Browser hijacking or 'pop-up phishing' involves fraudulent messages that unexpectedly pop up for users when they are surfing the web. In many cases, cyber criminals infect otherwise legitimate websites with malicious code that causes these messages to appear when people visit them.
The content of these messages themselves is what makes them so effective. Often, they present the unsuspecting website visitor with some kind of fraudulent warning from a well-known reputable company, typically about the security of their computer. Then they either prompt the visitor to download some tool to fix the problem, such as an antivirus application which turns out to be malware itself, or to call a fraudulent phone number for "support." The abnormal behavior of the message itself and the inability to close or navigate away from them, makes the fraudulent messages appear to be somewhat credible.
This guide will demonstrate how to rid yourself of the worrisome pop-up message, and then perform some simple operations to get Mozilla Firefox back to normal.
Tools You'll Need:
A paperclip
iPhone charging cable
Access to a computer with iTunes installed
Any other non-consumable tools needed
Comment out tools section if no tools are necessary
-->
Supplies You'll Need:
Zip ties
Any other consumable supplies
Comment out supplies section if no supplies are necessary
-->
Before You Begin:
You must have access to a computer with iTunes installed.
You must have that thing for the other thing so you can do the thing.
Each individual prereq should have its own box like this. Not all will contain multiple links.
Comment out prerequisites section if no prereqs are necessary
-->
But isn't this just a Pop-Up?
This guide focuses on hijacked browsers. While Pop-ups can be part of a hijacked browser, it takes a bit more work to clean a hijacked browser than a pop-up. Pop-ups are another beast entirely and covered in another guide.
This guide provides troubleshooting support for Windows and macOS. Select your operating system to proceed.
Windows
Windows runs on computers produced by multiple companies, such as Lenovo, Asus, Dell, Toshiba, Hewlett Packard, Acer, and Sony.
macOS
Apple is the only company that makes macOS computers.
2. Terminate Firefox to Remove Hijack
With a noisy, annoying, or even impossible to close pop up on Firefox you're going to need to force the application to quit before you can move on.
The following steps can be used to terminate any browser, but the examples below will demonstrate using Internet Explorer.
Open the Windows Task Manager.
Using the Taskbar
Using your right mouse button, right-click on your Taskbar. Then select Task Manager from the menu.
Using a Keyboard Shortcut
On your keyboard use Ctrl+Shift+Esc.
Using the Lock Screen
You can do Ctrl+Alt+Del on your keyboard, then click on Task Manager.
Select your browser, then select End Task.
If the Task Manager is in Basic View
If the Task Manager is in Advanced View
When you next open your browser, if you are asked to restore a session / pages, select No, or close the message.
3. Clear Firefox Browser History
Open Mozilla Firefox.
Click the Menu button in the top right of the screen.
Click on Options.
Click on Privacy & Security.
Click the Clear History button located unther the History category.
Select the time range you wish to clear.
Click the Details button to expand them.
Choose the item categories you wish to clear.
SettingCheckboxBrowsing & Download HistoryChecked
Browsing History - While you browse Your browser will keep track of every page you visit, to try to make it easier to return. This can become corrupt due to modern active web pages.
Download History - These are a list of files you've downloaded recently. It is entirely safe to delete, or keep this list, as it won't affect pages. Checking this option does not delete the files you've downloaded, just the list the browser keeps.
Form & Search HistoryCheckedInformation from entering forms online, such as your name, address, or other filled in information. This does not affect how a page loads, and can slow you down on your most commonly used pages.CookiesCheckedCookies are how websites 'know' you when you visit them multiple times. This file can become corrupt, and simply downloading a new one can fix many problems.
You will have to log back into any pages you use, such as mail or social media.
Active LoginsCheckedActive logins are sites that you are currently logged into that you have asked to remember that you are logged into. Clearing them just logs you out of these sites.Offline Website DataUncheckedIf you've allowed it, a website can store files on your computer so that you can continue to use it when you are not connected to the Internet.Site PreferencesUncheckedSite specific preferences, including the saved zoom level for sites, character encoding, and the permissions for sites.
