X
Tocca qui per la versione per piattaforma mobile del sito.
La versione utilizzata di Firefox è obsoleta e costituisce un rischio per la sicurezza! Aggiornare Firefox

Forum di supporto

Questa discussione è archiviata. Inserire una nuova richiesta se occorre aiuto.

Firefox Homepage Hijacked by Claro-Search

Inviato
    • RESETTING DOES NOT WORK**

Hello, I can recently acquired the Search Engine Malware? (I think it is a Malware)

http://isearch.claro-search.com/?affID=114169&tt=120812_bandext_3312_4&babsrc=HP_iclro&mntrId=907087e4000000000000002185985c90

I can not for the life of me take back the "HOMEPAGE" I have searched around everywhere and found how to take over the "NEW TAB" issue and it is back to Google.ca.

But I have yet to find a single issue with the Homepage being automatically hijacked and sending me straight back to the website no matter what I do to change the URL.

I have done the following things.

1: Removed the Toolbar from Add-ons

2: Removed the Toolbar from Control Panel

3: Shut down my computer and rebooted into Safe Mode - Networking to run Malware and other virus scanners.

4: Changed my Hosts File

5: Turned on Firefox in Safe-Mode resetting all defaults.

6: Changed the URL several times. ____________________________________________________

I can set the homepage to "Blank" which solves the issue. BUT I want Claro off my computer for good not just covered up with settings.


NOTE: I do not have expert knowledge in computerized configuration so I am at a lose into doing something like Manually checking my systems files and such to remove this issue.

If you know how to fix this, Please be detailed and simple.

Also! If i type anything into the search bar incorrectly it automatically uses iSearch-Claro to search for results.

Modificato da Pawchii il

Soluzione scelta

Is that the search bar on the about:home page?

If there is a problem with searching via the default about:home page then try to reset the search engine used on the about:home page.

Reset the browser.startup.homepage_override.mstone pref via the right-click context menu to the default on the about:config page and close and restart Firefox to restore the about:home page to its default.

  1. Open the about:config page via the location bar
  2. Type in the Filter bar: mstone
  3. Right-click the browser.startup.homepage_override.mstone line and select: Reset
  4. Close and restart Firefox

If this didn't help then delete the delete the chromeappsstore.sqlite file in the Firefox Profile Folder and repeat the above.

You can use this button to go to the Firefox profile folder:

  • Help > Troubleshooting Information > Profile Directory: Open Containing Folder
Leggere questa risposta nel contesto 18

Dettagli aggiuntivi sul sistema

Che cosa è successo

Ogni volta che avvio Firefox

È cominciato quando...

3 Days ago

Plugin installati

  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Google Update
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 10.5.1 for Mozilla browsers
  • Vizzed Retro Game Room Plugin
  • iTunes Detector Plug-in
  • 4.1.10329.0
  • Roblox Launcher Plugin
  • DivX Plus Web Player version 2.2.0.52
  • RealJukebox Netscape Plugin
  • RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In
  • RealPlayer(tm) HTML5VideoShim Plug-In
  • RealPlayer(tm) LiveConnect-Enabled Plug-In
  • 12.0.1.669
  • GEPlugin
  • Shockwave Flash 10.3 r183
  • Unity Player 3.4.1f5
  • Adobe Shockwave for Director Netscape plug-in, version 11.6.1.629
  • DivX VOD Helper Plug-in
  • Windows Presentation Foundation (WPF) plug-in for Mozilla browsers
  • Adobe PDF Plug-In For Firefox and Netscape

Applicazione

  • User Agent: Mozilla/5.0 (Windows NT 6.0; rv:14.0) Gecko/20100101 Firefox/14.0.1

