Firefox - additional tabs popping up

[bigp76460]

Okay, downloaded and run.  Sorry about the issue with the URL, still relatively new at this.

[essexboy]

Could you now run Firefox to see if the alerts persist

[bigp76460]

Sure, I usually have Firefox on at work anyway, so I will run it for a while and see if the problem persists.

[bigp76460]

Yes, I have still have had a few of those additional windows pop up, mostly the ones with about:blank in the address bar. I have not received any alerts from Avast since running the program, but those didn't pop up all that much before, so it could be they stopped or I just haven't been lucky enough to get one yet.

[bigp76460]

Been keeping track of the sites that have popped up in additional tabs this evening.  I received no alerts from Avast, but here is what popped up between 4pm and 11pm my time this evening.

hxxp://www.en.tv-in-pc.com/?source=ccfb09vjzde6llbe58nsthyqfb&player=P2P40921274&tid=P2P40921274
about:blank
about:blank
hxxp://www.satellitedirect.com/?hop=pplmedia
about:blank
hxxp://cem.easykits.org/index3.html

Again, I don't know if this will help, but those sites had been some of the ones that popped up in the past as well.

[essexboy]

That sounds like they are in the user.js which my tools do not look at

So lets have a look see

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
  
• Copy the content of the following codebox into the main textfield:
  

Code: [Select]

:contents
C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\hpyocceq.default\user.js


• Click the Look button to start the scan.
  
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

[bigp76460]

here is the result I got, I think I had to have done something wrong with this result, but here it is

[essexboy]

SystemLook 30.07.11 by jpshortstuff
Log created at 10:42 on 06/07/2012 by Matt
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

========== contents ==========

C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\hpyocceq.default\user.j - Unable to open file.

-= EOF =-

For some reason the s was left off of the .Js

Could you re-run and ensure that the whole path is entered

[bigp76460]

Okay, fixed that issue, mistake on my part there.  Here is the new report I got.

[essexboy]

OK it's not in there

So lets try this

At the top of the Firefox window, click on the Firefox button (Tools menu in Windows XP) and then click Options On the menu bar,
click on the Firefox menu and select Preferences...
At the top of the Firefox window, click on the Edit menu and select Preferences
At the top of the Firefox window, click on the Tools menu and select Options...
On the menu bar, click on the Firefox menu and select Preferences...
At the top of the Firefox window, click on the Edit menu and select Preferences...
Select the General panel.
In the Home Page text box, replace all pipes (|) with %7C
Click OK to close the Options window
Click Close to close the Preferences window
Close the Preferences window

[bigp76460]

This is where my noviceness will kick in, the homepage selected for Firefox to start from is hxxp://www.google.com/ig .   Not sure what is meant by removing pipes in that address.

[bigp76460]

Tripped another Avast alert with one of the tabs that pop up, this time the site was hxxp://tergosales.com that tried to pop up but was caught by Avast.

[bigp76460]

The additional tabs continue to be a problem (just had  this site pop up   hxxp://visibleweb.com/creditscore/index101.php?src=mt&kw=.yahoo.com).  Should I go all the way back to the beginning and reinstall all of the previous virus detection programs, just in case I may have missed something, or did something wrong to begin with.  Just not sure what my next step should be.

[essexboy]

And this is in Firefox only ?

Could you try IE to see if the same occurs

[bigp76460]

I have run IE some recently, haven't had any problems with it, the tabs only seem to be occurring when using Firefox.