Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

config file being infected

  • 3 replies
  • 20 have this problem
  • 4 views
  • Last reply by 4everdesign

4everdesign
4everdesign
more options

Firefox 12.0. Window Vista Business SP2.

My new tab page is being reset to "http://u-search.net/?a=1&e=1".

First I assumed this was a one-off and went into "tools", "options", "general" tab, "home page" and reset it back to my usual preference "about:blank".

The next time I restarted Firefox it had reverted to the u-search entry again.

I've spent the afternoon scouring the net for a solution and was advised, amongst other things, to check various entries in "about:config". Sure enough there were seven different u-search entries (listed below), which I modified back to default settings. Yet the config file entries all reverted back to u-search on restart.

browser.newtab.url : http://u-search.net/?a=1&e=1 browser.search.defaultengine : u-Search browser.search.defaultenginename : u-Search browser.search.defaulturl : http://u-search.net/?a=1&e=2&q= browser.search.order.1 : u-Search browser.startup.homepage : http://u-search.net/?a=1&e=1 keyword.URL : http://u-search.net/?a=1&e=2&q=

Firefox 12.0. Window Vista Business SP2. My new tab page is being reset to "http://u-search.net/?a=1&e=1". First I assumed this was a one-off and went into "tools", "options", "general" tab, "home page" and reset it back to my usual preference "about:blank". The next time I restarted Firefox it had reverted to the u-search entry again. I've spent the afternoon scouring the net for a solution and was advised, amongst other things, to check various entries in "about:config". Sure enough there were seven different u-search entries (listed below), which I modified back to default settings. Yet the config file entries all reverted back to u-search on restart. browser.newtab.url : http://u-search.net/?a=1&e=1 browser.search.defaultengine : u-Search browser.search.defaultenginename : u-Search browser.search.defaulturl : http://u-search.net/?a=1&e=2&q= browser.search.order.1 : u-Search browser.startup.homepage : http://u-search.net/?a=1&e=1 keyword.URL : http://u-search.net/?a=1&e=2&q=

Chosen solution

It sounds like you got infected with a malicious Third-Party Add-on.

First, update to Firefox 15.0.1. Update Firefox to the latest release

Then, try to Reset Firefox Refresh Firefox - reset add-ons and settings

Read this answer in context 👍 3

All Replies (3)

user633449
user633449
more options

Chosen Solution

It sounds like you got infected with a malicious Third-Party Add-on.

First, update to Firefox 15.0.1. Update Firefox to the latest release

Then, try to Reset Firefox Refresh Firefox - reset add-ons and settings

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Start Firefox in Safe Mode to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance).

  • Do not click the Reset button on the Safe mode start window or otherwise make changes.

You can check for problems with preferences and try to rename or delete the prefs.js file and possible numbered prefs-##.js files and a possible user.js file to reset all prefs to the default values.

4everdesign
4everdesign Question owner
more options

Thanks very much. I did exactly as prescribed and yes, no sign of u-search.

I do still believe there would be benefit in optionally allowing users to accept or reject changes to the config file(s).

I also believe your prescribed suggestions should be presented prior to other problem users entering their own questions (e.g. this support site already recommended some checks before I asked my question - latest update and Firefox reset could potentially be added to that list, perhaps?)

Thanks again.

Modified by 4everdesign