How do I remove hao123 homepage hijack without resetting Firefox?
I've seen a few posts about hao123 but nothing is working. To clarify, I do not have the toolbar/software on my computer (at least according to control panel) and I've uninstalled Tencent's WeChat in case that was causing it. However, I still am getting the hao123 hijack.
I also ran MalwareBytes and RogueKiller and deleted a bunch of the results, but it only resolves it for a little while before the problem comes back.
The only thing I haven't tried is resetting Firefox, but I'd really like to avoid that if possible.
My questions are:
- Is there a way to get rid of it without resetting Firefox?
- If not, is there a way in general?
- If I have to reset Firefox, is there a way to save off my bookmarks/settings?
Thanks!
Vybrané riešenie
I think I figured it out. Apparently the free anti-virus I was using has been reported as recently starting to redirect the homepage to hao123. It didn't do this when I first started using it.
I uninstalled it and the problem seems to have gone away. I'll leave this open until tomorrow just to make sure it doesn't come back.
Čítať túto odpoveď v kontexte 👍 0Všetky odpovede (6)
Is there a pattern to the problem returning? For example, when you exit Firefox and start it up again (between Firefox session), or when you shut down Windows and start it up again?
Firefox's Refresh feature should preserve your bookmarks and saved passwords, although sometimes things go wrong. This article has more information about this option: Refresh Firefox - reset add-ons and settings.
A couple things to check first:
(1) Please read through this thread regarding a hijacked Firefox desktop shortcut, and possibly additional software you need to remove: https://support.mozilla.org/questions/1011731
(2) You may also try AdwCleaner and other free tools listed in our support article: Troubleshoot Firefox issues caused by malware
(3) Check your connection setting here:
"3-bar" menu button (or Tools menu) > Options > Advanced > Network mini-tab > "Settings" button
The default of "Use system proxy settings" should follow the Windows/IE "LAN" setting, but you also could try "No proxy" to see whether that makes any difference.
When I manage to find suspicious stuff via the adware software (mostly RogueKiller) and remove the scan results, often the homepage hijack goes away once I restart my computer. However, after I go in and out of Firefox one or two times, the hijack behavior comes back. I don't have anything more specific than that, unfortunately.
To address the other suggestions:
- I tried adwcleaner at some point during this process and it didn't seem to help.
- I checked Firefox's Options from both the shortcut and within the browser, and there is nothing related to hao123 listed in the homepage (I just want it to default to the Mozilla default home).
- I looked for a qvod folder in the C drive, and then tried searching over the system for anything with qvod in the name, and neither turned up any results. I don't see any suspicious recently installed software listed in Control Panel (as I said, I uninstalled TenCent's WeChat earlier and it didn't stop the problem).
I can try the Refresh and report back.
Can I ask why you think the proxy settings would affect this?
Just tried a Refresh.
The first time I loaded the homepage, it went to the Mozilla default screen as expected. When I closed out and opened Firefox again, hao123 came back.
Any other ideas?
Vybrané riešenie
I think I figured it out. Apparently the free anti-virus I was using has been reported as recently starting to redirect the homepage to hao123. It didn't do this when I first started using it.
I uninstalled it and the problem seems to have gone away. I'll leave this open until tomorrow just to make sure it doesn't come back.
I don't know what you use for free Anti-Virus (AV) but in most cases Microsoft makes MSE available free (Vista & Windows 7).
Or provides AV built in (Windows 8 - and presumably Windows 10).
This article may help those with this issue