Ulteriori informazioni

Application Basics
Name
Firefox
Version
14.0.1
User Agent
Mozilla/5.0 (Windows NT 6.0; rv:14.0) Gecko/20100101 Firefox/14.0.1
Profile Folder
Show Folder
Enabled Plugins
about:plugins
Build Configuration
about:buildconfig
Crash Reports
about:crashes
Memory Use
about:memory
Extensions
Name
Version
Enabled
ID
AVG Do Not Track
12.0.0.2189
false
{F53C93F1-07D5-430c-86D4-C9531B27DFAF}
AVG Safe Search
12.0.0.2191
false
{1E73965B-8B48-48be-9C8D-68B920ABC1C4}
Browser Manager
2.2.565.25
false
{b64982b1-d112-42b5-b1e4-d3867c4533f8}
DivX Plus Web Player HTML5 <video>
2.1.2.145
false
{23fcfd51-4958-4f00-80a3-ae97e717ed8b}
Microsoft .NET Framework Assistant
0.0.0
false
{20a82645-c095-46ed-80e3-08825760534b}
RealPlayer Browser Record Plugin
14.0.7
false
{ABDE892B-13A8-4d1b-88E6-365A6E755758}
UltimateGamesBar
1.7.0.19505
false
2sffxtbr@GameNutt_2s.com
Important Modified Preferences
Name
Value
browser.cache.disk.capacity
1048576
browser.cache.disk.smart_size.first_run
false
browser.cache.disk.smart_size_cached_value
1048576
browser.places.smartBookmarksVersion
4
browser.startup.homepage
about:home
browser.startup.homepage_override.buildID
20120713134347
browser.startup.homepage_override.mstone
14.0.1
browser.tabs.onTop
false
browser.tabs.warnOnClose
false
extensions.lastAppVersion
14.0.1
keyword.URL
network.cookie.prefsMigrated
true
places.history.expiration.transient_current_max_pages
53385
privacy.sanitize.migrateFx3Prefs
true
security.warn_viewing_mixed
false
Graphics
Adapter Description
Intel(R) G33/G31 Express Chipset Family
Vendor ID
0x8086
Device ID
0x29c2
Adapter RAM
Unknown
Adapter Drivers
igdumd32
Driver Version
7.14.10.1461
Driver Date
3-25-2008
Direct2D Enabled
Blocked for your graphics driver version.
DirectWrite Enabled
false (7.0.6002.18592)
ClearType Parameters
ClearType parameters not found
WebGL Renderer
Blocked for your graphics driver version. Try updating your graphics driver to version 7.15.10.1666 or newer.
GPU Accelerated Windows
0. Blocked for your graphics driver version. Try updating your graphics driver to version 7.15.10.1666 or newer.
JavaScript
Incremental GC
1
Library Versions
Expected minimum version
Version in use
NSPR
4.9
4.9
NSS
3.13.5.0 Basic ECC
3.13.5.0 Basic ECC
NSS Util
3.13.5.0
3.13.5.0
NSS SSL
3.13.5.0 Basic ECC
3.13.5.0 Basic ECC
NSS S/MIME
3.13.5.0 Basic ECC
3.13.5.0 Basic ECC

Tyler Downer
  • Administrator
  • Moderator
1164 soluzioni 6629 risposte

The Reset Firefox feature can fix many issues by restoring Firefox to its factory default state while saving your essential information. Note: This will cause you to lose any Extensions, Open websites, and some Preferences.

To Reset Firefox do the following:

  1. Go to Firefox > Help > Troubleshooting Information.
  2. Click the "Reset Firefox" button.
  3. Firefox will close and reset. After Firefox is done, it will show a window with the information that is imported. Click Finish.
  4. Firefox will open with all factory defaults applied.


Further information can be found in the Reset Firefox – easily fix most problems article.

Did this fix your problems? Please report back to us!

Utente che ha posto la domanda

Still hoping somebody can help me while READING my post.

Tyler Downer
  • Administrator
  • Moderator
1164 soluzioni 6629 risposte

So you did the Full Firefox Reset? (It's totally different than the Reset in Firefox Safe Mode).

Try this:

Download and Install MalwareBytes Anti-Malware, run a full Scan. http://www.malwarebytes.org/

Download and Run TDSSKiller http://support.kaspersky.com/faq/?qid=208283363

Download and Install Microsoft Security Essentials http://windows.microsoft.com/en-US/windows/products/security-essentials (not an official endorsement, but I personally recommend MSE as an awesome permanent anti-virus)

Double check for all Windows Updates.

Utente che ha posto la domanda

Yes I did a complete Default Settings 3 times! (All Toolbars reset, All search engines Reset & All Extensions Reset)

I have MalwareBytes PRO and did numerous FULL scans in Normal and Safe mode - Networking, I came up with 84 items found and removed.

I tried TDSS and came up with nothing just now.

I will try MSE and get back to you later on when it finishes downloading but I doubt it will help me with the only issue that remains Which is iSearch-Claro automaticallY directing me to it's search engine every time I open my Homepage or fail to type a correct URL.

Tyler Downer
  • Administrator
  • Moderator
1164 soluzioni 6629 risposte

so to confirm, you went to about:support, and clicked Reset Firefox? If you haven't done exactly that, can you do it?

Can you put the contents of about:support into this thread?

Utente che ha posto la domanda

I did, It was on the side.

Utente che ha posto la domanda

There were no problems with MSE

SafeBrowser 550 soluzioni 2392 risposte

Malwarebytes has found that BHO (browser hijacker object) for others in various other forums, but for some reason it did not do so for you.

