Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Need help to remove "gooolgesearch.com"


  • Please log in to reply
9 replies to this topic

#1 Arjuna31

Arjuna31

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:46 PM

Posted 29 August 2014 - 01:02 PM

Hi,

 

An adware/malware program changed my firefox homepage to "http://gooolgesearch.com/" and I can't remove it with the firefox homepage option.

 

Some program will rewrite the following line everytime in C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\m792jcn7.default\pref.js :

user_pref("browser.startup.homepage", "http://gooolgesearch.com/");

I tried to remove it with Adw Cleaner and Malwarebytes AntiMalware but it's still there.

 

DDS.txt in attachment

 

Can you please help me remove this ad?

Attached Files

  • Attached File  dds.txt   35.29KB   7 downloads


BC AdBot (Login to Remove)

 


#2 shelf life

shelf life

  • Malware Response Team
  • 2,651 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:03:46 PM

Posted 31 August 2014 - 06:17 PM

hi,

 

Your post is 2 days old, if you still need help simply reply back.


How Can I Reduce My Risk to Malware?


#3 Arjuna31

Arjuna31
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:46 PM

Posted 01 September 2014 - 04:04 PM

Hi
Yes I still need help please

#4 shelf life

shelf life

  • Malware Response Team
  • 2,651 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:03:46 PM

Posted 01 September 2014 - 07:13 PM

Ok. We will get a download to use;

 

Please download Farbar Recovery Scan Tool and save it to your Desktop.

http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run them. Only one of them will run on your system, that will be the right version.

 

If you click on the start orb>right click on Computer link>properties> System Type:  It will say 32 or 64 bit OS

    Right-click FRST then click "Run as administrator"
    When the tool opens
    click Yes to disclaimer.
    Press the Scan button.
    When finished, it will produce a log called FRST.txt in the same directory the tool was run from, your desktop if thats where you saved it to.
    Please copy and paste the log in your next reply.

The first time the tool is run it generates another log (Addition.txt - also located in the same directory the tool was run from). Please also paste that, along with the FRST.txt into your next reply.


How Can I Reduce My Risk to Malware?


#5 Arjuna31

Arjuna31
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:46 PM

Posted 04 September 2014 - 12:10 PM

Hello,
 
I have run this tool, the results are in attachments (too long to put in the post).

 

Thanks in advance for your help

Attached Files



#6 shelf life

shelf life

  • Malware Response Team
  • 2,651 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:03:46 PM

Posted 04 September 2014 - 04:42 PM

Thanks for the info. We will get another download to use:

  http://www.bleepingcomputer.com/download/adwcleaner/

 

    Please download AdwCleaner to your desktop. Double click on AdwCleaner.exe, select OK, then Run

 

You will then be presented with a screen that contains a Scan and Clean button.  The Scan button will cause AdwCleaner to search your computer for unwanted programs and then display all the files, folders, and registry entries found on your computer that are used by adware programs.

When the scan has finished, look through the scan results and uncheck any entries that you do not wish to remove. When you are satisfied with the selection, simply click on the Clean button, which will cause AdwCleaner to reboot your computer and remove the files and registry entries associated with the various adware that you are removing.  On reboot, AdwCleaner will display a log showing the files, folders, and registry entries that were removed. Please post the log in your reply.

  


How Can I Reduce My Risk to Malware?


#7 Arjuna31

Arjuna31
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:46 PM

Posted 05 September 2014 - 08:23 AM

Here is the log of Adw Cleaner:

 

# AdwCleaner v3.309 - Rapport créé le 05/09/2014 à 15:19:49
# Mis à jour le 02/09/2014 par Xplode
# Système d'exploitation : Windows 7 Professional Service Pack 1 (64 bits)
# Nom d'utilisateur : Romain - PHANTOM-820
# Exécuté depuis : C:\Users\Romain\Downloads\AdwCleaner(1).exe
# Option : Nettoyer

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****


***** [ Tâches planifiées ] *****


***** [ Raccourcis ] *****


***** [ Registre ] *****


***** [ Navigateurs ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v31.0 (x86 fr)

[ Fichier : C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\m792jcn7.default\prefs.js ]


-\\ Google Chrome v37.0.2062.103

[ Fichier : C:\Users\Romain\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1715 octets] - [29/08/2014 19:28:09]
AdwCleaner[R1].txt - [1110 octets] - [05/09/2014 15:19:06]
AdwCleaner[S0].txt - [1787 octets] - [29/08/2014 19:28:44]
AdwCleaner[S1].txt - [1032 octets] - [05/09/2014 15:19:49]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1092 octets] ##########

 

It did not remove many things because I already had run it. See the first log below :

 

# AdwCleaner v3.308 - Rapport créé le 29/08/2014 à 19:28:44
# Mis à jour le 20/08/2014 par Xplode
# Système d'exploitation : Windows 7 Professional Service Pack 1 (64 bits)
# Nom d'utilisateur : Romain - PHANTOM-820
# Exécuté depuis : C:\Users\Romain\Downloads\AdwCleaner.exe
# Option : Nettoyer

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Program Files (x86)\Optimizer Pro
Dossier Supprimé : C:\Users\Romain\AppData\Roaming\pdfforge
Dossier Supprimé : C:\Users\Romain\Documents\Optimizer Pro

***** [ Tâches planifiées ] *****


***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Supprimée : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

***** [ Navigateurs ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v31.0 (x86 fr)

[ Fichier : C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\m792jcn7.default\prefs.js ]


-\\ Google Chrome v36.0.1985.143

[ Fichier : C:\Users\Romain\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Supprimée [Extension] : bopakagnckmlgajfccecajhnimjiiedh

*************************

AdwCleaner[R0].txt - [1715 octets] - [29/08/2014 19:28:09]
AdwCleaner[S0].txt - [1647 octets] - [29/08/2014 19:28:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1707 octets] ##########
 

 

Unfortunately http://gooolgesearch.com/ is still my f... homepage



#8 shelf life

shelf life

  • Malware Response Team
  • 2,651 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:03:46 PM

Posted 06 September 2014 - 02:07 PM

We will do three things. There is a tool similar to Adwcleaner. Its called JRT.exe Download and run it:

 

http://thisisudax.org/downloads/jrt.exe/

 

Dwonload link is near the bottom of the page.

 

Next open up firefox>tools>addons. check the listing under both extensions and plugins. Disable/remove anything you dont recognize.

 

Last: We will reset Firefox back to its defaults:

With FF open> Help>Troubleshooting information> click the reset Firefox button

 

More info on resetting FF here:

https://support.mozilla.org/en-US/kb/reset-firefox-easily-fix-most-problems

 


How Can I Reduce My Risk to Malware?


#9 Arjuna31

Arjuna31
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:46 PM

Posted 07 September 2014 - 11:49 AM

The last step with reset firefox button has solved my problem : I'm back to my normal starting page

 

Thank you very much for your help!



#10 shelf life

shelf life

  • Malware Response Team
  • 2,651 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:03:46 PM

Posted 08 September 2014 - 01:59 PM

Ok good. Your welcome. Happy safe surfing out there


How Can I Reduce My Risk to Malware?





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users