X
Tap here to go to the mobile version of the site.

Support Forum

How to remove adware (mystartsearch)

Posted

Hello, I have tried several steps to remove this adware manually, but it still shows up as my start page. - I was not able to disable it from the add-ons (it wasn't there), - I was not able to uninstall it from the Windows Control Panel (it wasn't there), - I ran regedit.exe and manually deleted every single line that read "mystartsearch", - I refreshed Firefox and manually set the start page to the default. No good. It's still there. I also tried opening Internet Explorer and that's been infected too. What else can I do? Any advice would be really appreciated.

Hello, I have tried several steps to remove this adware manually, but it still shows up as my start page. - I was not able to disable it from the add-ons (it wasn't there), - I was not able to uninstall it from the Windows Control Panel (it wasn't there), - I ran regedit.exe and manually deleted every single line that read "mystartsearch", - I refreshed Firefox and manually set the start page to the default. No good. It's still there. I also tried opening Internet Explorer and that's been infected too. What else can I do? Any advice would be really appreciated.

Chosen solution

Does this appear when you launch a new window (Ctrl+n) in place of your home page, or only when you use the Firefox shortcut on your desktop or taskbar?

Some malware will modify your browser shortcuts. To check for that:

right-click the Firefox shortcut > Properties > Shortcut tab

For 64-bit Windows, the "Target" should be no more and no less than the following:

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

If anything follows that, make sure to remove it.

It would be the same idea for IE (but I'm not familiar with IE on Windows 8.1)

Read this answer in context 10

Additional System Details

Installed Plug-ins

  • Google Update
  • Intel web components updater - Installs and updates the Intel web components
  • Intel web components for Intel® Identity Protection Technology
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 11.25.2 for Mozilla browsers
  • Shockwave Flash 17.0 r0
  • Unity Player 4.6.2f1
  • WildTangent Games App V2 Presence Detector

Application

  • Firefox 36.0.1
  • User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:36.0) Gecko/20100101 Firefox/36.0
  • Support URL: https://support.mozilla.org/1/firefox/36.0.1/WINNT/pt-PT/

Extensions

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: Intel(R) HD Graphics 4600
  • adapterDescription2: AMD Radeon R9 M265X
  • adapterDeviceID: 0x0416
  • adapterDeviceID2: 0x6823
  • adapterDrivers: igdumdim64 igd10iumd64 igd10iumd64 igdumdim32 igd10iumd32 igd10iumd32
  • adapterDrivers2: aticfx64 aticfx64 aticfx64 aticfx32 aticfx32 aticfx32 atiumd64 atidxx64 atidxx64 atiumdag atidxx32 atidxx32 atiumdva atiumd6a atitmm64
  • adapterRAM: Unknown
  • adapterRAM2: 2048
  • adapterSubsysID: 00000000
  • adapterSubsysID2: 00000000
  • adapterVendorID: 0x8086
  • adapterVendorID2: 0x1002
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 6.3.9600.17111
  • driverDate: 1-29-2014
  • driverDate2: 4-4-2014
  • driverVersion: 10.18.10.3412
  • driverVersion2: 13.351.1006.1001
  • info: {u'AzureCanvasBackend': u'direct2d', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'direct2d', u'AzureSkiaAccelerated': 0}
  • isGPU2Active: False
  • numAcceleratedWindows: 1
  • numTotalWindows: 1
  • webglRenderer: Google Inc. -- ANGLE (Intel(R) HD Graphics 4600 Direct3D9Ex vs_3_0 ps_3_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Modified Preferences

Misc

  • User JS: No
  • Accessibility: No
Adriel 13 solutions 138 answers

Hi,

Please try scanning your computer using your Anti-Virus software to ensure that there is no running adware, viruses or any other malicious software on your computer.

Thank you!

Hi, Please try scanning your computer using your Anti-Virus software to ensure that there is no running adware, viruses or any other malicious software on your computer. Thank you!

Question owner

Hello Adriel, thanks for your answer. I finished doing that a while ago, the antivirus spotted several infected files on the computer and deleted them... but the browser still has the same problem. It will not assume any other start page, no matter what I do. I truly don't understand what could be wrong here.

Hello Adriel, thanks for your answer. I finished doing that a while ago, the antivirus spotted several infected files on the computer and deleted them... but the browser still has the same problem. It will not assume any other start page, no matter what I do. I truly don't understand what could be wrong here.
jscher2000
  • Top 10 Contributor
8792 solutions 71910 answers

Chosen Solution

Does this appear when you launch a new window (Ctrl+n) in place of your home page, or only when you use the Firefox shortcut on your desktop or taskbar?

Some malware will modify your browser shortcuts. To check for that:

right-click the Firefox shortcut > Properties > Shortcut tab

For 64-bit Windows, the "Target" should be no more and no less than the following:

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

If anything follows that, make sure to remove it.

It would be the same idea for IE (but I'm not familiar with IE on Windows 8.1)

Does this appear when you launch a new window (Ctrl+n) in place of your home page, or only when you use the Firefox shortcut on your desktop or taskbar? Some malware will modify your browser shortcuts. To check for that: right-click the Firefox shortcut > Properties > Shortcut tab For 64-bit Windows, the "Target" should be no more and no less than the following: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" If anything follows that, make sure to remove it. It would be the same idea for IE (but I'm not familiar with IE on Windows 8.1)
jscher2000
  • Top 10 Contributor
8792 solutions 71910 answers

By the way, the Refresh feature creates an Old Firefox Data folder on your desktop that has your old settings folder. I suggest retaining that for a week or two in case you discover something critical is missing from Firefox after the refresh.

By the way, the Refresh feature creates an Old Firefox Data folder on your desktop that has your old settings folder. I suggest retaining that for a week or two in case you discover something critical is missing from Firefox after the refresh.

Helpful Reply

Thanks, jscher2000! That was it. The shortcut to Firefox still had the link to mystartsearch. I was able to remove it thanks to your advice. (Also, the Old Firefox Data folder you mentioned... It had traces of mystartsearch too. Amazing how deep this thing goes.)

Adriel, thanks again for your advice. I thought that by deleting the affected registry entries manually the problem might had been solved, but the antivirus scan really was necessary.

Thank you so much to both of you. The relief feels good. :) Learned some neat tricks too.

Thanks, jscher2000! That was it. The shortcut to Firefox still had the link to mystartsearch. I was able to remove it thanks to your advice. (Also, the Old Firefox Data folder you mentioned... It had traces of mystartsearch too. Amazing how deep this thing goes.) Adriel, thanks again for your advice. I thought that by deleting the affected registry entries manually the problem might had been solved, but the antivirus scan really was necessary. Thank you so much to both of you. The relief feels good. :) Learned some neat tricks too.
Kurt0018 0 solutions 3 answers

Hi, there are detailed steps to manually remove Mystartsearch in this post. I think it will be helpful!

Hi, there are detailed steps to manually remove Mystartsearch in [http://guides.uufix.com/how-to-remove-mystartsearch-com-from-pcs-step-by-step-removal-guides/ this post]. I think it will be helpful!