You should probably ask for assistance from a forum specializing in malware removal. Three such sites are listed at the bottom of this:

Whichever forum you choose:

  • Be sure that you read and follow their rules/guidelines for posting.
  • Be sure that you do exactly as they request.
  • Be sure to check back frequently as your question/thread may get closed if they do not hear from you.


If this reply solves your problem, please click "Solved It" next to this reply when signed-in to the forum.

Modificato da SafeBrowser il

cor-el
  • Top 10 Contributor
  • Moderator
10738 soluzioni 96600 risposte

Soluzione scelta

Is that the search bar on the about:home page?

If there is a problem with searching via the default about:home page then try to reset the search engine used on the about:home page.

Reset the browser.startup.homepage_override.mstone pref via the right-click context menu to the default on the about:config page and close and restart Firefox to restore the about:home page to its default.

  1. Open the about:config page via the location bar
  2. Type in the Filter bar: mstone
  3. Right-click the browser.startup.homepage_override.mstone line and select: Reset
  4. Close and restart Firefox

If this didn't help then delete the delete the chromeappsstore.sqlite file in the Firefox Profile Folder and repeat the above.

You can use this button to go to the Firefox profile folder:

  • Help > Troubleshooting Information > Profile Directory: Open Containing Folder

Utente che ha posto la domanda

I did open About:Config before reading your comment I typed in "Claro" and a bunch of Search Engine default pages were all

"Claro-Search"

I proceeded to modify each one to "Google" followed by a reset of the browser.

It did not re-direct me to iSearch-Claro and is now sending me back to Google and no longer hijacking my URL.

vonrap 0 soluzioni 5 risposte

Io ho trovato un articolo in inglese che parlava del Claro Search. Avevo già provato di tutto, con regedit avevo fatto puilizia di chiavi babylon e Claro-search ma ad ogni creazione di un nuvo tab ecco apparire la maledetta stringa di Claro-search. Ho installato malwarebytes ma niente di strano, nemmenop il mio norton 360 mi segnalava qualcosa di strano. In questo articolo che avevo letto di sfuggita e che non ricordo più nemmeno il sito, si accennava alla possibilità che il malware avesse agito modificando dei comandi propri del browser, comandi modificaili a sua volta da noi. cosi' nella barra degli indirizzi dopo aver cancellato la stringa Claro, ho digitato: about:config la risposta del browser è stata immediata come la richiesta di non toccare parti della configurazione senza avere conoscenze specifiche, promesso ciò ho scorso la lunga lista di voci presentatesi dopo lìimmissione del comando e sono arrivato al punto modificato dal malware, nella stringa relativa alla creazione di un nuovo tab (pagina) ho sostituito la stringa Claro search con newtab, poi ho azzerato i valori immessi dalla barra Claro search citata in altri due o tre posti et voilà il gioco è stato perfetto. Tutto è tornato a posto e funziona alla grande. Adesso aspettiamo che qualche tecnico più addentro ai meandri del nostro caro Firefox, controlli quanto ho affermato e metta a punto una procedura che diventerèà sicuramente standard. Felice di aver potuto dare una mano e che possa cadere in una letamaia all'deatore di questo malware veramente fastidioso.

cor-el
  • Top 10 Contributor
  • Moderator
10738 soluzioni 96600 risposte

Note that the SearchReset extension also can reset some changed String prefs on the about:config page.

brianjnow 0 soluzioni 3 risposte

I think that I've tried about every said solution across Google since 15 Aug 2012 and here we are 4 days later hopefully with resolve. I've attempted to look at the CPU processes but didn't know what to seek. I deleted claro LTD from the Program list in Control Panel. I've run two different scans that I found recommended (they identified and removed beasts which in hindsight were not my specific concern. I've edited about:blank so many times and reset to my homepage. And Yes, I did find the Reset FireFox option in the Help/Trouble shooting menu.

i had read that claro had something to do with Babylon, and someone else mentioned seeing Browser Manager as a program which he hadn't installed in his time of conflict.

I'd checked Control Panel a few times to see if it had reinstalled itself but it was never again present. This last time I looked for claro LTD should have appeared and then one entry glared at me "Babylon ..." But then below it was "Browser Manager" Both had the same installation date! [15-08-2021 -ddmmyyyy].

Back in FireFox I reset my homepage, closed Firefox and reopened. Yes, it looked good. I rebooted my system, opened Firefox with MY declared homepage, and so I'm adding this snippet with the hope that it assists someone else.

