This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

firefox keeps on trying to open http://globalcloudcontroller.com/message.php?subid=3

  • 7 replies
  • 15 have this problem
  • 5 views
  • Last reply by TmartinT

more options

before i installed adblock plus, i had a problem of firefox keep on wanting to open http://globalcloudcontroller.com/message.php?subid=3 .

it was trying to open itself a lot of instances but my trend micro keep on blocking it, it happened only today. Can anyone help me with this??

before i installed adblock plus, i had a problem of firefox keep on wanting to open http://globalcloudcontroller.com/message.php?subid=3 . it was trying to open itself a lot of instances but my trend micro keep on blocking it, it happened only today. Can anyone help me with this??

All Replies (7)

more options

Do a malware check with a few malware scan programs.
You need to use all programs because each detects different malware.
Make sure that you update each program to get the latest version of the database.

See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and What to do when searches take you to the wrong search website

more options

Hello,

I tried above tools but didn't got sucess. can anyone tell me what is the solution for above problem.

It's not only with firefox it also open popup when i start IE/Opera.

Please help me.

more options

Hello mukund_ce,

                                       if the advise from cor-el was bad news ,

hasn't give any salvage , here's some more.

You should read the Windows Defender Home Page .

I've done some research ( on the globalcloudcontroller link)

Don't click it on your system , but that's to late an advise .

The XP on your system , when was it updated last time ?

As we know , from the good old DOS day's :

format C:

And the hijacker is killed by his victim .

Well , ... of course "your" XP also ...

Its been hijacked , because XP runs on its last breath .

Re install and try to keep it updated and from harm away.

Handle it , as you would do with a now very expensive old timer !

I'm afraid , this is the only way .

PS could you give some info about your hardware ?

Maybe an other OS could give it a lease on new life.

Greetings

Martin

more options

Hello Martin,

My Xp is up to date with latest windows updates and also i have trend micro firewall so my firewall keep it blocked (Popup will not be open due to firewall. Thank to God !! )

I also scanned my system with windows defender.

Is format of XP is only solution for it ?

I checked my system with "netstat -ab" command and it gives me that spoolsv.exe opened that all pop up windows. Is it so ?


-- Mukund

more options

Hello Mukund ,

                           Sorry can't make sense of last phases , 

English isn't my first language , I'm Flemish (Dutch) of origin.


and it gives me that spoolsv.exe opened that all pop up windows. Is it so ?


Glad to hear that the "oldtimer" is at least updated  ;)

Now for the issue itself ; its not a problem of getting pop-up's .

It's far worse , you have an "intruder" , the initiator goal is to stay stale , hidden , for the owner AND the OS ("your" XP) AND for any defender or analyzing software you may have installed !

That it became visible for once , means in fact 2 things :

it has flaws on it own :)

it has done some unintended damage.

The link in itself , isn't the cause or the offender .

Its one of the means by witch it communicates with his initiator .

Its nearly impossible to now how you got that intruder installed .

In most cases it changes some rules , ini , configure , DLL , files . (there are many more)

So when your defender or analyzing soft doesn't detect it ,

then maybe , they are unaware of it's existence .

That's why one needs to keep updated with there rules .

Every day there is a new pile of malware to investigate.

Maybe you should post a question towards Windows Defender and Trend Micro .

In any case I'm SURE that you have an intruder .

What to do on first hand ?

Install a Net log program , and when connected , keep a healthy eye

on its results , keep those logs , they might help Trends Micro or

Windows Defender localize the bad guys !

Greetings

Martin

more options

Hello Martin,

I solved this problem. After investigation, I found that pop-up comes only when i logged with specific user. I just changed my user name and will delete old user from windows(Including specific configuration as well)

One more thing i observed is, It's not only one site that malware try to access but it also try to open another IP address. I observed all activities via network monitor program (WIRESHARK)

Any ways, My computer is safe now.

Thanks for you help

-- Mukund

more options

your welcome

It's possible , only your profile folder infected .

But don't be to sure , keep an eye on your net traffic .

And sure , it wants to connect to other IP's , when it succeeds ,

thousands !

And you being polled by your country's security services  :)

Martin