X
Tap here to go to the mobile version of the site.

Support Forum

How do I get rid of dnsrsearch.com

Posted

I can not get rid of this malware. I scanned system with webroot it found the malware and claimed it was deleted but it is still there.

I can not get rid of this malware. I scanned system with webroot it found the malware and claimed it was deleted but it is still there.

Additional System Details

Installed Plug-ins

  • Shockwave Flash 15.0 r0
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Next Generation Java Plug-in 10.71.2 for Mozilla browsers
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Google Update
  • Adobe PDF Plug-In For Firefox and Netscape 11.0.9
  • 5.1.30514.0
  • iTunes Detector Plug-in
  • Shockwave Flash 12.0 r0
  • MindSpark Toolbar Platform Plugin Stub for 32-bit Windows
  • Citrix Online App Detector Plugin
  • WildTangent Games App V2 Presence Detector
  • A component of your photo software powered by RocketLife
  • Adobe Shockwave for Director Netscape plug-in, version 11.6.1.629
  • NPWLPG
  • The plug-in allows you to open and edit files using Microsoft Office applications

Application

  • Firefox 33.1
  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0
  • Support URL: https://support.mozilla.org/1/firefox/33.1/WINNT/en-US/

Extensions

  • Troubleshooter 1.1a (troubleshooter@mozilla.org)
  • Webroot Filtering Extension 1.0.2.42 (webrootsecure@webroot.com)
  • Yahoo! Toolbar 3.2.6.20140805113039 ({635abd67-4fe9-1b23-4f01-e679fa7484c1})
  • SmartPrintButton 1.0 (quickprint@hp.com) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: AMD Radeon(TM) HD 6520G
  • adapterDescription2:
  • adapterDeviceID: 0x9647
  • adapterDeviceID2:
  • adapterDrivers: aticfx64 aticfx64 aticfx64 aticfx32 aticfx32 aticfx32 atiumd64 atidxx64 atidxx64 atiumdag atidxx32 atidxx32 atiumdva atiumd6a atitmm64
  • adapterDrivers2:
  • adapterRAM: 512
  • adapterRAM2:
  • adapterVendorID: 0x1002
  • adapterVendorID2:
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 6.2.9200.16571
  • driverDate: 9-28-2011
  • driverDate2:
  • driverVersion: 8.900.7.1000
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'direct2d', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'direct2d', u'AzureSkiaAccelerated': 0}
  • isGPU2Active: False
  • numAcceleratedWindows: 1
  • numTotalWindows: 1
  • webglRenderer: Google Inc. -- ANGLE (AMD Radeon(TM) HD 6520G Direct3D9Ex vs_3_0 ps_3_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Modified Preferences

  • browser.cache.disk.capacity: 358400
  • browser.cache.disk.smart_size.first_run: False
  • browser.cache.disk.smart_size.use_old_max: False
  • browser.cache.frecency_experiment: 2
  • browser.places.smartBookmarksVersion: 7
  • browser.sessionstore.upgradeBackup.latestBuildID: 20141106120505
  • browser.startup.homepage_override.buildID: 20141106120505
  • browser.startup.homepage_override.mstone: 33.1
  • dom.mozApps.used: True
  • extensions.lastAppVersion: 33.1
  • gfx.direct3d.last_used_feature_level_idx: 0
  • media.gmp-gmpopenh264.lastUpdate: 1415803128
  • media.gmp-gmpopenh264.version: 1.1
  • media.gmp-manager.lastCheck: 1415803127
  • network.cookie.prefsMigrated: True
  • places.history.expiration.transient_current_max_pages: 93361
  • plugin.disable_full_page_plugin_for_types: application/pdf
  • plugin.importedState: True
  • privacy.sanitize.migrateFx3Prefs: True

Misc

  • User JS: No
  • Accessibility: Yes
CoryMH 229 solutions 1076 answers

Hello,

Try also scanning with:

And then scan with these two to make sure that there are no other malicious files:

You can also check to see if your shortcut has been tampered with. Right click on your Firefox shortcut and select Properties. Check the target line under the Shortcut tab for any web pages after the "firefox.exe".

You can also try the Reset Firefox feature which can fix many issues by restoring Firefox to its factory default state while saving your bookmarks, history, passwords, cookies, and other essential information. Note: After resetting Firefox, you will lose any extensions, toolbar customizations, and some preferences. See the Reset Firefox -fix most problems article for more information.

Did this fix your problems? If not, try posting in a forum specializing in malware removal:

Hello, Try also scanning with: * [http://support.kaspersky.com/viruses/disinfection/5350 Anti-Rootkit Utility - TDSSKiller] And then scan with these two to make sure that there are no other malicious files: * [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware] * [http://general-changelog-team.fr/en/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner AdwCleaner] (for more info, see this [http://www.bleepingcomputer.com/download/adwcleaner/ alternate AdwCleaner download page]) You can also check to see if your shortcut has been tampered with. Right click on your Firefox shortcut and select Properties. Check the target line under the Shortcut tab for any web pages after the "firefox.exe". You can also try the Reset Firefox feature which can fix many issues by restoring Firefox to its factory default state while saving your bookmarks, history, passwords, cookies, and other essential information. Note: After resetting Firefox, you will lose any extensions, toolbar customizations, and some preferences. See the [[Reset Firefox - easily fix most problems]] article for more information. Did this fix your problems? If not, try posting in a forum specializing in malware removal: * Bleeping Computer - http://www.bleepingcomputer.com/forums * Spyware Warrior Forums - http://www.spywarewarrior.com/index.php * SWI Forums - http://www.spywareinfoforum.com/