I saw many threads like that, I searched them up, but I cannot find an answer.
Once I got an cracked minecraft (like 4 years ago) from site ru-minecraft.org
I didn't know yet how to be safe from malware etc.
So I found out my homepage changed to ru-minecraft.org, but I didn't care. This year I deleted it.
(also I deleted something in system32, there was a strange notepad what had listed many dangerous sites and there was also ru-minecraft.org, I deleted it on both of my computers. On one computer when I open it up, it always show what I want to open the file with. Then comes up something strange, I don't member the name)
Few weeks back I found out some more files left from ru-minecraft.org, some strange files and I deleted them.
Home Website does not change and anything, but when I scanned my computer with adwcleaner, I found something at my "firefox" and "internet explorer" section (for now I disabled internet explorer, doesn't show up in there anymore).
Well there came up one same thing, pref.js file. I found out on forums I had to restart my browser, and I did it.
It didn't help... The suspicius file still shows up.
I heard that I can manually delete the pref.js file but I really don't know how.
Can someone help me?