BleepingComputer.com: Search settings notification windows 7

Close Firefox.
Open Windows Explorer.
Navigate to:
C:\Program Files (x86)\Mozilla Firefox\extensions
Delete following folder:
{972ce4c6-7e08-4474-a285-3208198ce6fd}

Restart computer and let me know how it goes.

Hi Broni,

Sorry to ask, but is this what you wanted?

Hope so,

Regards,

Reggie.

I'm not sure what you're saying.
Did you delete that folder?

Sorry Broni,

My mistake -

I forgot to say that I'd deleted that folder and, following a computer boot, the same problems occurs.

Do you think its a Firefox plugin?

regards,

Reggie.

I'm pretty sure it is.
Uninstall Firefox completely using this manual: http://kb.mozillazine.org/Uninstalling_Firefox
Install fresh copy.

Hi Broni,

I tried that, and still get the pop up when I boot the computer,

Regards,

Reggie.

Download Autoruns for Windows: http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
No installation required.
Simply unzip Autoruns.zip file, and double click on autoruns.exe file to run the program.
Go File>Save, and save it as AutoRuns.txt file to know location.
You must select Text from drop-down menu as a file type:



Upload the file(s) here: http://www.filedropper.com/
Post download link (copy URL: link):

Hi Broni,

As you requested,

http://www.filedropper.com/autoruns

Regards,

Reggie.

Ps i like the file dropper website!

Surely, son of a gun Spigot.
Re-run Autoruns, click on "Logon" tab, right click on "SearchSettings" entry and click "Delete".

Then open Windows Explorer and delete following folder:
c:\program files (x86)\common files\spigot

Restart computer and let me know.

Thanks very much Broni,

That seems to have worked

What was it?

Am I clear of nasties now?

Kind regards & thanks again,

Reggie.

Good

http://en.wikipedia.org/wiki/PDFCreator

Quote

Last scans....

Download Temp File Cleaner (TFC)
Double click on TFC.exe to run the program.
Click on Start button to begin cleaning process.
TFC will close all running programs, and it may ask you to restart computer.

=============================================================================

Please run a free online scan with the ESET Online Scanner

• Disable your antivirus program
  
• Tick the box next to YES, I accept the Terms of Use
  
• Click Start
  
• Accept any security warnings from your browser.
  
• Check Scan archives
  
• Click Start
  
• ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  
• When the scan completes, push List of found threats
  
• Click on Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.

Hi broni,
as you requested:


C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe probably a variant of Win32/Adware.Toolbar.Dealio application cleaned by deleting - quarantined
C:\Users\Dom\AppData\Roaming\Auslogics\Rescue\Sony Maintenance\110910094937260.rsc a variant of Win32/InstallCore.C application deleted - quarantined
C:\Users\Dom\Desktop\true cript do not delete\cnet_TrueCrypt Setup 7_0a_exe.exe a variant of Win32/InstallCore.C application cleaned by deleting - quarantined
C:\Windows\Installer\4d5881.msi a variant of Win32/Adware.Toolbar.Dealio application deleted - quarantined

Regards,

Reggie.

Your computer is clean

1. We need to reset system restore to prevent your computer from being accidentally reinfected by using some old restore point(s). We'll remove all old restore points and create fresh, clean restore point.

Turn system restore off.
Restart computer.
Turn system restore back on.

If you don't know how to do it...
Windows XP: http://support.microsoft.com/kb/310405
Vista and Windows 7: http://www.howtogeek.com/howto/windows-vista/disable-system-restore-in-windows-vista/

2. Make sure, Windows Updates are current.

3. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

4. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

5. Run Temporary File Cleaner (TFC) weekly.

6. Download and install Secunia Personal Software Inspector (PSI): http://secunia.com/vulnerability_scanning/personal/. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

7. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

8. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

9. Read How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html

10. Except for MBAM and TFC, which are keepers you can simply delete all other tools we used as they don't install.

Thanks for all your help Broni!

I relay appreciate it.

Kind regards,

Reggie

You're very welcome