I got this issue also, but looks that I found what is causing it:

None of the mal/spyware soft didn't work for me and I was not ready to start new, clean instalation, so I start to check lists of addons, etc.

I am during testing, but till now problem disapeared after I found addon I have never installed. It was possibly instaled when I tested some keylogger addon, which I uninsttaled after 5 minutes... This addon is called Play Music and it don't have any author/version info, nor description.

Please check if You have this also. If You will find any other solution, please post it! This is very annoying!

I checked my add-ons and I didn't find out anything related to that one. I'm still have the same problem everytime that I try to open a new windows on firefox. This doesn't take effect when you open a new tab.

I was having this scum too. Updating to FF v6 seemed to fix the problem just for a short while, but not permanently, I was getting the same annoying pop-up window but I managed to fix the issue by following below steps

1 Text search the pattern 'no1tech' in your files under FF profile folder recursively. (I used TotalCommander for this operation)

2 Open the sqlite database files which includes the text pattern above with the SQLiteManager extension for FF (or use any other SQLite DB manager)

3 Delete the relevant database record lines which includes the text pattern

Voila! -- Ali Geyik

Ali,

I found out 'no1tech' in the cache folder in FF profile but SQLite Manager doesn't see such folder. The only way was using Notepad Plus + to read inside. I delete the word 'no1tech' from that line.but it's still giving me the same problem to pop up the window and so on. I have to disconnect the internet to close those windows easily. Do you have any suggestion???

Well I found out a way to get rid of these annoying pop up. Follow these steps:

1.- Go to Firefox Profile usually located in C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\xxxxxxx.default The xxxxxxxx.default is a alphanumeric name file. Also you can click Help in the menu then click on Troubleshouting Information and then click the button Open Container Folder which locate under Profile Directory. This one will open a new window with all your profile and close Firefox

2.- Find prefs.js and delete it. You can make a backup if you don't feel sure. Try to see if you find more files with the suffix pref.js like user.prefs.js delete them too.

3.- Run Firefox again and the software will install Firefox default.

4.- See if a pop-up window open with the same address. If so repeat step 1 and 2. Try to see if you see another prefs.js in your profile directory.

Good luck

My previous post only gave me a temporally solution and it didn't fix the problem so after investigating a little bit more I just find out an add-on call 'test your brain' that carry the script which pop-ups no1techblog.blogspot.com website a tons of time. I remove it and voila...no more this annoying pop-up window.

If you don't find this add-on it's probably that this script can be in some other similar add-ons so I suggest to do the follow:

1.- Open your Firefox but first block or disable the internet 2.- Go to Tools -> Add-ons and disable manually all of them. 3.- Enable you internet 4.- Enable one add-on and restart firefox one at the time. 5.- This process can take a little time upon how many add-ons you have installed. 6.- As soon as you see the pop up windows block the internet to stop more pop-ups. 7.- Remove the add-on 8.- Close those pop-ups and reconnect to the internet. 9.- Close and restart Firefox. 10.- Voila.... Have a happy browsing.

It is possible that there is a problem with the files sessionstore.js and sessionstore.bak in the Firefox Profile Folder.

Delete the files sessionstore.js [2] and sessionstore.bak in the Firefox Profile Folder.

• Help > Troubleshooting Information > Profile Directory: Open Containing Folder
• http://kb.mozillazine.org/Profile_folder_-_Firefox

If you see files sessionstore-##.js with a number in the left part of the name like sessionstore-1.js then delete those as well. Deleting sessionstore.js will cause App Tabs and Tab Groups and open and closed (undo) tabs to get lost, so you will have to create them again (make a note or bookmark them).

See also:

• [1] http://kb.mozillazine.org/Session_Restore
• [2] http://kb.mozillazine.org/sessionstore.js

Do a malware check with some malware scanning programs.
You need to scan with all programs because each program detects different malware.
Make sure that you update each program to get the latest version of their databases before doing a scan.

• http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
• http://www.superantispyware.com/ - SuperAntispyware
• http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
• http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
• http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free

See also:

• "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked

Sorry for my poor English! I have found this question caught by a addon called "play your piano!". Check your firefox addons.When you find a addon called "play your piano!", remove it, after then your firefox will be OK, and no longer popup a window from "http://no1techblog.blogspot.com/". Now here for Chinese user in Simplified Chinese: 我发现这个问题是由一个叫“play your piano!”附加组件引起的。检查你的附加组件看是否含一个叫“play your piano!”附加组件，如果有，当你移除它后，你的Firefox浏览器不再弹出来自"http://no1techblog.blogspot.com/"的窗口。

This happened to me too.

I analyzed the source codes of the extensions I'm using and found that a keylogger extensions developed by Lipo-Technologies is behind the game. Just uninstalling it fixed all the issues for me. Extensions developed by them includes Play Your Piano!, Keylogger, Browser Server and Test Your memory!.

Other interesting things which you guys will definitely find interesting:

• Evil code starts from line 165 of keylogger-1.5-fx/chrome/content/overlay.js

• Every time when I check the logs of keylogger, a GET request is made automatically to http://lipo-technologies.com/Keylogger/ajax2.php.

If the response of this GET request is "no", nothing happens. If it is "yes", the sturcture will be like this: yes^^^http://google.com/^^^toolbar=0,location=0,titlebar=0,status=0,menubar=0,scrollbars=0, resizable=0,height=105,width=780,top=0,left=0 and Firefox opens a new window with that URL. That simply means, those extension developers can open any page they wish on your browser at any point of time.

• By the way, http://lipo-technologies.com/Keylogger/news.html actually redirects users to http://no1techblog.blogspot.com/.

So if you are checking source codes of extensions, normally you won't find any direct links to no1techblog.blogspot.com

• Check out the "Browser Server" extension developed by the same team, they also opens advertisement windows randomly. (We miss POW, really)

@raoyc2009

Nice, Wish I could have read your post earlier. Anyways it was fun going through their source code.

I too "suddenly" developed the same problem, just a "pop up" browser window saying something about No1techblog.blogspot.com .... I asked myself, "Ok, what changed and remembered installing that stupid "Playmusic" addon. Once disabled it went away and hasn't returned! (I Looooooovvvvve Linux)!

Cheers y'all!

I had this problem too , i removed the add one named play your piano, and it seems it was the cause of that issue.

Hopefully it will be the solution for your cases too .

Best Regards

I just had the same problem. I first blocked the pop up with NoScript add-on and it worked. Then I saw the Play your piano post here and uninstalled the PYP add-on and it works ok now :)

Hi every body, I have had the same problem, but I've right clicked on my "Malwarebytes' Anti-Malware", and I'd blocked the "IP address of this pop up... and Voila...

Good luck

The pop up is because you have an add on named play music which is a cover for a keylogger that tracks everything you type.. if u dissable that add on you wont get the pop up or have all of ur personal information seen by who ever installed it.