(SOLVED) Firefox hacked by someone? Uninstalled Firefox to resolve

[Upton]

I hope the title is sufficient to start, I really don't know what is going on! First off I know very little about "Networking" (now sorry to say).

This all happened around 20 November 2021, I've even forgot exactly what happened but everything stopped working, I couldn't get logged logged in to the Internet so I started looking around on the system and started getting notes about what a rotten person I was, because I used a program called "StartPage" as a frontend for Firefox its fast and I really like it. anyway this person went on to say I didn't help out on Firefox or make any donations over and over on different pages that popped up in different ways but you get the drift, No way I could answer him so I just closed down thinking that maybe he was a little under the weather or whatever, I almost forgot, he had this full page character drawing of a impish looking bear holding a handkerchief over his face.

I tried everything I could think of to get back on line since then to no avail everything I tried to do with the network didn't work and I didn't know if it was me or him, then a couple hours ago I had an idea, I uninstalled Firefox and loaded Midori it's a basic browser, very basic but it worked.
Question Now what do I do, my Network consists of 2 little monitor characters thats it?

[GELvdH]

You are correct, apparently you got hacked. The question is how did you get hacked. You said that you have a network? How many computers? If you could copy and paste the following script into your terminal window and than copy and paste the output into your next posting. If you have more than one cpu do that with all of them.

inxi -Fxxxrz

Lets see where you go from there.
How do you have your network configured?

[gittiest personITW]

Seriously?
With this vague snippets of jumbled information you come to the conclusion that there is a keylogger or someone has been hacked?

How about we start from the beginning.....
What were you looking around on the system for, and what did you find?
Was it a webpage?
So you managed to connect to the internet? Even this is not clear.
Was it someone on your network? Is this a public network or work or home?
Also worth giving us the output of the following as asked previously:

Code: Select all

inxi -Fxxxrz

Please don't jump to conclusions just because someone says something in the title - and for the greatest insult, this is not a Windows forum.

[MikeNovember]

Hi,

StartPage is not a priori guilty. It is a meta-search engine.

You might have installed a naughty extension, or been trapped and went on a website that corrupted your Firefox.

There is no need to uninstall Fiefox; you just need to delete your Firefox profile (it is normally in your "/home", under ".mozilla"; with CTRL+H you can see hidden files) and your cache.

So,

- delete ".mozilla"
- delete ".cache".

Next step is to avoid to be caught once more:

Use "/etc/hosts" as an IP address filter:
* Copy your '/etc/hosts' file to your home '/home/$USERNAME' where $USERNAME is your username.
* Rename the copied file to "hosts_base.txt".
* Launch a text editor, for example xed, and copy the following code into it:

Code: Select all

#!/bin/bash
# anti malware, anti spam and anti cryptominers hosts file
# system wide connections
sudo mv /etc/hosts /etc/hosts.bak
# malware lists
wget "https://raw.githubusercontent.com/davidonzo/Threat-Intel/master/lists/latestdomains.piHole.txt" -O hosts1.txt
wget "https://urlhaus.abuse.ch/downloads/hostfile/" -O hosts2.txt
wget "https://curben.gitlab.io/malware-filter/urlhaus-filter-hosts.txt" -O hosts3.txt
# spam list
wget "https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts" -O hosts4.txt
# no coin lists
wget "https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt" -O hosts5.txt
wget "https://raw.githubusercontent.com/greatis/Anti-WebMiner/master/hosts" -O hosts6.txt
# merge in one file
cat hosts_base.txt hosts1.txt hosts2.txt hosts3.txt hosts4.txt hosts5.txt hosts6.txt > hosts
sudo mv hosts /etc/hosts
rm hosts1.txt
rm hosts2.txt
rm hosts3.txt
rm hosts4.txt
rm hosts5.txt
rm hosts6.txt
# DNS cache flush
sudo systemd-resolve --flush-caches
read -s -n1 -p "Press any key to continue..."; echo

* Save the file in your '/home/$USERNAME' and name it "update_hosts.sh".
* With your file manager, select the file, right click, properties, permissions and make it executable.
=> When you will run this file, it will update your '/etc/hosts' file.

Use some extensions, launch Firefox and install them:

* HTTPS everywhere, https://addons.mozilla.org/en-US/firefo ... verywhere/

* Privacy bagder, https://addons.mozilla.org/en-US/firefo ... -badger17/

*uBlock Origin, https://addons.mozilla.org/en-US/firefo ... ck-origin/; in its options, configure it as follows:
Parameters page, select the following: "Hide space reserved to blocked elements"; "Use contextual menu if possible"; "Activate advanced functionalities"; "Inactivate actions prediction on the network"; "Inactivate hyperlink audit"; "Block CSP reports".
Filters Lists page:select the following:
* "Update the lists of filters selected automatically",
* "In addition, use the aesthetic rules",
* in "Integrated" check the 5 lists,
* in "Advertising" check "AdGuard base", "EasyList"
* in "Confidentiality" check "AdGuard Tracking Protection" and "Easy Privacy",
* in "Malicious domains" check "Spam404"
* in "Nuisances" check "Fanboy's Annoyances"
* in "Regions, languages" check the list corresponding to your language / country
* add the following two specific lists:
. "Fanboy's Enhanced Tracking List", https://secure.fanboy.co.nz/enhancedstats.txt
. "StevenBlack / hosts", https://raw.githubusercontent.com/Steve ... ster/hosts
[NB: The lists defined above are complementary to those in the hosts file.]

Regards,

MN

[Upton]

I'll mark this SOLVED. Evidently Firefox had some people problems. When I left here I went home and made dinner, then I started up the computer and everything was back to normal (Firefox was reinstalled by someone and almost everything was corrected).
I believe I will look into learning about Firewalls and how to install them correctly. Thanks to those people who tried to help and the people with the negative innuendos/accusations know how I feel about that. I am not technically inclined in computers to a great extent, that is why I came here, I did mention that I knew very little about networks, and unfortunately I have to continue the way I write so people who care can understand the problem.

Special thanks to MN, that took a lot of effort on your part, I really appreciate it and will definitely look into doing the things you suggested.