Click the Clear Now button.
4. How to Remove Extensions from Firefox
Some browser extensions and addons can cause your browser to behave abnormally. They can cause your home page to navigate elsewhere, or even through popups. Removing any unwanted, unnecessary, or unused browser extensions and addons can get your web browser running properly again.
Open Firefox and click on the three lines in the upper right hand corner.
Click on Add-ons.
Click on Extensions on the left.
The following steps can be repeated to remove multiple browser extensions.
Then click on Remove for the extension you want to remove. If you don't remember installing the extension, using it, or know it its bad its a good practice to remove it.
If you accidentally removed something, click on Undo.
You might get a new tab pop up upon removal, close the tab by hitting the X.
Extensions are now gone, you may have to restart your browser for it to take effect. If you removed a malicious extension, it might have changed your homepage.
5. Clear Browser Hijack from Firefox
If your browsing experience hasn't returned to normal, the next step is to verify that all Firefox settings are where they should be in order to provide you with the search experience you're familiar with. If any settings were previously 'hijacked' by a malicious extension and were not reverted back to what they were originally set to, your experience may still not be right.
Open Firefox.
Enter about:plugins into address bar and hit enter, then review your plug-ins and remove any that are malicious.
Enter about:addons into the address bar and hit enter, then click Extensions.
Review your extensions and determine if any are malicious. Remove those that are.
Click the Menu button in the top right of the screen.
Click Options.
Click Home. If you have a custom URL set verify it is not malicious.
Click the Start Menu.
Search for Firefox and right-click the result.
Select Open File Location.
Right-click the Firefox shortcut and select Properties.
Click the Shortcut tab and verify that the Target only contains the path "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" with nothing after it. Click OK when done.
Open Firefox and verify your homepage is correct.
Test Firefox for Continued Issues
Open your browser and take note if it shows your normal home page or search page.
Test your ability to search the web like you normally would and make sure there are no strange popups.
If you're still having issues you may have a PUP.
6. What Are Windows PUPs
Potentially unwanted programs, or "PUPs", often arrive bundled with your computer or can tag along with another software program you meant to install. Most times, they are snuck into the EULA as a "Recommended Offer" that many of us are so accustomed to just click right through. Lots of these types of programs end up being junkware that your computer will not benefit from. Unfortunately, some of these programs can add unwanted browser toolbars or extensions that can clutter your browser, track your web browsing, show additional advertisements, or change your search page and other related settings. Usually, unless these types of programs are removed, they will continue causing issues with your web browsing experience.
Remove PUPs via Windows 10 Settings
Click Start (1), then click Settings (2).
Next, Select Apps.
Scroll down and locate the app you wish to remove, and click on Uninstall.
Carefully read any prompts in case there are special instructions. Proceed until the application is removed.
Some applications may require that you reboot.
Remove PUPs via the Control Panel
On your keyboard push and release the Windows Key and R at the same time.
You will see a Run window open up. Type in appwiz.cpl then click on OK.
Locate a program you wish to remove within the list, click once on it to highlight it, then click on Uninstall.
Carefully read any prompts in case there are special instructions. Proceed until the application is removed.
Some applications may require that your computer be restarted to complete the uninstallation.
Test your browser after removing any PUPs from your machine. This may require you to restart your browser or your computer beforehand depending on what was removed.
7. Continued Browser Hijack Issues
Unfortunately, your browser issue cannot be resolved via basic troubleshooting steps. Your machine will require hands-on service to determine the root cause of your issues.
8. Force Quit Firefox to Remove Hijack
With a noisy, annoying, or even impossible to close pop up on Firefox you're going to need to force the application to quit before you can move on.
Select the Apple menu, then Force Quit.
Highlight Firefox in the list, and select Force Quit.
You'll be prompted if you're sure, select Force Quit.
9. Check Homepage Settings for Hijacking
Your web browser's homepage settings dictate the websites that are loaded when it is opened up. As integral as these settings are to your browsing experience they can be hijacked by malicious code and made to disrupt your online experience.
