"Profile Error Occurred" - Message On Opera Startup
-
burnout426 Volunteer last edited by
@tag Looks like Windows Defender has some false positives right now. Make use of the exclusions for Windows Defender to work around things for now.
-
tag last edited by
Burnout426 - I appreciate your attempt, but although I know how to add an exclusion, it seems to me that you missed a big part.
I haven't used Opera in more than a week. It's not been opened - at all.
I was working on graphics all day (more than 7 hours) when the first error message popped up.
That part alone has me scratching my head as to why, suddenly, Opera, for the first time in years that I've had Opera installed, did I have a problem. And it's with the "developer" version - not the standard Opera.
Further, "Foxiebro" was specifically identified in the dll. It wasn't something "standard" that was blocked of Opera. It was a very specific file with a very specific malware attached. Foxiebro has been around a while. So it's not like there would be a false positive because it's new.
If Defender specifically identified Foxiebro, and, Opera was unable to complete an install that it was performing when the browser was not open, there is NO way I would add an exclusion for that file.
After screwing around for a couple of hours, I ended up restarting into Safe Mode and was finally able to delete everything related to Opera.
Again, that too told me that somehow Opera got infected. I still like Opera. But I'm not going to reinstall until I've seen that Opera developers have specifically addressed that security issue. I'm betting that a hacker found a backdoor to Opera, slipped in the malware and that' what caused my issue. So I have no desire to reinstall until know for certain that Opera has been cleaned.
I run a very tight security with my machine. I've been developing Web sites for more than 20 years and security has always been an issue. I haven't had an infection (until this) for years. I plan to keep it that way. -
blackbird71 last edited by@tag said in "Profile Error Occurred" - Message On Opera Startup:
...
Further, "Foxiebro" was specifically identified in the dll. It wasn't something "standard" that was blocked of Opera. It was a very specific file with a very specific malware attached. Foxiebro has been around a while. ...Your description states that Defender trapped a dll file with the Foxiebro exploit 'attached' and 'identified' within. Do you know (or did Defender list) the name of that dll file?
-
leocg Moderator Volunteer last edited by leocg
@blackbird71 It's something like opera_installer_<some numbers>.dll
The numbers change depending on the day and time of the download.
-
burnout426 Volunteer last edited by
@tag Windows Defender is the only one that detects the dll as a virus. See https://www.virustotal.com/gui/file/4bf36a939ccbb96bd264efa80d6b42a8906790bef4b0efdeded65bd9af16f9aa/detection. Definitely looks like a false positive. Probably just Windows Defender heuristics making a bad guess.
-
tag last edited by
I know that this thread was initially about "Message On Opera Startup".
I want to make sure you understand, I haven't opened Opera (any version) for more than a week). I think that's important to keep in mind when considering that the file(s) found are identified as containing Foxiebro.
I'm unfamiliar with the VirusTotal site. Why is Acronis listed with Windows Defender? I recently installed Acronis and had so many problems with it that I uninstalled the program. I used to think it was great. But it compromised and slowed my system so badly that I wasn't going to put up with the issues and uninstalled. There may be a connection.
Leocg is correct. The ending numbers changed. The file was being replaced each time Defender would quarantine the last. That's usually a big indicator that it's an infection when a file continues to be replaced if moved or deleted.
They were found in:
C:\Users(USER)\AppData\Local\Temp.opera\BBDC4C234B27\Opera_installer_20100218063921710520.dll (and a second file in same location at the same time with a different number for \Opera_installer_2010...
With each error message the 2 ending numbers for the dll files would change)
After 7 times there were 4 files found in the same location. After finding 4 (which were quarantined), only 2 were found each time. A total of 15 times Defender identified Foxiebro and quarantined the files. It only stopped after I booted into Safe Mode and removed all Opera files.
Even if Defender is the "only" engine finding identifying the file, don't you think it's something Opera developers should be reviewing / investigating to see "why" that file was identified even by one engine as having malware? Clearly Opera was exploited. And to identify a "specific" name of malware, as opposed to assigning a generic name and calling it a PUP with a low threat would be expected if it was a false positive. But to have been assigned High threat with a specific name seems more than something to disregard. -
-
overtheinternet33 last edited by
To andrius and blackbird
While my Opera Browser is still out on my desktop, on my Opera Mini Browser 51 works great on my Android mobile phone It does however need to be refreshed when it goes to Google double clicks Other than that at least
on mobile internet Opera is fine. -
-
overtheinternet33 last edited by
@tag
I e mailed Opera Headquarters and they told me when I upgrade my RAM from 1GB to 4GB to get back to them I must hire a professional technician to do this and I must shut down my I Mac before he arrives and I must wait 14 hours at least before waking it up.I learned it takes 30 seconds for the new memory to boot in after the computer wakes up.I have not done this yet but I hope to and hope to get back to you when I do. By the way,Opera on mobile devices do work but do need to be refreshed
from time to time. -
-
tapedi2471 last edited by
Got a Cookies wipe as well. I've managed to capture that launch in Procmon, but I don't see any unusual errors regarding the Cookies file in the capture.
-
burnout426 Volunteer last edited by
@overtheinternet33 said in "Profile Error Occurred" - Message On Opera Startup:
when I upgrade my RAM from 1GB to 4GB
Anyone else running with a low amount of RAM?
-
avmon last edited byAfter a long time, today I got the error message but this time the cookies have been kept. Opera 73.0.3856.257
-
avmon last edited by
Today, the profile error message was shown and again with cookies wiped.
Opera 74.0.3911.75 -
-
tapedi2471 last edited by
Still an issue on 77.0.4054.172.
But with the VPN gone, there is no reason for me to stick to Opera. Just migrated to Vivaldi. So long, and thanks for all the fish.
-
martinamery last edited by
@tapedi2471
Sorry to jump in but is this forum dead or have you had any help
Regards -
mike88 last edited by
@martinamery
As the original poster of this topic two years ago it is very disappointing that after all this time the same issues remain.
If Opera developers don't think there is a problem how come other chrome browsers in my experience don't have the same issue, for example Edge and Vivaldi ?
Every few months I instal Opera to see if anything has changed but its getting depressing. My other gripe with Opera is manually instigating an update when I am greeted by the message "an error has occurred" until after several attempts I finally get the browser to update. This is not a problem with other Chromium browsers, so why Opera ?
You would think that the developers would do everything possible to make the browser a pleasure to use rather than make users consider moving elsewhere ,even if it is only a temporary move. -
overtheinternet33 last edited by
@martinamery
Hello,
Hope to get back to you in October because the tech guy I want is closed for house calls until October due to COVID.Thanks to the 3rd
Stimulus payment (USA)I can get the RAM installation for my I-Mac.Hope to update you then on how it goes.Until then, take care and thanks for keeping in touch.
