X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

How do I get rid of browser virus called Iminent, which installs as add-on, when remove button is disabled?

Posted

I have firefox 20.0.1

This iminent thing must have ridden in on some download but it is all over the browser trying to put up spammy stuff in facebook, gmail, pinterest. I t may be partially blocked by some other add-ons like adblock-plu or better privacy, but it is there creating spurious toolbars on all my social sites and with little popout side windows.

I ran Malwarebytes and it found nothing.

I tried to follow these instructions from http://botcrawl.com/how-to-remove-the-search-iminent-search-the-web-hijacker-virus/#Firefox to remove it: Step 1: Open Firefox, and navigate to Tools -> Add-ons (Ctrl+Shift+A). Step 2: Select Extensions and find the particular Search Iminent Search The Web Toolbar extension, and click disable and remove.

BUT the "remove" button was absent.

I tried to follow these instructions to remove Iminent cookie: How to block the Iminent.com cookie 1.From the Tools menu, select Options 2.In the upper section of the Options window, click Privacy 3.In the Cookies tab, click Exceptions 4. In the new Exceptions – Cookies window, enter Iminent.com in the Address of Website field and click Disable.

BUT there was no "cookie tab."

Additional System Details

Installed Plug-ins

  • Shockwave Flash 11.7 r700
  • iTunes Detector Plug-in
  • Adobe PDF Plug-In For Firefox and Netscape "9.5.4"
  • Adobe PDF Plug-In For Firefox and Netscape 11.0.02
  • Google Update
  • McAfee MSS+ NPAPI Plugin
  • 5.1.20125.0
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • RealJukebox Netscape Plugin
  • RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In
  • RealPlayer(tm) HTML5VideoShim Plug-In
  • RealPlayer(tm) LiveConnect-Enabled Plug-In
  • RealPlayer Download Plugin
  • Amazon MP3 Downloader Plugin 1.0.17
  • NPWLPG

Application

  • Firefox 20.0.1
  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0
  • Support URL: http://support.mozilla.org/1/firefox/20.0.1/WINNT/en-US/

Extensions

  • Adblock Plus 2.2.3 ({d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d})
  • BetterPrivacy 1.68 ({d40f5e7b-d2cf-4856-b441-cc613eeffbe3})
  • DownloadHelper 4.9.14 ({b9db16a4-6edc-47ec-a1f4-b86292ed211d})
  • Firebug 1.11.2 (firebug@software.joehewitt.com)
  • FireFTP 2.0.13 ({a7c6cf7f-112c-4500-a7ea-39801a327e5f})
  • FireFTP button 1.1.1d ({9BAE5926-8513-417d-8E47-774955A7C60D})
  • GetSavin 5.0 (getsavin@jetpack)
  • Greasemonkey 1.8 ({e4a8a97b-f2ed-450b-b12d-ee082ba24781})
  • Rainbow 1.5.2 (rainbow@colors.org)
  • RealPlayer Browser Record Plugin 15.0.6 ({0153E448-190B-4987-BDE1-F256CADA672F})
  • Show my Password 2.0 ({cd617372-6743-4ee4-bac4-fbf60f35719e})
  • TinEye Commercial API Search 1.1 (support@tineye.com)
  • TinEye Reverse Image Search 1.1 (tineye@ideeinc.com)
  • Troubleshooter 1.1a (troubleshooter@mozilla.org)
  • Web Developer 1.2.4 ({c45c406e-ab73-11d8-be73-000a95be3b12})
  • abcTajpu "a b c type-oo" 1.7.9 ({15a7ef52-8a77-426e-9e17-e21af257d7c8}) (Inactive)
  • astoundlearning 0.3 (jid1-eoyaBDDWDtPyhQ@jetpack) (Inactive)
  • Bookmarklet 1.0 (apps-6@tejji.com) (Inactive)
  • Collusion 0.27 (jid1-F9UJ2thwoAm5gQ@jetpack) (Inactive)
  • Coprolalia 1.0 ({d8b271a6-6ed3-427d-b600-1b674e00e6ec}) (Inactive)
  • Firefox Video Download Helper 2.3.0 (none@allvideodownloader.com) (Inactive)
  • Font Information 0.1 ({70ded480-0a45-4099-84d1-65aa1cb1575e}) (Inactive)
  • Ghostery 2.9.4 (firefox@ghostery.com) (Inactive)
  • Iminent Minibar 6.16.4.4 (webbooster@iminent.com) (Inactive)
  • RequestPolicy 0.5.27 (requestpolicy@requestpolicy.com) (Inactive)
  • ShowIP 2.0 ({3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}) (Inactive)
  • TrueSuite Website Logon 5.0 (websitelogon@truesuite.com) (Inactive)
  • VideoDownloadConverter 5.3.1.13727 (4zffxtbr@VideoDownloadConverter_4z.com) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: NVIDIA GeForce GT 425M
  • adapterDescription2:
  • adapterDeviceID: 0x0df0
  • adapterDeviceID2:
  • adapterDrivers: nvd3dumx,nvwgf2umx,nvwgf2umx nvd3dum,nvwgf2um,nvwgf2um
  • adapterDrivers2:
  • adapterRAM: 2047
  • adapterRAM2:
  • adapterVendorID: 0x10de
  • adapterVendorID2:
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 6.1.7601.17789
  • driverDate: 10-16-2012
  • driverDate2:
  • driverVersion: 9.18.13.721
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'direct2d', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'direct2d'}
  • isGPU2Active: False
  • numAcceleratedWindows: 1
  • numTotalWindows: 1
  • webglRenderer: Google Inc. -- ANGLE (NVIDIA GeForce GT 425M)
  • windowLayerManagerType: Direct3D 10

Modified Preferences

  • accessibility.typeaheadfind.flashBar: 0
  • browser.cache.disk.capacity: 358400
  • browser.cache.disk.smart_size.first_run: False
  • browser.cache.disk.smart_size.use_old_max: False
  • browser.cache.disk.smart_size_cached_value: 358400
  • browser.places.smartBookmarksVersion: 4
  • browser.startup.homepage: http://www.google.com/ig
  • browser.startup.homepage_override.buildID: 20130409194949
  • browser.startup.homepage_override.mstone: 20.0.1
  • dom.disable_open_during_load: False
  • dom.mozApps.used: True
  • dom.w3c_touch_events.expose: True
  • extensions.lastAppVersion: 20.0.1
  • gfx.direct3d.prefer_10_1: True
  • network.cookie.prefsMigrated: True
  • places.database.lastMaintenance: 1367196569
  • places.history.expiration.transient_current_max_pages: 104858
  • places.history.expiration.transient_optimal_database_size: 167772160
  • plugin.disable_full_page_plugin_for_types: application/pdf
  • privacy.sanitize.migrateFx3Prefs: True
  • security.csp.enable: False
  • security.disable_button.openCertManager: False
  • security.disable_button.openDeviceManager: False
  • security.OCSP.disable_button.managecrl: False
  • security.OCSP.enabled: 0
  • security.warn_viewing_mixed: False

Misc

  • User JS: No
  • Accessibility: Yes
philipp
  • Top 10 Contributor
  • Moderator
2046 solutions 8901 answers

hello anartist, have a look into the windows control panel / programs section if there's any entry related to the adware that you can remove.

for more possible solutions please also refer to Cannot uninstall an add-on

cor-el
  • Top 10 Contributor
  • Moderator
10762 solutions 96861 answers

See also:

Question owner

Phillipp, am trying it now. Hope it does not resist uninstallation by installing some crap as it exits. It didn't go willingly and opened up the website on the browser. Now to reboot . . .

Modified by anartist

Tyler Downer
  • Administrator
  • Moderator
1165 solutions 6642 answers

Helpful Reply

Just as an FYI, we are working on blocking Iminent from Firefox for other users in the future, so hopefully this won't happen again.

Question owner

Thank you, for all of us users!

Ravonies 0 solutions 4 answers

I tried removing it, through Control Panel, and it is still there.

You may have to try physical going in and Killing it... I run off of Vista by the way. ^_^

Also it seems to have a habit of wanting to be on all your browsers you use most often such as Chrome, and Opera too.

I think it would be a great help if you got all the companies together and made a Fix for all Browsers, not just yours, because it seems it could jump back to Mozilla if you only fix yours...


- Changing the World One Idea at a Time - Ravonies.

Ravonies 0 solutions 4 answers

I just tried a Direct Delete after uninstalling I will tell you if it works.

Ravonies 0 solutions 4 answers

Ok A Direct Delete Works.... - Direct Delete.... AKA, Manual Uninstall and/or Finding any remains and Deleting them...

So Basically.... and I hope this works for other Computers with other OS's besides Vista....

1. Use Control Panel to Uninstall it - Then clear the icon from there. 2. Search for it in your programs - IE... open start, Type "Iminent" (So far works for Vista) - Delete It... 3. Do it again to find any thing you missed. - Sometimes a Shortcut or straggler will be left... KILL IT. 4. Clean out the Cache of all other other browsers with the cookie... - Seeing if this last step will work right now. 5. Recycle Bin Empty. And now your computer should be free of Iminent...

This should work for your Browser.... Disable THEN uninstall it from Add-Ons

HEY MOZILLA PEOPLE! Can you Confirm this Solution?

Modified by Ravonies

stewartmark 2 solutions 1 answers

I finally went to the Iminent website and sent these jerks an email through their contact us page. They sent me an uninstall tool to uninstall all Iminent software.

I think this Iminent was attached to some update I made and didn't notice it. When I find out, I will be getting rid of that entire program too.

Ravonies 0 solutions 4 answers

Good God is it back T.T my kill worked for the basic part of it but it is back, overiding my homepage, Searches, and Browser pretty much.

Solution failed.... looking into the above users solution ^_^

I hope it will help me.

Modified by Ravonies

cor-el
  • Top 10 Contributor
  • Moderator
10762 solutions 96861 answers

Extensions that do not have a "Remove" button are installed by other software and are not under control of the Firefox extension manager.
Such globally installed extensions are usually found via a registry scan or are installed in a location that Firefox scans for installed extensions.

Extensions installed this way need to be removed via the settings (options/preferences) of the program that has added this extension or you need to uninstall this program via the Control Panel.
In Firefox you an only disable such an extension.
Otherwise you would have to remove the registry key that makes Firefox install this extension.
Be careful with editing the registry as there is NO UNDO possible: all changes are applied immediately.

Question owner

Thanks. I've bookmarked that page on extensions & registry.

Chippy55 0 solutions 1 answers

I didn't even realize that I had Iminent installed, so I don't know when or how it appeared. I simply did as the first instructions said: Go to Tools, Add-ons, then select Extensions and there it was. I was given the Options to Disable or Remove it and did so.

  Here's something else I just realized: My Twitter account has had (for a few weeks) annoying Emoticons right below the "Compose New Tweet" dialogue box, and an annoying little red balloon on my home page. I have no clue how the Emoticons got there and was trying to remove them today after I got rid of another annoying thing on Twitter: Intermittently and periodically without me doing anything, suddenly my Twitter Home Page would go to a page that the browser tab said was for "Adam (undefined) on Twitter". And I would purportedly be on the home page for "Adam" with an Oval Face for the avatar. These two annoying items were on my laptop and I just checked and BOTH have been removed from my Twitter home page, meaning the Emoticons AND hopefully the page switching to the "Adam (undefined) on Twitter" home page.
  So, it appears that those two items were also caused by that Iminent Add-on, just to alert anyone else who's had this problem.

Helpful Reply

Yes all that happened to me [but on FB as I rarely use twitter] . It was browser hijacking. I even commented about it on FB but no one saw the images except me.

Modified by anartist

bruce24 0 solutions 12 answers

Moderator removed link that references paid software that users may not necessarily need.

I have to say Iminent Search is a parasitic browser hijacker and search.iminent.com redirect is very annoying.

 I searched for a good browser redirect removal method on google a few weeks ago and found a feasible easy way. One easy way to remove Iminent is run a free antivirus tool called blank I still bookmarked the 

feasible removal guide, it's on definitely it will helps you to solve these browser hijacker problems completely.

Modified by Shawn

Question owner

Thank you. bruce24, I will certainly keep that handy! It was so babbling for so long and asking for help on FB when no one could see it but me [see screengrabs attached] made me feel a little dotty

Modified by anartist

Question owner

2nd image

Modified by anartist

Question owner

3rd image

Modified by anartist

Question owner

SOLVED