View Full Version : Anyone get caught by the Firefox plugin virus?


Abraxas
12-28-08, 11:31 PM
Symptoms included several malware packages getting dropped on my PC and a persistent problem with my google searches being hijacked to a site called "goougly.com". The problem only happened in Firefox, but eventually I found the fix.

Spybot, Ad-Aware, Malwarebytes, SuperAntiSpyware, Avast and Norton all missed it, and apparently the big companies aren't in a rush to put out a fix to this one.

If you've got a persistent hijack issue that seems limited to Firefox, try looking for "gooredfix", and it should resolve the issue for you.

I'm not entirely sure it was the root cause of the issue, or just another package that dropped onto my machine, but according to my PC logs, it all happened at the same time (other malware packages plus the goougly.com redirects). I also ended up running combofix, which can take out a number of rootkits, just in case.

Also of note is that it appears to be a vulnarabilty in Java and/or Adobe that allowed some of the little buggers in. That, and me surfing around to some sites looking for a keygen for some software that I wanted to *ahem* "try out". I really should take that as a lesson. :(

Retromancer
12-29-08, 01:11 AM
As a fellow Firefox user I appreciate the heads-up. Being limited to dial-up probably has limited my exposure -- I use Firefox's FlashBlock extension just so I can browse without bogging down...

meadd823
01-01-09, 01:14 AM
I was using firefox on my old computer and my lap top because my moderator functions always seemed to freeze up explorer but sense I got this new used computer I am able to run moderator functions in explorer without problems - My uneducated guess the increase in RAM , processor speed and about 5000 fewer down loaded programs!!

WarPhalange
01-02-09, 04:06 AM
Thanks for the warning. I remember getting a redirect virus/adware some time ago. Man those things are almost impossible to get rid of. You can't search for a solution because it won't let you!

I swear, if Linux had better video game compatibility I would be on it 100%. Right now it's just a hassle to reboot every time I want to play a video game and then reboot again for all the "other" stuff.

ecu20
01-05-09, 07:25 PM
Thanks for the warning. I remember getting a redirect virus/adware some time ago. Man those things are almost impossible to get rid of. You can't search for a solution because it won't let you!

I swear, if Linux had better video game compatibility I would be on it 100%. Right now it's just a hassle to reboot every time I want to play a video game and then reboot again for all the "other" stuff.

vmware is nice also, just a suggestion.:cool:

WarPhalange
01-09-09, 01:59 AM
Yes, I've heard a lot about it. I just don't want to be that cruel to my computer. Right now I have no less than 6 Firefox tabs open + music + other stuff I'm working on. Do you have any idea what would happen if I could also access Linux and Windows at the same time?

Also, how much of a resource hog is it? I don't know if I'd be able to run a game if I have to run a 2nd operating system at the same time.

ecu20
01-10-09, 09:08 PM
Yes, I've heard a lot about it. I just don't want to be that cruel to my computer. Right now I have no less than 6 Firefox tabs open + music + other stuff I'm working on. Do you have any idea what would happen if I could also access Linux and Windows at the same time?

Also, how much of a resource hog is it? I don't know if I'd be able to run a game if I have to run a 2nd operating system at the same time.

What kind of hardware is your system running? It all depends, but I did not find vmware workstation to cause any strain, and I have a dual core 1.73ghZ intel centrino with 2gb of ram running xp pro sp3 with a 256mb geforce go 7900GS. I didn't have a problem running Ubuntu's latest distro, with 3 firefox windows and about 5 tabs on each, music, and an FTP client in the background. On the Ubuntu I was running a web server, and had no lag issues. :)

Also, they do have a fully functional demo download for 30 days on their site. The downside is that a license after that is $190. You can find it here: https://www.vmware.com/tryvmware/?p=workstation-w

timtam
01-27-09, 10:26 AM
Symptoms included several malware packages getting dropped on my PC and a persistent problem with my google searches being hijacked to a site called "goougly.com". The problem only happened in Firefox, but eventually I found the fix.

Spybot, Ad-Aware, Malwarebytes, SuperAntiSpyware, Avast and Norton all missed it, and apparently the big companies aren't in a rush to put out a fix to this one.

If you've got a persistent hijack issue that seems limited to Firefox, try looking for "gooredfix", and it should resolve the issue for you.

I'm not entirely sure it was the root cause of the issue, or just another package that dropped onto my machine, but according to my PC logs, it all happened at the same time (other malware packages plus the goougly.com redirects). I also ended up running combofix, which can take out a number of rootkits, just in case.

Also of note is that it appears to be a vulnarabilty in Java and/or Adobe that allowed some of the little buggers in. That, and me surfing around to some sites looking for a keygen for some software that I wanted to *ahem* "try out". I really should take that as a lesson. :(
but what was the firefox plugin you installed that caused the browser to re-direct to a site you didn't want? and when you say Java do you actually mean JavaScript? and how do you know that the malware didn't come from one of the keygens you downloaded (keygens are notorious for malware)?

CDRacingZX6R
01-28-09, 07:20 PM
Thanks for the heads up! I'll be careful about what sites I use that support Java. I absolutely hate fighting spyware.