Hello,
I can send files from my firefox profile if that helps (I did a full text search on all files in my profile for text string "area51buy.com" but nothing relevant was found)Simplex, 2017-11-09 12:10:12 (UTC)
Yes, please do. I'm sure we'll find a solution.
Also,
Can you give me the list of your installed addons - in Firefox?
Also, please share the AdwCleaner/Malwarebytes logfiles.
...
Hello,
Thanks M-K-D-B, sorry for misunderstanding.
@Simplex: Can you zip me the folder "C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1" and your profile: "4ui6vnjc.Simplex" ? I'll merge the two so that you'll find a clean profile, and you will be able to clean with AdwCleaner the malicious one.
Thanks,
You're right, nice catch! But that really is my main firefox profile. Did malware hacked its name, or what?
I searech for this profile ID and found in int he following places:
c:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41a66e7e5ee1
c:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41a66e7e5ee1
I am certain that when I told adwcleaner to delete this folder, my firefox pro...
