Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


FRST successfull (unsucessful) removal.

  • Please log in to reply
2 replies to this topic

#1 matrx10503


  • Members
  • 1 posts
  • Local time:04:33 PM

Posted 24 March 2018 - 04:15 PM

FF HomepageOverride: Mozilla\Firefox\Profiles\nmgjw3dj.default -> Enabled: homepage@mail.ru
FF NewTabOverride: Mozilla\Firefox\Profiles\nmgjw3dj.default -> Enabled: search@mail.ru
FF NewTabOverride: Mozilla\Firefox\Profiles\nmgjw3dj.default -> Enabled: {a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}
FF NewTabOverride: Mozilla\Firefox\Profiles\nmgjw3dj.default -> Enabled: homepage@mail.ru


These are the only real traces of "malware" I can find on my computer. I have ran ALL the scanners. I did a fixlist for FRST and it says removed. But I run scan immediately after and they are still present.


The browser opens randomly and goes to ad or porn .ru pages.


I am in safemode now, re-running scans. Coming up clean.

What should I try now?

BC AdBot (Login to Remove)


#2 hamluis



  • Moderator
  • 56,435 posts
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:33 PM

Posted 24 March 2018 - 05:27 PM

Do you want someone to review your FRST log data?


If so, I suggest you follow the instructions at Preparation Guide, Before Using Malware Removal Tools and Requesting Help - http://www.bleepingcomputer.com/forums/topic34773.html and post a new topic in the forum containing the Prep Guide.



#3 buddy215


  • Moderator
  • 13,420 posts
  • Gender:Male
  • Location:West Tennessee
  • Local time:03:33 PM

Posted 24 March 2018 - 05:31 PM

Welcome to BC...


What scans did you run?


Have you tried resetting Firefox to its default settings? Refresh Firefox - reset add-ons and settings | Firefox Help


You can do as Hamlius suggested. I would suggest that if you have scanned using Malwarebytes, AdwCleaner, Eset Online Scanner

and cleaned the computer using CCleaner.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users