Firefox open t.grtyi.com every time I start it. I have no startup page set and can find nothing in files or registry. How to I stop this hijack from happening?
File and registry have been scanned for the domain name and the IP address 107.178.242.109. I blocked the IP in my Windows firewall, but Firefox is still trying to open it. It is a tracking site. Uninstalling Firefox makes it go away, but it reappears in a day or two.
All Replies (4)
Hi,
The first thing to try is to check if this is the result of an extension that's installed:
- Click the menu button
and choose Add-ons.
- In the Add-ons Manager tab, select the Extensions panel.
- Select the toolbar you wish to remove.
- Click the Remove button.
- Click "Restart now" if it pops up. Your tabs will be saved and restored after the restart.
After that, you can try one of the programs below to scan for malware on your computer:
- Microsoft Safety Scanner
- MalwareBytes' Anti-Malware
- Anti-Rootkit Utility - TDSSKiller (for more info, see this alternate TDSSKiller download page)
- AdwCleaner (for more info, see this alternate AdwCleaner download page)
- Hitman Pro
- ESET Online Scanner
Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista if you don't already have one. Windows 8/10 have antivirus protection built-in.
Hope that helps!
I agree. Also,
Start Firefox in Safe Mode {web link} by holding down the <Shift> (Mac=Options) key, and then starting Firefox.
A small dialog should appear. Click Start In Safe Mode (not Refresh). Is the problem still there?
I have tried Nearly all of those or ones that do the same thing. Malwarebytes and Avast both check for rootkits, for example. Recall that I said uninstalling Firefox and reinstalling makes it go away — for a while. Some site I am visiting is my suspect.
Using Agent Ransack to fully scan the C drive for even party of the domain name find nothing except previously stored cookies. All cookies were removed. It’s hiding itself very well. The domain is grtyi.com.
I do not consider it solved yet, but after the Malwarebytes nightmare a couple of days ago, it seem to no longer attempt to open the site. Malwarebyes was uninstalled and reinstalled and it will still detect the site as malware if I enter the URL manually, but Firefox is does not seem to be attempting to open it. Malwarebytes would always pop up the warning every time I started Firefox until I blocked it with Windows Firewall. It's unblocked now and I await the next attempt of something trying to open grtyi.com. This had been going on for many weeks. I am flummoxed by the coincidence.
BYW, frtyi.com is listed as another URL on some sites as malware from the same tracking "service".
You can see info about it here: http://t.grtyi.com.hypestat.com/