Foxstart PUA removal

50Twuncle

OK - My Dad has tried both of the suggestions (superantispyware and Reasoncoresecurity) - along with running Ccleaner and foxstart refuses to shift - any more suggestions before he rebuilds the laptop with a fresh build ?

pappa_golf

clean the temp tiles

50Twuncle

He tells me that he has used Ccleaner - which does delete temp files !

hans_2

Try a Forced Uninstall using 30 day trial of Revo Pro.

RumRat

50Twuncle wrote: »

OK - My Dad has tried both of the suggestions (superantispyware and Reasoncoresecurity) - along with running Ccleaner and foxstart refuses to shift - any more suggestions before he rebuilds the laptop with a fresh build ?

Why would you rebuild the laptop before you've tried a new profile or refreshing Firefox?

GunJack

50Twuncle wrote: »

He tells me that he has used Ccleaner - which does delete temp files !

!!!!!!!! If you don't do a windows disk cleanup immediately followed by ccleaner you won't get them all..each removes from certain locations, yes there's some overlap but not ALL..

then, in order:-

1. adwcleaner
2. jrt
3. mbam
4. manually reset ALL browser's homepages and check for dodgy search engines also
5. if still no joy, maybe, but only maybe, Combofix

all those tools are available to download via bleepingcomputer...

50Twuncle

RumRat wrote: »

Why would you rebuild the laptop before you've tried a new profile or refreshing Firefox?

We tried uninstalling Firefox and reinstalling - yesterday, with no success !!

RumRat

50Twuncle wrote: »

We tried uninstalling Firefox and reinstalling - yesterday, with no success !!

Did you delete the profiles when you uninstalled it?

50Twuncle

RumRat wrote: »

Did you delete the profiles when you uninstalled it?

No - but surely, if a new profile is created - the PUA will still be on the C: drive ?
Where, exactly does it reside ?

RumRat

To find the profiles - Press Windows key + R or in windows 10 just the Windows key, then type in %APPDATA%\Mozilla\Firefox\Profiles\
The profile(s) will be in there.
Your user preferences are stored in there, so your problem may lay within.
I'm not saying that it will be a definitive solution, but, if you've tried all other suggestions, then it's worth a try.