Let's check your settings and make sure they're okay.
Open Firefox and click on the three lines in the upper right hand corner.
Click on Preferences.
Click on Home. If there is a custom URL you do not want, you can change it. If there's a URL here you don't recognize you should change it.
If after performing the change, you notice no difference and the website is still appearing you'll need to get rid of an extension.
10. How to Remove Extensions
Some browser extensions and addons can cause your browser to behave abnormally. They can cause your home page to navigate elsewhere, or even through popups. Removing any unwanted, unnecessary, or unused browser extensions and addons can get your web browser running properly again.
Open Firefox and click on the three lines in the upper right hand corner.
Click on Add-ons.
Click on Extensions on the left.
The following steps can be repeated to remove multiple browser extensions.
Then click on Remove for the extension you want to remove. If you don't remember installing the extension, using it, or know it its bad its a good practice to remove it.
If you accidentally removed something, click on Undo.
You might get a new tab pop up upon removal, close the tab by hitting the X.
Extensions are now gone, you may have to restart your browser for it to take effect. If you removed a malicious extension, it might have changed your homepage.
11. Clear Firefox Browser History on Mac
We want to make sure that your browser is not holding onto some outdated or bad data in the form of an old cookie, cached version of the website it may be trying to load, etc. Clearing this data allows your browser to load the websites you're asking it to load freshly as if it had never been there before.
Open Firefox, and select the Menu in the top-right corner.
Click on Options.
Click on Privacy & Security.
Click the Clear History button located unther the History category.
Select the time range you wish to clear.
Click the Details button to expand them.
Choose the item categories you wish to clear.
SettingCheckboxBrowsing & Download HistoryChecked
Browsing History - While you browse Your browser will keep track of every page you visit, to try to make it easier to return. This can become corrupt due to modern active web pages.
Download History - These are a list of files you've downloaded recently. It is entirely safe to delete, or keep this list, as it won't affect pages. Checking this option does not delete the files you've downloaded, just the list the browser keeps.
Form & Search HistoryCheckedInformation from entering forms online, such as your name, address, or other filled in information. This does not affect how a page loads, and can slow you down on your most commonly used pages.CookiesCheckedCookies are how websites 'know' you when you visit them multiple times. This file can become corrupt, and simply downloading a new one can fix many problems.
You will have to log back into any pages you use, such as mail or social media.
Active LoginsCheckedActive logins are sites that you are currently logged into that you have asked to remember that you are logged into. Clearing them just logs you out of these sites.Offline Website DataUncheckedIf you've allowed it, a website can store files on your computer so that you can continue to use it when you are not connected to the Internet.Site PreferencesUncheckedSite specific preferences, including the saved zoom level for sites, character encoding, and the permissions for sites.
Click the Clear Now button.
Test Firefox for Continued Issues
Open your browser and take note if it shows your normal home page or search page.
Test your ability to search the web like you normally would and make sure there are no strange popups.
If you're still having issues you may have a PUP.
12. What Are Mac PUPs
Potentially unwanted programs, or "PUPs", often arrive bundled with your computer or can tag along with another software program you meant to install. Most times, they are snuck into the EULA as a "Recommended Offer" that many of us are so accustomed to just click right through. Lots of these types of programs end up being junkware that your computer will not benefit from. Unfortunately, some of these programs can add unwanted browser toolbars or extensions that can clutter your browser, track your web browsing, show additional advertisements, or change your search page and other related settings. Usually, unless these types of programs are removed, they will continue causing issues with your web browsing experience.
Remove PUPs on macOS
Open the Finder from the dock.
Click on Applications on the left.
Drag the app you wish to remove to the trash can.
Right click on the trashcan and click Empty Trash.
Test your browser after removing any PUPs from your machine. This may require you to restart your browser or your computer beforehand depending on what was removed.
13. Continued Browser Hijack Issues
Unfortunately, your browser issue cannot be resolved via basic troubleshooting steps. Your machine will require hands-on service to determine the root cause of your issues.
.png)
