X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

btsearch.name -- cannot delete

Posted

it's that simple but I don't know what else it is doing to my computer. IF one googles this problem it is recognized and money solutions are offered but many are too complex for me, and the problems continue reeking havoc. Has screwed relationship with my printer and can't seem to dl from Microsoft.

but it all started out with this inability to change my home page back to what it was. it remains btsearch.name and what appears is a custom google search page as the home page.

I am temp. using chrome........as I am already weary of using so much time on this problem. Help if you can.

Additional System Details

Installed Plug-ins

  • Shockwave Flash 11.5 r502
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • iTunes Detector Plug-in
  • Next Generation Java Plug-in 10.9.2 for Mozilla browsers
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Adobe PDF Plug-In For Firefox and Netscape 11.0.0
  • A plugin to detect whether the Adobe Application Manager is installed on this machine.
  • Google Update
  • Adobe PDF Plug-In For Firefox and Netscape "9.5.2"
  • GEPlugin
  • 5.1.10411.0
  • Picasa plugin
  • NPWLPG
  • Coupons, Inc. Coupon Printer Plugin
  • Coupons, Inc. Coupon Printer DLL
  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Office Authorization plug-in for NPAPI browsers

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0

More Information

followed old firefox thread for this problem, run all kinds of malware, anti virus- nothing works.
tried restore..........nope. tried reset, nope.
Application Basics
Name
Firefox
Version
17.0.1
User Agent
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0
Profile Folder
Show Folder
Enabled Plugins
about:plugins
Build Configuration
about:buildconfig
Crash Reports
about:crashes
Memory Use
about:memory
Extensions
Name
Version
Enabled
ID
Add Google Search To New Tab Page
1.0.2
true
newtabgoogle@graememcc.co.uk
Java Console
6.0.35
true
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
Java Console
6.0.37
true
{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
Omnibar
0.7.16.20121026
true
omnibar@ajitk.com
WOT
20120926
true
{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
SmartPrintButton
1.0
false
quickprint@hp.com
Important Modified Preferences
Name
Value
accessibility.blockautorefresh
true
browser.cache.disk.capacity
358400
browser.cache.disk.smart_size.first_run
false
browser.cache.disk.smart_size.use_old_max
false
browser.cache.disk.smart_size_cached_value
358400
browser.places.smartBookmarksVersion
4
browser.startup.homepage
http://btsearch.name
browser.startup.homepage_override.mstone
ignore
extensions.lastAppVersion
17.0.1
gfx.direct3d.prefer_10_1
true
keyword.URL
http://btsearch.name/results.php?q=
network.cookie.prefsMigrated
true
places.database.lastMaintenance
1355726168
places.history.expiration.transient_current_max_pages
104858
privacy.sanitize.migrateFx3Prefs
true
security.warn_viewing_mixed
false
Graphics
Adapter Description
AMD Radeon HD 6900 Series
Vendor ID
0x1002
Device ID
0x6719
Adapter RAM
2048
Adapter Drivers
aticfx64 aticfx64 aticfx64 aticfx32 aticfx32 aticfx32 atiumd64 atidxx64 atidxx64 atiumdag atidxx32 atidxx32 atiumdva atiumd6a atitmm64
Driver Version
8.801.0.0
Driver Date
11-25-2010
Direct2D Enabled
true
DirectWrite Enabled
true (6.1.7601.17789)
ClearType Parameters
Gamma: 2200 Pixel Structure: BGR ClearType Level: 100 Enhanced Contrast: 300
WebGL Renderer
Google Inc. -- ANGLE (AMD Radeon HD 6900 Series ) -- OpenGL ES 2.0 (ANGLE 1.0.0.1242)
GPU Accelerated Windows
1/1 Direct3D 10
AzureCanvasBackend
direct2d
AzureFallbackCanvasBackend
cairo
AzureContentBackend
direct2d
JavaScript
Incremental GC
1
Accessibility
Activated
0
Prevent Accessibility
0
Library Versions
Expected minimum version
Version in use
NSPR
4.9.2
4.9.2
NSS
3.13.6.0 Basic ECC
3.13.6.0 Basic ECC
NSS Util
3.13.6.0
3.13.6.0
NSS SSL
3.13.6.0 Basic ECC
3.13.6.0 Basic ECC
NSS S/MIME
3.13.6.0 Basic ECC
3.13.6.0 Basic ECC

cor-el
  • Top 10 Contributor
  • Moderator
10746 solutions 96695 answers

The keyword.URL pref links to BTSearch: http://btsearch.name/results.php?q=network.cookie.prefsMigrated

Try to reset the prefs on the about:config page that refer to btsearch.

  • Open the about:config page via the location bar and do a search for btsearch via the Search bar at the top of the about:config page.
  • Reset all btsearch related prefs that appear bold (user set) via the right-click context menu to their default values.

If you do not keep changes after a restart then see:

Question owner

done multiple times

Question owner

Tried the about:config solution. Nope it is still there...............

AliceWyman
  • Top 25 Contributor
  • Moderator
190 solutions 1961 answers

I suggest that you visit a website specializing in malware removal. See Troubleshoot Firefox issues caused by malware

Here is a recent post by a Firefox user with a similar problem in the Bleeping Computer forums (do NOT follow those instructions, which are specific to that user. It's just an example of type of help you can get there):

P.S. For anyone needing help with unwanted toolbars that change your Firefox search or home page settings, see also:

Modified by AliceWyman

kondoril 0 solutions 15 answers

It is a shame that Mozilla does nothing to solve this issue or find a solution. This problem exist for months and it could be solved when it affected chrome... just by deleting it from the search engines, but with firefox it is different.. it keeps returning like a cat... and no anti-malware or anti virus detects it.... It is annoying... Do something... Thanks

AliceWyman
  • Top 25 Contributor
  • Moderator
190 solutions 1961 answers

To kondoril (or anyone else having problems):

The solution suggested in this thread is to follow the steps in the Reset Firefox – easily fix most problems article. Cor-el suggested to Spirasol (the thread owner) to reset the keyword.URL preference, which should be easier in Firefox 19 with the fix for Bug 718088 - offer to re-set keyword.URL if it has a non-default value.

