Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

browser hijack

  • 7 replies
  • 26 have this problem
  • Last reply by cor-el

more options

I've tried avast, spyhunter etc ... to remove but when I restart my PC it returns as 4 entries in about:config.

browser.newtab.url; browser.startup.homepage; keyword.URL;;

It hjijacks the address line search and the default search in the top right. Firefox no longer starts automatically from STARTUP, although it is the only entry in STARTUP.

Any suggestions?

All Replies (7)

more options

It sounds like you have a third party program that has taken over your search engine, home page, and/or the default new tab page. Fortunately, this can be remedied easily:

  1. At the top of the Firefox window, click on the Firefox button (Tools menu in Windows XP), and then click Add-ons. The Add-ons Manager tab will open.
  2. In the Add-ons Manager tab, select the Extensions panel.
  3. Select the toolbar you wish to remove.
  4. Click the remove button.
  5. Click "Restart now" if it pops up. Your tabs will be saved and restored after the restart.

After Firefox restarts, install the Search Reset Tool. This will remove the rest of the traces of this program from your Firefox.

For further information, please read Remove a toolbar that has taken over your Firefox search or home page.

Did this fix the problem? Let us know!

more options


Thanks for your time.

I followed your advice (removed ALL add-ons/extensions). I was already suspicious of one of them.

I then reset Firefox.

It seemed to work. But when I restarted my PC it was back to square one, with the following entries re-appearing in about:config.

browser.newtab.url;, keyword.URL;,;1370699695

I'm a bit frustrated so forgive me if the tone of my text seems a tad impatient.

more options

when it is coming back after a restart of your computer, some external malware still seems to be active on your pc.

please run a full scan of your system with different other security tools like the free version of malwarebytes, adwcleaner, microsoft safety scanner & kaspersky security scan.

more options



I'll do that and let you know. May be a while because it's Saturday afternoon.

more options

You can try with "Combofix" its good for malware remover for Windows

more options

Go to your control panel and go through all entries there. Look for browser protect or similarly named program, most likely installed when original hijack took place. It won't be in Firefox extensions nor FF reset will help. Uninstall it.

more options

You can check for problems with preferences and rename or delete the prefs.js file and possible numbered prefs-##.js files and a possible user.js file to reset all prefs to the default value.

Boot the computer in Windows Safe Mode with network support (press F8 on the boot screen) as a test to see if that helps.

You can use the MSConfig program or the Autoruns utility to see which software and services are getting started, but be careful with disabling services.