenter

       print.printer_Send_To_OneNote_2007.print_headerleft
       &T

       print.printer_Send_To_OneNote_2007.print_headerright
       &U

       print.printer_Send_To_OneNote_2007.print_in_color
       true

       print.printer_Send_To_OneNote_2007.print_margin_bottom
       0.5

       print.printer_Send_To_OneNote_2007.print_margin_left
       0.5

       print.printer_Send_To_OneNote_2007.print_margin_right
       0.5

       print.printer_Send_To_OneNote_2007.print_margin_top
       0.5

       print.printer_Send_To_OneNote_2007.print_oddpages
       true

       print.printer_Send_To_OneNote_2007.print_orientation
       0

       print.printer_Send_To_OneNote_2007.print_page_delay
       50

       print.printer_Send_To_OneNote_2007.print_paper_data
       1

       print.printer_Send_To_OneNote_2007.print_paper_height
       11.00

       print.printer_Send_To_OneNote_2007.print_paper_size_type
       0

       print.printer_Send_To_OneNote_2007.print_paper_size_unit
       0

       print.printer_Send_To_OneNote_2007.print_paper_width
       8.50

       print.printer_Send_To_OneNote_2007.print_reversed
       false

       print.printer_Send_To_OneNote_2007.print_scaling
       1.00

       print.printer_Send_To_OneNote_2007.print_shrink_to_fit
       true

       print.printer_Send_To_OneNote_2007.print_to_file
       false

       print.printer_Send_To_OneNote_2007.print_unwriteable_margin_bottom
       0

       print.printer_Send_To_OneNote_2007.print_unwriteable_margin_left
       0

       print.printer_Send_To_OneNote_2007.print_unwriteable_margin_right
       0

       print.printer_Send_To_OneNote_2007.print_unwriteable_margin_top
       0

       privacy.sanitize.migrateFx3Prefs
       true

       security.enable_ssl2
       true

       security.enable_tls
       false

       security.warn_viewing_mixed
       false

 Graphics

       Adapter Description
       Mobile Intel(R) 945 Express Chipset Family

       Vendor ID
       8086

       Device ID
       27ae

       Adapter RAM
       Unknown

       Adapter Drivers
       igxprd32

       Driver Version
       6.14.10.4926

       Driver Date
       2-15-2008

       WebGL Renderer
       Google Inc. -- ANGLE -- OpenGL ES 2.0 (ANGLE 0.0.0.686)

       GPU Accelerated Windows
       0/1

I'm getting popups while they are disabled on this site http://www.resumefor.org/ anyone else getting them?