Many thanks to contributors here who have been part of my success (and to those who unable to read it because I can't remember where I toured)!

vonrap 0 soluzioni 5 risposte

After trying and clean my registry from various occurrences of Babylon and Claro-search.com, remained as a problem to open a new window that automatically going to generate the page similar to Google, but referring to Claro-search. I entered with the command about: config (I read various posts ede is the 'I've found that you can intervene in the configuration) in the window "search" I inserted the words "Claro then Babylon" and I reset the values ​​of the strings pointed those addresses to be deleted. I could not delete the strings that generated them, but everything still works perfectly. The values ​​of the string pointed to page Claro-search.com has been changed by me in about: blank. finished it all worked out. I must say that I have read countless posts on the net that talked about obvious things but all irrelevant in order to solve the problem that occurred to me and who knows how many others. I had to register for this forum to be able to finally read meaningful answers and help resolve the problem. Congratulations to the participants in the forum that have proven competent and skilled. Greetings to all! Dopo aver provato e pulito il mio registro dalle varie occorrenze di Babylon e Claro-search.com, è rimasto come problema l'apertura di una nuova finestra che automaticamente andava a generare la pagina somigliante a Google ma riferentesi a Claro-search. Sono entrato con il comando about:config (ho letto vari post ede è l' che ho scoperto che si può intervenire nella configurazione) nella finestrella "cerca" ho inserito le parole "Claro poi Babylon" e ho azzerato i valori delle stringhe che puntavano a quei indirizzi da cancellare. Non sono riuscito a cancellare le stringhe che li generavano ma, il tutto funziona comunque a perfezione. I valori della stringa che puntava alla pagina di Claro-search.com è stata da me cambiata in about:blank. finito ciò tutto si è risolto. Devo dire che ho letto innumerevoli post in rete che parlavano di cose ovvie ma tutti ininfluenti al fine di risolvere il problema occorso a me e a chissà quanti altri. Ho dovuto iscrivermi a questo forum per poter finalmente leggere risposte sensate e utili a risolvere il problema. Complimenti ai partecipanti il forum che si sono dimostrati competenti ed abili. Un saluto a tutti!

vasconero 0 soluzioni 3 risposte

Sto seguendo la vostra discussione con molta attenzione perchè anch'io ho il problema di Claro search, ho provato a seguire tutti i vostri consigli, ma assolutamente non riesco a rimettere Google come pagina predefinita. Ad ogni riavvio di Firefox ritorna sempre Claro search. In About:config mi rimette sempre l'indirizzo di Claro. Ho provato con Ccleaner, Malwarebytes, disinstallato Firefox, ripristinato Firefox, niente da fare. Se qualcuno potessa aiutarmi gli sarei veramente grato. Saluti a tutti

cor-el
  • Top 10 Contributor
  • Moderator
10738 soluzioni 96600 risposte

To vasconero

Did you check if there is a file user.js in the Firefox Profile Folder?

You can use this button to go to the Firefox profile folder:

  • Help > Troubleshooting Information > Profile Directory: Open Containing Folder

If you do not keep changes after a restart then see:

vonrap 0 soluzioni 5 risposte

sto elaborando una risposta che illustra passo passo quello che ho fatto, appena finito publico il tutto, non disperare vedrai che ce la farai come ho fatto io. A questo pomeriggio!

marykaye 0 soluzioni 1 risposte

Spent hours trying to get Claro removed, here is the simple solution

go to https://addons.mozilla.org/en-US/firefox/addon/searchreset/

vasconero 0 soluzioni 3 risposte

Grazie per la risposta, ma dopo averlo installato andando su about:config searchreset.backup ho ritrovato claro, probabilmente è annidato da qualche parte che non si riesce a trovare.

vonrap 0 soluzioni 5 risposte

guarda che nell' about:config trovi tutte le occorrenze di striche incriminate. Devi provare con "Babylon" e cancellare tutti i valori che seguono la stringa (anche se la stringa in se stessa non sono riuscito a cancellarla penso che non abbia imporetanza visto che ne ho azzerato i valori), poi devi provare con Claro-search e fare lo stesso avendo l'accoetezza di sostituire al percorso di Claro-search il comando "blank" come era in originale. Se ti può essere utile mi hanno comunicato che esiste un add-on per firefox che si incarica lui di fare automaticamente quello che c'è da fare e solo con un click, lo puoi trovare a: https://addons.mozilla.org/en-US/firefox/addon/searchreset/ la sua pagina mostra: SearchReset 0.2 No Restart by Gavin Sharp

This add-on is very simple: on installation, it backs up and then resets your search preferences and home page to their default values, and then uninstalls itself. This affects the search bar, URL bar searches, and the home page.

Add to Firefox cliccando su add to firefox il gioco è fatto. Adesso sto uscendo ma al ritorno lo installerò anch'io, dovrebbe essere la soluzione più veloce e migliore in assoluto per noi. Un grazie ai colleghi del forum per la dritta.