I suggested following the instructions in the Remove a toolbar that has taken over your Firefox search or home page and Troubleshoot Firefox issues caused by malware articles.

If you need more help you should start a new thread, which will show your own system details, since this one has system information specific for helping Spirasol.

kondoril 0 solutions 15 answers

Helpful Reply

Thank you

This is not a toolbar... I tried...

Reset ? and if this doesn't help ? then what ? re-visiting all the tabs / tab groups ?

did you hear about anyone who succeeded dealing with this issue by doing reset ?

Thanks

kondoril 0 solutions 15 answers

I did the reset..

Total disaster !!

and.. it did not resolve anything... !!!

AliceWyman
  • Top 25 Contributor
  • Moderator
190 solutions 1961 answers

kondoril, The instructions in the Remove a toolbar that has taken over your Firefox search or home page article can also be used to remove extensions that are not toolbars, and it links to a search reset add-on to reset your home page and search.

If the other suggestions didn't help, what about Troubleshoot Firefox issues caused by malware ? Did you try running a malware removal tool or visiting a malware removal forum? That may be your best bet.

See this malwarebytes forum thread (do NOT follow those instructions, which are specific to that user. It's just another example of type of help you can get on a malware removal forum).

Modified by AliceWyman

AliceWyman
  • Top 25 Contributor
  • Moderator
190 solutions 1961 answers

(To repeat) If you need more help you should start a new thread, which will show your own system details, since this one has system information specific for helping Spirasol. You can use this link as a starting point: https://support.mozilla.org/questions/new

kondoril 0 solutions 15 answers

Thank you.. but I really can't see the point This problem is the same and it happened to many people who are writing and asking for help since 7/12 and no one provided a real solution. This is a shame.. and even insulting.

Why make a browser if you don't try to protect it or fix it ?

So far, all the solutions caused more damage a work than this hijacker

Thanks

cor-el
  • Top 10 Contributor
  • Moderator
10746 solutions 96695 answers

Do you see any prefs coming up on the about:config if you search for btsearch?

You can also check if you have a mozilla.cfg file in the Firefox program folder.

  • (32 bit Windows) C:\Program Files\Mozilla Firefox\
  • (64 bit Windows) C:\Program Files (x86)\Mozilla Firefox\
kondoril 0 solutions 15 answers

Yes... there are 2-4 entries with btsearch.... and I presses reset for each... and I changed the home page to what I want...but it helps for the same session... but when Firefox is restarted they return

And Yes.. There is this cfg .. and it seems nasty ! I will delete it and see what happens !!! Thank you !!

kondoril 0 solutions 15 answers

You are great !! Thanks

This is the solution

deleting the file was not good cause Firefox needed it... but then I edited it and deleted all btsearch / custom search replacing them with blank or google...

now it is GONE !!!

Thank you

Some one must publish this

AliceWyman
  • Top 25 Contributor
  • Moderator
190 solutions 1961 answers

Helpful Reply

Thanks to cor-el for mentioning that a "mozilla.cfg" file in the Firefox installation directory can be used for locking preferences. I added that information to http://kb.mozillazine.org/Preferences_not_saved#Other_solutions

cor-el
  • Top 10 Contributor
  • Moderator
10746 solutions 96695 answers

You're welcome kondoril.

Note that if you delete the mozilla.cfg file in the Firefox program folder that you also need to check if there is a file in the defaults\pref folder that specifies to use the mozilla.cfg file.
Easiest is to delete the Firefox program folder and do a clean reinstall.

You can also use this file for your own purposes to initialize prefs.

More:

These functions can be used in the mozilla.cfg file:

defaultPref();  // set new default value
pref();         // set pref, but allow changes in current session
lockPref();     // lock pref, disallow changes

Modified by cor-el

kondoril 0 solutions 15 answers

Thanks again As I wrote - I edited the file and deleted all the items that the malware had added. It is perfect now :-)

cor-el
  • Top 10 Contributor
  • Moderator
10746 solutions 96695 answers

Do you still have a copy of all the content in the mozilla.cfg file?

Which files do you have in the \defaults\pref folder?

There should only be a channel-prefs.js file to specify the update channel.

pref("app.update.channel", "release");
kondoril 0 solutions 15 answers

The malicious *.cfg file content was:

//home
pref("extensions.shownSelectionUI", true);
pref("extensions.autoDisableScopes", 0);
pref("browser.startup.homepage","http://btsearch.name");
pref("browser.startup.homepage_override.mstone", "ignore");
pref("browser.newtab.url", "http://btsearch.name");
pref("browser.search.defaultenginename", "Custom search");
pref("browser.search.selectedEngine", "Custom search");
pref("keyword.URL", "http://btsearch.name/results.php?q=");


I changed it to:

//home
pref("extensions.shownSelectionUI", true);
pref("extensions.autoDisableScopes", 0);
pref("browser.startup.homepage","about:blank");
pref("browser.startup.homepage_override.mstone", "ignore");
pref("browser.newtab.url", "about:blank");
pref("browser.search.defaultenginename", "Google");
pref("browser.search.selectedEngine", "Google");
pref("keyword.URL", "");

The "google" entry does nothing.. I know it now... but it doesn't cause any problem.. so...

I have the *.js file and it contains: pref("app.update.channel", "release"); just as you wrote

Thanks

Modified by cor-el