Member Avatar for Ekundayo

Hi!
I'm usually on Firefox, windows 7 64 bit, fujitsu lifebook, run adblocker on FF and I get these weird tabs that just open right in front of my eyes sometimes that say "hope", "patience" etc. and have a kind of colored border, nothing on the tab, just the tab title. This is really starting to piss me off. I figured it was just some millenial adding a "Zen" approach to FF but I want to bazooka it outta my computer. I use BitDefender, run Malware Bytes full scan regularly and run microsoft malicious removal tool. I can't find this thing. Also, almost every day twice a day a tab opens up to Australian Brewing Company, why on earth I do not know, and of course FF says get the heck out of there, is a web forgery etc. I can't find the problem. Any suggestions?

  • 5 Contributors
  • 7 Replies
  • 380 Views
  • 2 Months Discussion Span
  • Latest Post Latest Post by joserey

Dani AI

Generated

Short diagnosis and practical next steps (adds to , and ): those “ghost” tabs named like “hope” or random download pages are almost always adware/PUPs or a browser extension that was bundled with something you installed. These PUPs can inject extensions, change new‑tab/homepage behavior, add scheduled tasks or Run keys, alter the hosts file, or even tweak shortcuts so a browser opens specific URLs. (malwarebytes.com)

Immediate Firefox‑focused checklist (try these in order — simple → deeper):

  • Start Firefox in Safe Mode (restart with add‑ons disabled) and look for recently added/unknown extensions; disable and remove anything unfamiliar.
  • Use Firefox’s "Refresh" (reset) to remove add‑ons and restore defaults while keeping bookmarks/passwords if you want a fast clean test.
  • If it still appears, create a new Firefox profile (firefox.exe -P or use about:profiles) and test with a clean profile. (support.mozilla.org)

System and tools to use next:

  • You already had success with on‑demand cleaners; follow that by running up‑to‑date antivirus plus a second‑opinion scanner (ESET Online Scanner, HitmanPro or similar) and enable PUP detection.
  • Use Autoruns (Sysinternals) to inspect Run, RunOnce, services, scheduled tasks and shell shortcuts for entries that launch a browser or reference strange URLs — disable suspicious entries, then reboot and re‑test.
  • Check the hosts file and Firefox proxy/network settings; malicious entries or an attacker‑controlled proxy can redirect or pop pages. (help.malwarebytes.com)

Notes and cautions: do not interact with the “web forgery” pages (do not click, download, or enter credentials). If you accidentally did, change passwords from a clean device. If the problem persists after the above, gather scan logs (Malwarebytes/AdwCleaner/Autoruns/ESET), try a full browser reinstall or a fresh Windows user profile, and escalate to a dedicated malware‑removal forum with those logs for targeted help.

Recommended Answers

All 7 Replies

Member Avatar for nullptr

Try running scans with and Junkware Removal Tool.
Post back if these don't get rid of it.

Member Avatar for pelle12

Hi,

Virus maybe?

Regards,
JP

Member Avatar for Ekundayo

OMG! Thank you so much for the cleaner and removal tool links! I have an account over there too, great stuff for free! I ran both of those and even though I always am sooooo careful when installing stuff to not let the bloat ware and add on crap come thru, it still found a few things hidden. I even use the Revo uninstaller tool but there were still some leftover bits of crud. Computer running great now and not making those odd ghost tabs that open by themselves. Thanks!

Member Avatar for joserey

I ran both of the suggestions and it appeared to correct the problem, but then the uninvited website popped up again. Here it is. I would NOT use the link in case it will infect your computer. But this link keeps opening up and is being blocked as a web forgery and can't seem to get rid of it. Any suggestons are appreciated: 'getsoftfree.com/soft/t3/cca6f723/?sid=104185&uid=1803188932&filename=setup'

Edited by happygeek because: url edited to prevent accidental clicking
Member Avatar for joserey

tried to fix that last post, but it posted as a new one. ty for fixing it!!! :)

Member Avatar for Reverend Jim

Does the same thing happen if you use IE or chrome?

Member Avatar for joserey

It doesn't occur with IE; and Chrome is not installed on this computer.

ty

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.