Application Basics

       Name
       Firefox

       Version
       20.0.1

       User Agent
       Mozilla/5.0 (Windows NT 6.0; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0

       Build Configuration

         about:buildconfig

 Extensions

       Name

       Version

       Enabled

       ID

       Adblock Plus
       2.2.3
       true
       {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

       Google Search by Image
       0.3
       true
       google@hitachi.com

       Noia 4 Theme Manager
       1.8.1
       true
       Noia4Options@ArisT2

       PageFont
       1.0
       true
       facadazzle@atlinkcom.com

       Personas Plus
       1.7.2.1
       true
       personas@christopher.beard

       RealDownloader
       1.3.1
       true
       {DAC3F861-B30D-40dd-9166-F4E75327FAC7}

       Skype Click to Call
       6.8.0.12323
       true
       {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

       AutocompletePro - Your handy search suggestions tool
       1.11
       false
       support@predictad.com

       AVG Security Toolbar
       15.0.0.2
       false
       avg@toolbar

       Awesome screenshot: Capture and Annotate
       2.4.0
       false
       jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack

       BackupFox
       1.0.3
       false
       backupfox_959a5970_ada3_11e0_9f1c_0800200c9a66@mozillafirefoxextension

       DataMngr
       1.0
       false
       {1FD91A9C-410C-4090-BBCC-55D3450EF433}

       Garmin Communicator
       4.0.4
       false
       {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

       Microsoft .NET Framework Assistant
       1.2.1
       false
       {20a82645-c095-46ed-80e3-08825760534b}

       Noia 2.0 eXtreme OPT
       3.76
       false
       noia2_option@kk.noia

       YTD Toolbar
       7.0
       false
       ytd@mybrowserbar.com

thanks, the PageFont 1.0 extensions looks rather suspicious, DataMngr 1.0 is certainly malicious but already disabled, so it won't cause the ads... in addition Awesome screenshot: Capture and Annotate 2.4.0 is also known self-described adware.

please remove or disable these addons in firefox > addons > extensions and run a scan of your system with adwcleaner.

in addition go to firefox > help > troubleshooting information, click on profile folder/show folder and close all firefox windows afterwards. a windows explorer window should open up - in there delete the file named user.js. it is used to overwrite your preferences, in case you haven't created it yourself in the first place it might also be used for malicious purposes...

edit: AutocompletePro is malicious too

Ok, Done...removed PageFont1.0, Deleted user.js it had about 12 lines of Babylon junk in there, that can't be good. Then I downloaded adware and ran it.. It came up "ok". So let's see if it works... Thanks Buzzy

Don't create a new Firefox profile, that's a pain in the behind. Let's try to find the problem. Btw, I do NOT work for Firefox. I just had the same malware and fixed it by doing the steps I mentioned above.

First, Look through program downloads under Windows Control Panel for anything like Coupon or Advertisement programs. Also check for Coupon, Advertisement Apps under Firefox>Add-ons from the top orange tab that says Firefox. Check everything under Extensions and Plugins. I actually removed all my Add-ons which was only 1 or 2.

I believe I got rid of my bannersdontwork by doing the things I mentioned above. I had a Coupon Companion in Firefox add-ons and under my programs for Windows. I deleted/uninstalled them. I think it was one of those.

Leave AdBlocker Plus in the extensions.

Thanks Huskers4144.. I will try that. I will not delete my profile. Buzzy

Your welcome, Buzzy. I was to the point of almost reinstalling Windows to get rid of bannersdontwork. That would have been a nightmare to reset everything.

If you know your way around your computer registry, you can check there. DO NOT delete anything you don't know what it does as it can make your computer your new doorstop. I checked my registry and didn't see anything malicious so I left it as is. Use Windows key+R then type "regedit" under "run" box to edit the registry. Look under the places that are labeled Software\Microsoft\Windows\currentversion for malware. For example: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run... or HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ....

Good luck :-D

Another way to review and disable items in the Run keys without editing the registry is the Autoruns utility from Microsoft: Autoruns for Windows.

jscher2000 Thanks.. Wow very cool Thanks... SO far I have no banners since yesterday...

Buzzy

Still no Banners ! Thank you all for your responses. What fixed it... I suspect it was Phillips contribution.. see below

thanks, the PageFont 1.0 extensions looks rather suspicious, DataMngr 1.0 is certainly malicious but already disabled, so it won't cause the ads... in addition Awesome screenshot: Capture and Annotate 2.4.0 is also known self-described adware.

please remove or disable these addons in firefox > addons > extensions and run a scan of your system with adwcleaner.

in addition go to firefox > help > troubleshooting information, click on profile folder/show folder and close all firefox windows afterwards. a windows explorer window should open up - in there delete the file named user.js. it is used to overwrite your preferences, in case you haven't created it yourself in the first place it might also be used for malicious purposes...

I appreciate everyone's help though on this and will keep all your insightful answers, Thanks, Again, Buzzy

Yay! I am really glad, Buzzy.

I no longer have bannersdon'twork, but another annoying ad page pop-up (-.-!) I'll work on removing it another day.