Trying to delete a virus. Need verification of items in Registry Editor.
I am trying to delete all components of "MyFunCards" from my computer. I know it can be disastrous to delete keys from the Registry Editor so I need verification FIRST:
HKEY_CURRENT_USER\Software\Mozilla\Firefox\TaskBarIDs = Name: C:Program Files(x86)\ Mozilla Firefox = Is E7CF176E110C211B correct data or is this a virus????
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\MaintenanceService\965b7fc26dad90d340d2fa0a4879039f\0 = Issuer: Thawte Code Signing = Name: Mozilla Corporation = is this a valid file or is this a virus????
I was told long strings of random numbers/letters are viruses but do not want to delete without confirmation. THANK YOU!
Tutte le risposte (3)
I was told long strings of random numbers/letters are viruses but do not want to delete without confirmation. THANK YOU!
That's too broad a generalization. In Windows, it's very common to see long strings of letters and numbers for both legitimate and unwanted software.
I suggest not removing any of the items that contain Mozilla in the key. If you find that some unwanted content remains after sparing those, we can take a second look at them.
From the perspective of getting Firefox clean, add-ons will be key. Unfortunately, your "More system details" does not list any plugins or extensions, so it is difficult to suggest the ones that you might want to disable or remove.
Try this:
(1) Disable ALL nonessential or unrecognized add-ons on these two tabs. If in doubt, disable.
orange Firefox button (or Tools menu) > Add-ons > Plugins category
orange Firefox button (or Tools menu) > Add-ons > Extensions category
Restart Firefox.
(2) Run the Search Reset extension:
https://addons.mozilla.org/en-US/firefox/addon/searchreset/
(3) Check for a user.js file that might alter your setting, as described in this article: How to fix preferences that won't save.
Such a long string with random numbers is used on Windows (ClassID) and in Firefox as a unique identifier (GUID) for instance to identify extensions and crash IDs.
You should never remove keys in the Windows registry unless you know what you are doing as this can do serious damage.
HKEY_CURRENT_USER\Software\Mozilla\Firefox\TaskBarIDs = Name: C:Program Files(x86)\ Mozilla Firefox = Is E7CF176E110C211B
The GUID E7CF176E110C211B MAY BE associated with Babylon Toolbar, if you have ever had that installed on your system. This could be a left-over of a previous uninstall of that item.
- See - https://support.mozilla.org/en-US/questions/931454#answer-358929 (not authoritative, just what a user posted)
- Scroll down to the lines "These are the "babylon: records in prefs.js" followed by "user_pref("browser.taskbar.lastgroupid", "E7CF176E110C211B");"
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\MaintenanceService\965b7fc26dad90d340d2fa0a4879039f\0 = Issuer: Thawte Code Signing = Name: Mozilla Corporation
Mozilla Maintence Service is part of the background update service for Firefox.
If you want help cleaning your system, the people at the following forums deal with cleaning malware every day. The use special tools that they have you download, run and post the reports back to your thread in their forum. Be patient. Do exactly as they tell you and no more, no less. Read the rules before posting on these forums.
- Bleeping Computer Forums - http://www.bleepingcomputer.com/forums
- Spyware Warrior Forums - http://www.spywarewarrior.com/index.php
- SWI Forums - http://www.spywareinfoforum.com/
- The above 3 links taken from the following article (near the bottom) - https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware