With the Malware sticky thread that was somewhere around these parts, I thought I’d ask here about something going on with my FireFox. I’m running Win 10 on a desktop, with Malwarebytes blocking outbound traffic from FireFox to ‘angelfire.com’
If I recall correctly, Angelfire was one of those do-it-yourself sites, along the lines of Yahoo and GeoCities.com. Why is my FireFox trying to ping Angelfire once a day or so? I’ve run all the antivirus scans, cleaners, etc., but to no luck. What gives?
Tripler
Is my browser still stuck in Netscape’s 1996?
Does it ping Angelfire even if you don’t use Firefox actively. Once a day or so seems like it could just be the action of some webpage you usually access.
Perhaps you have a browser add-on that is doing the pinging? If it were me, I would disable all my add-ons and then see if the pinging stops, then I would systematically re-enable each add-on and see what happens.
I can’t say it’s any particular add on, but I will try that. I’ll also take note of when (during the day) it happens, and how often. I’d only seen it pop up once or twice each evening. When I get the error message, I’ll let y’all know too.
I don’t think I got anything from here, but I’d only noticed it when I was surfing the Dope.
In that case, I would try running a MalwareBytes scan. Download MalwareBytes, install it and run the updates. Then run a complete system scan. Remove or delete any malware that it detects, then do a reboot and see how things go.
Possibilities:
[ol]
[li]An addon has a hidden “phone home” to Angelfilre. We don’t know what addons you’re using; if you want to, list them out here for our analysis. (Or you could do what you were planning on doing, based on Dragwyr’s recommendation.)[/li][li]A website you’re using is accessing a resource at Angelfire. I would assume you would have noticed any correspondence between a website visible in any tab and when the warning pops up, but then again I’ve worked tech support enough to not stake my life on that assumption.[/li][li]It’s not really the browser. You have malware which named itself “firefox.exe”. You never answered naita’s question about whether the warning event occurs only when you’re trying to use the browser. (Not a very likely explanation, but not impossible to rule out given the incomplete information.)[/li][/ol]
My apoligies naita, I thought I had answered your question. But apparently I didn’t. Here’s more info:
The add-ons are:
OpenH264 Video Codec by Cisco (automaticall isntalled by Mozilla)
Shockwave Flash 29.0 r0
Widevine Content Decryption for Google (currently disabled)
I’m also running Ghostery and NoScript extensions, with Malwarebytes (MWB) Premium running in the background.
I am looking back at the Malwarebytes reports, and the “Website Blocked” reports seem to correlate to when I’m looking at the SDMB, which is why I brought it here. There are a dozen or so reports of first thing in the morning (coffee before work) and later in the evening (relaxing before turning in). I recall two or three times seeing the MWB popup while on this site, which is why I raised the issue to see if any other Dopers were having the same trouble. I’ve cleared out the crap from my MWB log, to see if I can better track when/what page it happens on.
It really only happens when I’m using the browser. Now, on second thought, I’ve totally cleaned out the browser to see if it pings Angelfire while I’m away.
The next time it happens, and I’m here, I can provide a screenshot. Just gotta figure out where to host it.
Tripler
Thanks for the help–this may be helping multiple Dopers!