Are you saying Yahoo Mail is diverted or that a second window opens to that site, which looks completely unrelated? How are you accessing Yahoo Mail: typing the address, using a bookmark, using a link, etc.?

In case it's a sign of a security breach, you may want to run some supplemental scans. These two tools are highly regarded:

Malwarebytes Anti-malware : http://www.malwarebytes.org/products/malwarebytes_free

SUPERAntiSpyware : http://www.superantispyware.com/

Once you are confident your system is clean, you still might need to clean up your settings and add-ons in Firefox. But a little more info is needed on exactly what is happening.

when I use my stored bookmark or go through the website manually it jumps to the next page. No new tab or windows opens pop up style just gets redirected to yim.com.

I have Malware Bytes ran that and claims it is clean.

Clear the cache and the cookies from sites that cause problems.

"Clear the Cache":

• Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"

"Remove Cookies" from sites causing problems:

• Tools > Options > Privacy > Cookies: "Show Cookies"

Start Firefox in Safe Mode to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance).

• Do not click the Reset button on the Safe mode start window or otherwise make changes.

• https://support.mozilla.org/kb/Safe+Mode
• https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Started in safe mode and still back to YIM.com

Have you tried Internet Explorer to see whether anything unusual happens there?

Could you check your Firefox proxy setting and make sure it is set to No Proxy here:

orange Firefox button or classic Tools menu > Options > Advanced

On the "Network" mini-tab, click the "Settings" button

Hi I am also having the problem.

1) I only have the issue with Firefox, Not with Internet explorer nor Chrome. 2) I have tried to uninstall reinstall firefox  : issue still there 3) I have tried to run it in safemode : issue still there 4) I have run the Malwarebytes Anti-malware software that detected no issue, but is enable to retrieve the latest base from the web, a strange error occur 5) I am using the same proxy for IE and Chrome

any idea? Thanks!

To both minnz21 and loran100, can you try the following: disable all add-ons (except Flash and NoScript, if applicable) and test again.

orange Firefox button or classic Tools menu > Add-ons

Disable everything in both of these sections:

Plugins - except the Flash plugin ("Shockwave Flash 11.5")
Extensions - except NoScript if you use it

Then restart Firefox. Any change?

Hi loran100, I don't understand your reference to a "strange error" from Malwarebytes. Perhaps try some additional tools such as the rootkit remover TDSSKiller from http://support.kaspersky.com/viruses/solutions?qid=208280684

Hi Jscher2000,

I have tried TDSSKiller, but nothing was detected. Regarding the error, I have had an internal error (I am not able to reproduce because i have uninstalled).

By the way I have updated my flash player, and right now i do not have the error anymore... maybe?

I had a the same problem running in my Windows 7 Pro 64 bit computer at work. I'm going through a proxy. I have tried disabling all plug ins, and that didn't help. Problem only started a few days ago. Like others no issue in IE or Chrome. I also have no issue at home on my Vista 32 bit machine with no proxy. Similar set of plugins and firefox versions at home.

I don't think this is a root kit issue or something. We would be having a lot more problem than just yahoo mail if that were the case.

I wonder whether there is a typo somewhere, since Yahoo uses yimg.com extensively. Obviously difficult to determine using View Source if the page redirects so quickly. And external tools generally do poorly capturing pages retrieved over a secure connection. If anyone who has this problem uses the NoScript extension, and keeps yim.com blocked, that might be helpful in determining whether the cause of the redirection is in the page(s)/script(s) served by Yahoo.

Hi all

I am not facing the issue anymore , not sure why. The only thing I can imagine is the uodate of my flash player.... not sure why...

I have to say that I am not really confident about be ing rootkit free there, even if I have no evidence despite trying various antivirus/malware/root kits removal tools.

And also I have had a look inside my firewall logs, without being able to identify something suspect there...

I still have the problem on my Work PC. I don't believe the root kit theory. As I said before, if root kits wanted to make its presence known it would effect a lot more than yahoo mail.

For now I have using the IE+ plug in and forcing yahoo mail to be rendered in IE. It annoying through because now ad blocker doesn't work. As I said before I did try disabling my plug-ins that didn't make a difference.

After 10 days without.... problem just came back...

yahoo redirected to YIM.com

and only on firefox...

There is certainly some problem related to proxy I think. I think I have fixed it for now by adding these two paths to my adblock plus filter :

||yim/build/p/*

||yim.com/build/p/*

In at least my case, it seemingly rerouted these requests to yimg.com and not yim.com when I did that. I will re-post if I see the error again after a few days. For now it's fixed.

@jscher2000, This is yim.com, not yimg.com. If you open the Inspector in Chrome and see the Network requests log, you might see that it does actually issue two actual 'Redirect' requests to yim.com to get some xframe.js. See the attached snapshot I uploaded. While it passes fine in Chrome, somehow some proxy authentication was failing in Firefox (checked in Firebug) which was eventually causing that actual redirect. I'm just guessing all of these. :)

EDIT : Oh, by the way, I could temporarily get rid of the problem by clearing ALL cache too (not just Yahoo), but the problem reappeared very soon after that.

My Firefox requests xframe.js using this URL:

https://s.yimg.com/pd/2.22.0.17277/yim/build/p/xframe.js

You mentioned a proxy. Is it possible the proxy is "correcting" the URL??

Also, my Firefox loads the combo script (actually it calls that 3 times with different parameters) from s.yimg.com, not mail.yimg.com.

I'm not sure. But as I said above, when I blocked those yim links using Adblock plus, it started using yimg links to fetch the xframe. Or at least that's what I think might have caused it.

Thanks piyush_soni, by adding those adblocker rules yahoo mail now does work again in Firefox. Like others have posted here. I have seen the problem go away only to reappear again.

I have two machines and this problem came up on one of them. Initially I switched JavaScript off and went back to the old yahoo mail but this frustrated me. So I RESET FIREFOX (Help Troubleshooting Information Reset Firefox) and this cured the problem.

I had the same problem. I was able to stop it by installing BlockSite Plus. I added the full link (http://www.yim.com/?redir=frame&uid=www51518ceb0927f4.28149061) and the top-level domain name (yim.com) to the filter...