FF 2.0 hijacked??

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I just noticed that my home page, www.finance.yahoo.com seem to have
been hijacted to www.kr.yahoo.com  (Korean site). It was ok this
morning when I turned off my computer, and I use the browser a lot. Is
anyone else seeing anything like this?

Any suggestions on how to fix it?

Thanks,
--
I filter all messages from google groups.

Re: FF 2.0 hijacked??

Caesar Romano wrote:
Quoted text here. Click to load it

try emptying the cache and cookies

--
*IMPORTANT*: Sorry folks, but I cannot provide email
help!!!!

Warning: Private emails sent to me may become public

Peter Potamus & His Magic Flying Balloon:
http://melaman2.com/cartoons/singles/mp3/p-potamus.mp3
http://www.toonopedia.com/potamus.htm

Re: FF 2.0 hijacked??

On Tue, 07 Jul 2009 14:40:43 -0700, Peter Potamus the Purple Hippo
hijacked??:

Quoted text here. Click to load it

Thanks for the good suggestion. I tried that first thing, but it
didn't work.
--
I filter all messages from google groups.

Re: FF 2.0 hijacked??

Peter Potamus the Purple Hippo wrote:
Quoted text here. Click to load it

And/or:

C:\>ipconfig /flushdns

--
Mark Warner
MEPIS Linux
Registered Linux User #415318
...lose .inhibitions when replying

Re: FF 2.0 hijacked??

Mark Warner wrote:
Quoted text here. Click to load it

Also possible an altered or added entry in the Hosts file.



Re: FF 2.0 hijacked??

Quoted text here. Click to load it

http://tinyurl.com/mdvzve
Hi, Fred. Here is what you were looking for in alt.cracks. Full &
Free.
ATB.
sandy58
aka
Sandy in Scotland

Re: FF 2.0 hijacked??

On Tue, 7 Jul 2009 19:43:31 -0500, "GlowingBlueMist"

Quoted text here. Click to load it
I thought Hosts just excluded urls.  Is it possible to redirect also
with a Hosts file?

Re: FF 2.0 hijacked??

mm wrote:
Quoted text here. Click to load it

you can use a Hosts file in two ways.  As you said, to
exclude urls.  The other is to act as a DNS Server, and
have the site load faster. For instance, when I ping
google, I get a numbered site of 74.125.45.100

so, if I put in my Hosts file:

74.125.45.100  google.com

then I will be able to go to google a lot faster

--
*IMPORTANT*: Sorry folks, but I cannot provide email
help!!!!

Warning: Private emails sent to me may become public

Peter Potamus & His Magic Flying Balloon:
http://melaman2.com/cartoons/singles/mp3/p-potamus.mp3
http://www.toonopedia.com/potamus.htm

Re: FF 2.0 hijacked??

On Sun, 12 Jul 2009 23:15:36 -0700, Peter Potamus the Purple Hippo

Quoted text here. Click to load it

Wow. I'll bet saying   C:\>ipconfig /flushdns    won't do anything to
overcome that if there is a forged entry in the Hosts file.


Re: FF 2.0 hijacked??

mm wrote:
Quoted text here. Click to load it

True, but a quick viewing of the file with "notpad", "wordpad" will show if
any entries on the left side of the list is not the default (block this
site) of 127.0.0.1



Re: FF 2.0 hijacked??


[snip]

Quoted text here. Click to load it

Sometimes you will have to scroll down to see those entries.

(funny that the badware is actually the one not misusing the
functionality of the hosts file)



Re: FF 2.0 hijacked??

Quoted text here. Click to load it

I've seen similar, but not this particular one.

Quoted text here. Click to load it

Try to reset your homepage in FF.

If that doesn't work (or is reset again after a reboot) then you've probably
picked up some malware somewhere, so I'd suggest a scan with spybot (or
similar).

Whislt it won't help with the issue at hand, why are you still using FF 2
when FF 3 has been out for ages?

Quoted text here. Click to load it

Hope this helps.
--
Brian Cryer
www.cryer.co.uk/brian


Re: FF 2.0 hijacked??

Re FF 2.0 hijacked??:

Quoted text here. Click to load it

Thanks to all for the suggestions. The solution that I found to work
in my particular situation was to reinstall FF 2.0 *over* the current
installation.  Before that I tried to restore my profile using
MozBackup,  http://mozbackup.jasnapaka.com/ but that didn't help.

Mark Warner: I didn't get a chance to try  ipconfig /flushdns as I had
solved the problem before I read your suggestion. However, if this
happens again, I'll give that a try first.

Thanks again to all for your help.
--
I filter all messages from google groups.

Re: FF 2.0 hijacked??

Caesar Romano wrote:
Quoted text here. Click to load it
Possibly the problem is an add-on rather than with FF itself or the Windows
OS.

You might try starting FireFox in it's own "safe" mode and see what you get
if you then try and go to the finance site.  The FF Safe Mode, at least on
newer versions, has a list of options where you can turn off add-ons and
reset various sections of FF.

If you use the "Make Changes and Restart" option it starts the normal FF but
with your changes permanently active, "Continue in Safe Mode" option only
makes a temporary change to that instance of FF.



Site Timeline