Browser hijacking

[Barney-R]

HELP!!!

Firefox appears to have been hijacked. Sometimes I can get to sites, but at other times I'm being redirected to

http://www.purchasereviews.net/donate.php

... which in turn quickly re-directs, via Google (or something claiming to be Google) and a very brief advert for WalMart, to

http://adf.ly/noscript.php?t=ck

... where yesterday there was a message saying I can't continue unless I enable cookies.

Today though, this has changed to a page "inviting" me to choose a "free gift" (of malware probably).

I first noticed this when I tried to use the BBC site, where every link had changed to the "purchasereviews" hijacker.

ClamTK finds nothing. I've tried to get AVG, but the download link there is hijacked too.

I'll be off line for a couple of days, but I'll be VERY grateful if someone can come up with a fix. If not, I'll have to ditch FireFox.

[carl4926]

what happens if you rename .mozilla to .mozilla-backup?Then start FF

[spiderpan]

I have the same problem

what happens if you rename .mozilla to .mozilla-backup?Then start FF

it seems to work, I used the "new" firefox for a while and the problem did'nt appear again
all we have to do is recover the bookmarks and reinstall the extensions

thank very much

and my apologies for my poor english

[Benibur]

I have exactly the same pb !?!

But i don't want to loose my ff profile !

Any idea of the cause ? any other solution ?

[carl4926]

I have exactly the same pb !?!

But i don't want to loose my ff profile !

Any idea of the cause ? any other solution ?

Save the latest .json file
Start a clean .mozilla and then import the .json

[vasa1]

Save the latest .json file
Start a clean .mozilla and then import the .json

I don't understand this ^^^. What exactly does it do?

[carl4926]

The .json file is more complete than say your bookmarks exported as a .html file.json will put your bookmarks back in place, including the bookmarks toolbar and also your cookies and login infoThe .json file can be exported or you can find a bunch of them in .mozilla/firefox/profile/bookmarksbackup

[csbened]

What is the cause of this ? How can be this achived on Ubuntu ? A virus ?

[ManamiVixen]

csbened No, more like a Firefox compatible malicious script. it essentialy modified Firefox by adding changes in the settings folder of the Users account. You don't have to worry if you have a Adblocker installed for Firefox.

[sandyd]

Ghostry probably helps too