Happili redirect virus only in Firefox

I've done a lot of research before posting in here. I've removed the trojan exe and dll that were associated with this virus and scans from all sorts of scanners come up clean. The redirect only happens in Firefox and I remember reading somewhere that it's a hidden Firefox plugin in the registry somewhere. If anyone knows how to remove it directly let me know. Making me download 10 different virus scanners and post logs means you don't know actually know the specifics of what is causing this and you're just making me jump through hoops hoping that one of those random virus cleaning tools fixes the problem for you. A correct answer to this question would look like this: "look in XXXX registry folder and find an entry that looks like this: YYYYY. That's the the malicious hidden plugin that's redirecting random Google searches only in Firefox. Remove that." You see how that answer was direct? That's a real answer to this problem, not "run all of these 15 different scanners and post logs." That means you don't actually know the details of the Happili infection.

<<The redirect only happens in Firefox...>>

Have you tried...simply uninstalling Firefox...and reinstalling it?

I don't know much about malware but it seems unlikely to me that malware targets only a given browser. If such premise is valid, removing the browser and reinstalling it...should eliminate the troublesome files.

As for your apparent disdain for dealing with suspected malware issues via scans and malware removal tools...if you have better ideas about such, I suggest that you execute them, rather than disparaging the efforts of those who may be properly trained to deal with malware issues.

Louis

reinstalling Firefox would mean I'd have to find and copy my profile folder so it could be replaced once the new installation is finished. I may potentially lose saved passwords etc. Because I need to keep my profile folder, I may not be getting rid of it because it may reside in my profile folder somehow. So all of that trouble could end up being for nothing. I need someone expert enough to know the details of how this redirect operates so he can tell me how to surgically remove it. I've already cleaned the initial trojan. I'm just left with this mysterious, intermittent, browser redirect. Need someone smart in here.

That's what I figured. Easy to tell someone to run 10 different scans. Hard to actually be experienced enough to know a browser redirect bug works and how to remove it.