Author Topic: Need help removing MyStart from Firefox  (Read 7387 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Need help removing MyStart from Firefox
« Reply #15 on: July 05, 2012, 06:52:02 PM »
They are probably in the user is file which my tools do not look in

gpseymour

  • Guest
Re: Need help removing MyStart from Firefox
« Reply #16 on: July 05, 2012, 06:59:29 PM »
Okay, I reset all of those entries, but as soon as I restart Firefox, they are returned to their prior state. Something is still out there keeping these active. Should I run the cleanup at this point, anyway?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Need help removing MyStart from Firefox
« Reply #17 on: July 05, 2012, 07:02:49 PM »
No could you run a fresh OTL quick scan and I will locate the js file

gpseymour

  • Guest
Re: Need help removing MyStart from Firefox
« Reply #18 on: July 05, 2012, 07:33:11 PM »
Thanks for your hard work on this. Here's the new scan.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Need help removing MyStart from Firefox
« Reply #19 on: July 05, 2012, 07:51:25 PM »
OK one more go.  Could you post the log that pops up at the end please 

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


    Quote
    :OTL
    64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX
    O2 - BHO: (WeCareReminder Class) - {D824F0DE-3D60-4F57-9EB1-66033ECD8ABB} - C:\ProgramData\WeCareReminder\IEHelperv2.5.0.dll (We-Care.com)

    :Files
    C:\Users\Gerry\AppData\Roaming\Mozilla\Firefox\Profiles\ke1vycyf.default\user.js

    :Commands
    [purity]
    [resethosts]
    [emptytemp]
    [CREATERESTOREPOINT]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done

gpseymour

  • Guest
Re: Need help removing MyStart from Firefox
« Reply #20 on: July 05, 2012, 10:34:37 PM »
Okay, ran the code. Log attached.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Need help removing MyStart from Firefox
« Reply #21 on: July 05, 2012, 10:37:06 PM »
Is it still there ?  If so could you take a screenshot of the area and entries

gpseymour

  • Guest
Re: Need help removing MyStart from Firefox
« Reply #22 on: July 09, 2012, 06:47:43 PM »
For some reason I am no longer able to reply to this forum from my PC. Had to post this from my phone, and the option to attach a file doesn't work. I'll try later from another PC, but wanted to let you know it is still there.