Malwarebytes keeps finding 'DokoToolBar' even though i keep Quarantining & Deleting.

zennith

Any advice what i should/can do, please?


EDIT: P.S i don't know where the wink smilies have come from?? I just cut n pasted the Malwarebytes log.


Files: 21
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.admin", false);), ,[6022b69ad4a7e94db4a2c6aadc2829d7]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.aflt", "babsst");), ,[4d3569e7ccafbf774f07e58b08fc39c7]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.appId", "{43083724-E0DA-43B9-B7D5-4C5EB0781850}");), ,[c9b9034d5724ed493e189ed255af25db]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.autoRvrt", "false");), ,[7e04ec642457ca6c2d29551b3dc7f709]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.dfltLng", "en");), ,[f2902828324979bd67effb75f90b45bb]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.excTlbr", false);), ,[80026ee26d0ec96d1541e38d8b7928d8]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.ffxUnstlRst", true);), ,[305284ccb7c42b0b3125fa768f75aa56]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.id", "b048f09a00000000000000130205a1aa");), ,[99e94e023f3cd85eee68e987b054c739]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.instlDay", "15995");), ,[fc864709285387afdc7a6d03a95b7090]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.instlRef", "sst");), ,[e69c84cce299c274c690d19f5ca88a76]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.newTab", false);), ,[d8aa59f79cdf35014115066ae42025db]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.prdct", "dokotoolbar");), ,[daa8460a3546bc7a500638387c8824dc]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.prtnrId", "dokotoolbar");), ,[473bd17f2f4cb87e99bd2e4205ff9b65]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.rvrt", "false");), ,[d9a95df36a11f0462531ee82c1430cf4]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.smplGrp", "none");), ,[f88acf81d3a851e5a1b52f41ea1a8080]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.tb_url", "http://www.doko-search.com/?q={searchTerms}&babsrc=TB_ss&mntrId=B04800130205A1AA&affID=125836&tsp=5038");), ,[4240a2aed4a792a4f75fd898c242ea16]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.tlbrId", "base");), ,[1a68341c88f394a236206808d4304fb1]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.tlbrSrchUrl", "http://www.doko-search.com/?q={searchTerms}&babsrc=TB_ss&mntrId=B04800130205A1AA&affID=125836&tsp=5038");), ,[d3af3a1697e40531f95d98d862a2d32d]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.vrsn", "1.8.26.9");), ,[1e64302088f380b6ed69ed833fc549b7]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.vrsnTs", "1.8.26.99:52:52");), ,[b1d1143cdba052e4d680d29e55affc04]
PUP.Optional.DokoToolBar.A, C:\Documents and Settings\m\Application Data\Mozilla\Firefox\Profiles\g8brww4r.default\prefs.js, Good: (), Bad: (user_pref("extensions.dokotoolbar.vrsni", "1.8.26.9");), ,[6e14b49c8bf0dc5ad0860a66877d9967]

dogmaryxx

Try AdwCleaner

Scan then Clean.

zennith

dogmaryxx wrote: »

Try AdwCleaner

Scan then Clean.

Thankyou so much for that.

Hopefully it's done the trick!

zennith

Oh no...

Malwarebytes has found it all again.

I'm confused.

imho

Is it in your add and remove programs ?

zennith

imho wrote: »

Is it in your add and remove programs ?

I can't find it there.

It must be hiding somewhere?

I didn't know i had the thing.... but Malwarebytes keeps locating it.

debitcardmayhem

Did you run Malwarebytes and ADWCLEANER as Administrator?
OH and close down FF first.

zennith

debitcardmayhem wrote: »

Did you run Malwarebytes and ADWCLEANER as Administrator?
OH and close down FF first.

Yes.

It seems to have worked second time around.

I'm doing a 3rd Malwarebytes scan to make sure.

Gillor

If you are still having problems take a look here:

http://www.fixyourbrowser.com/removal-instructions/remove-doko-search-com-homepage/:

waddler_8

PUPs aren't checked for removal by default.

http://blog.malwarebytes.org/news/2013/09/selecting-all-pups/

Laz123

Try RogueKiller http://www.majorgeeks.com/files/details/roguekiller.html

I'd suggest scheduling your av to run a boot scan too. Takes a couple of hours in dos).