malware not in add-ons
Note': Such problems do exist when all add-ons disabled and in safe mode Firefox (by "refresh firefox" option).
When Firefox is started, an advertising window would occur. The hijacked address: https://winxuan[.]jd[.]com/?cu=true&utm_source=kong&utm_medium=tuiguang&utm_campaign=t_1000623798_&utm_term=19dca519301545a6b711007896b3b333 hijacked address
Also, Ctrl + Shift + N was hijacked to the same window.
The window is strange: When I click the "+" button to open a new tab, the new tab directly opens in the previous window.
Perhaps something in Firefox itself was maliciously modified, I guess.
I am using 88.0.1 (64-bit) version Firefox on Win10.
Modified by Andrew
الحل المُختار
Could you check to make sure your home page was not modified? See: How to set the home page
Another possible vector is a modified shortcut. Normally your shortcut has a "Target" like this:
"C:\Program Files\Mozilla Firefox\firefox.exe"
but malware may add a URL to the target so that Firefox launches a page every time you use the shortcut.
Ctrl+Shift+N will re-open the last window you closed during your session, so I don't know whether you are just seeing that, or something specifically attached to Ctrl+Shift+N.
Read this answer in context 👍 1All Replies (2)
الحل المُختار
Could you check to make sure your home page was not modified? See: How to set the home page
Another possible vector is a modified shortcut. Normally your shortcut has a "Target" like this:
"C:\Program Files\Mozilla Firefox\firefox.exe"
but malware may add a URL to the target so that Firefox launches a page every time you use the shortcut.
Ctrl+Shift+N will re-open the last window you closed during your session, so I don't know whether you are just seeing that, or something specifically attached to Ctrl+Shift+N.
jscher2000 said
Could you check to make sure your home page was not modified? See: How to set the home page Another possible vector is a modified shortcut. Normally your shortcut has a "Target" like this: "C:\Program Files\Mozilla Firefox\firefox.exe" but malware may add a URL to the target so that Firefox launches a page every time you use the shortcut. Ctrl+Shift+N will re-open the last window you closed during your session, so I don't know whether you are just seeing that, or something specifically attached to Ctrl+Shift+N.
Thanks for your reply. Firefox now works fine. The shortcut was checked and was not modified. So it should be a malicious add-on :) (which is common and I'll find it). I didn't realize Ctrl+Shift+N would open the last closed window (usually to open a new private window in other browsers). QAQ