Browser Auto-Launch Issue (Healthcare Platform Access)

[salandro]

Hello my fellows fellas,


I'm experiencing a strange issue with Firefox. browser keeps automatically launching a specific healthcare portal URL without any user interaction. The browser spontaneously opens that url multiple times throughout my session.


I've run security scans using Windows Defender and Malwarebytes, but both tools report the system as clean. This peculiar behavior started appearing after I performed a fresh OS installation on my medical workstation last week.


The symptoms are:

• Browser launches automatically every 15-20 minutes
• Always opens the same VR therapy platform URL
• Happens even when browser is completely closed
• No suspicious processes visible in Task Manager
• System performance otherwise normal

Background( if can be helpfull):

• Clean Windows 11 Pro installation
• Firefox version 126.0.1
• Medical workstation used for patient data access
• All software installed from official sources
• No browser extensions installed yet

What I've already tried:

• Full system antivirus scan (clean results)
• Checked startup programs (nothing suspicious)
• Reviewed browser settings and homepage configuration
• Cleared all browser data and cookies

Could this be some form of persistent malware that's avoiding detection or might there be a Windows configuration issue causing this automated browser behavior?



Thanks in advance for any insights!

 

[icotonev]

Hello..! Welcome to MalwareTips..!

My name is icotonev and I'm here to help you remove malware ..! Before we begin, please note the following:

• First, please keep in mind most of us at MalwareTips volunteer our assistance for your benefit in your time of need. Please try to match our commitment to you with your patience toward us.Logs from malware diagnostic or removal programs can take some time to get analyzed. Also, have in mind that all the experts here are volunteers and may not be available to assist when you post. Please, be patient, while I analyze your logs.
• It is important to not run any tools or take any steps other than those I will provide for you.Also, do not uninstall or install any software during the procedure, unless I ask you to do so.
• Cracked or pirated programs are not only illegal, but also can make your computer a malware target. Having such programs installed, is the easiest way to get infected. Thus, no need to clean the computer, since, soon or later, it will get infected again. If you have such programs, please uninstall them now, before we start the cleaning procedure.
• Please perform all steps in the order they are listed. If things are not clear or you experience problems be sure to stop and let me know.
• Please attach all logs into your post unless otherwise requested.
• When your computer is clean I will let you know, provide instructions to remove tools and reports, and offer you information about how you can combat future infections.
• If you do not reply to your topic after 3 days I will assume it has been abandoned and I will close it.

Please follow the following instruction ..:

Download Farbar Recovery Scan Tool and save it to your desktop. --> IMPORTANT

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.
If English is not your primary language, right click on FRST.exe/FRST64.exe and rename to FRSTEnglish.exe/FRST64English.exe

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach the content of these two logs in your next reply.

---------------------------------------------------

In your next reply, please include:

• FRST.txt
• Addition.txt

 

[icotonev]

Do you still need help..? If you have not replied within 24 hours I will assume you have abandoned the Topic and it will be closed.

Thank you..!

 

[icotonev]

Due to lack of activity, this topic is now closed. You requested help but did not respond to follow-up questions or instructions within three days and your topic has been moved here.
If you still need help, open a new topic, and wait for a new helper.