Try our recommended steps scanning with multiple and up to date tools as explained lower down in this post. You need to use multiple tools because none of them catch everything.

I note this thread related to a similar problem and was resolved. It my be necessary to try tools mentioned in that thread, or even consult that or a similar specialist forum to solve this issue.

• http://www.smartestcomputing.us.com/topic/80581-my-win7-laptop-has-malware-and-removed-items/
• Other security fora listed in our article Troubleshoot Firefox issues caused by malware

Please post back to say what you tried and how you get on.

Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.

You can try these free programs to scan for malware, which work with your existing antivirus software:

• Microsoft Safety Scanner
• MalwareBytes' Anti-Malware
• Anti-Rootkit Utility - TDSSKiller
• AdwCleaner (for more info, see this alternate AdwCleaner download page)
• Hitman Pro
• ESET Online Scanner

Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one. Windows 8 has antivirus built-in already.

Further information can be found in the Troubleshoot Firefox issues caused by malware article.

I have tried the following programs, but still get the bogus URL when I open a new page. Interestingly, F'Fox does not actually go to the bogus URL - just gives it as a destination. Again, the bogus URL is: resource://jid1-lpoibaxffmusix-at-jetpack/musixlib/data/index.html

Here are the programs/actions I've tried so far. FWIW, this problem only affects F'Fox, but NOT IE, Chrome or Opera.

• Avira
• Microsoft Safety Scanner (running)
• MalwareBytes' Anti-Malware
• Anti-Rootkit Utility - TDSSKiller
• AdwCleaner
• Hitman Pro
• ESET Online Scanner
• SuperAntiSpyware
• Tried an uninstall & reinstall on Firefox

Results from AdwCleaner - but which ones should I delete? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1. AdwCleaner v4.207 - Logfile created 04/07/2015 at 17:16:11
2. Updated 21/06/2015 by Xplode
3. Database : 2015-07-02.1 [Server]
4. Operating system : Windows 7 Professional Service Pack 1 (x64)
5. Username : John - NEWDELL
6. Running from : C:\Users\John\Downloads\adwcleaner_4.207.exe
7. Option : Scan

• • • • • [ Services ] *****

• • • • • [ Files / Folders ] *****

File Found : C:\Users\John\AppData\Roaming\AdobeWLCMCache.dat File Found : C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\cacrixe1.default-1415018018853\Extensions\{b9db16a4-6edc-

47ec-a1f4-b86292ed211d}.xpi File Found : C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\cacrixe1.default-1415018018853\user.js Folder Found : C:\ProgramData\6d37fe1e0ec00a7e Folder Found : C:\ProgramData\KingSoft Folder Found : C:\Users\John\AppData\Local\KingSoft Folder Found : C:\Users\John\AppData\Roaming\KingSoft

• • • • • [ Scheduled tasks ] *****

• • • • • [ Shortcuts ] *****

• • • • • [ Registry ] *****

Key Found : HKCU\Software\DriverTuner Key Found : HKCU\Software\DriverTuner_Init Key Found : [x64] HKCU\Software\DriverTuner Key Found : [x64] HKCU\Software\DriverTuner_Init Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96} Key Found : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3D0F43D9-C1D7-733C-01F8-4A3001BF8CC3} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C87834EB-A2A0-B9D4-AA9A-C263D1191051}

• • • • • [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17840

-\\ Mozilla Firefox v39.0 (x86 en-US)

[cacrixe1.default-1415018018853] - Line Found : user_pref("avira.safe_search.installed", "[\"safesearch\"]"); [cacrixe1.default-1415018018853] - Line Found : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":

[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...] [cacrixe1.default-1415018018853] - Line Found : user_pref("extensions.safesearch.MP_DISTINCT_ID", "\"14a8ccef05946a-

081f2cc0a694c48-47554136-0-14a8ccef05a48a\""); [cacrixe1.default-1415018018853] - Line Found : user_pref("extensions.safesearch.SAUTH_expires_at", "1432274770"); [cacrixe1.default-1415018018853] - Line Found : user_pref("extensions.safesearch.SAUTH_rndsnr",

"\"bb03abe72ab7d18f38d4690c19d343b1b0f51093\""); [cacrixe1.default-1415018018853] - Line Found : user_pref("extensions.safesearch.SAUTH_userid", "5743725596"); [cacrixe1.default-1415018018853] - Line Found : user_pref("extensions.safesearch.SAUTH_utoken",

"\"6520a3a13fe27e69cbb83d25203f9f844fadb98f\""); [cacrixe1.default-1415018018853] - Line Found : user_pref("extensions.safesearch.install", "1419701579871"); [cacrixe1.default-1415018018853] - Line Found : user_pref("extensions.safesearch.search_offer_disabled", "true"); [cacrixe1.default-1415018018853] - Line Found : user_pref("extensions.toolbar.mindspark._9pMembers_.lastActivePing",

"1432305235934"); [cacrixe1.default-1415018018853] - Line Found : user_pref("extensions.toolbar.mindspark.lastInstalled",

"onlinemapfinder@mindspark.com"); [cacrixe1.default-1415018018853] - Line Found : user_pref("extensions.xpiState", "{\"app-profile\":{\"safesearch@avira.com\":{\"d\":\"C:

\\\\Users\\\\John\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\cacrixe1.default-1415018018853\\\\e[...]

-\\ Google Chrome v43.0.2357.130

[C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] :

hxxp://search.aol.com/aol/search?q={searchTerms}

-\\ Comodo Dragon v

-\\ Chrome Canary v

AdwCleaner[R0].txt - [17868 bytes] - [26/10/2014 10:10:14] AdwCleaner[R1].txt - [4247 bytes] - [02/07/2015 13:59:49] AdwCleaner[R2].txt - [3850 bytes] - [04/07/2015 17:16:11] AdwCleaner[S0].txt - [17748 bytes] - [26/10/2014 10:19:32]

1. 1. 1. 1. 1. 1. 1. 1. 1. 1. EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [3969 bytes] ##########

End of AdwCleaner logfile ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

That is likely a problem with an extension (musixlib).

• resource://jid1-lpoibaxffmusix-at-jetpack/musixlib/data/index.html

See if you can find this extension in about:addons if you start Firefox in Safe Mode by holding down the Shift key.

You can check if you have this extension in the extensions folder

• jid1-lPOiBAxFFMUSIX@jetpack.xpi

You can use this button to go to the currently used Firefox profile folder:

• Help > Troubleshooting Information > Profile Directory: Show Folder (Linux: Open Directory; Mac: Show in Finder)
• http://kb.mozillazine.org/Profile_folder_-_Firefox

I note your sytem inforation side does not list that addon. There is a removal guide aboout that:

• http://malwaretips.com/blogs/musixlib-start-removal/