This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

I can't delete a fake add-on called "Firefox Protect"

more options

I made the mistake of downloading malware called Mail.Ru and it installed itself into Firefox as an add-on which makes my browser so slow it's unusable, and replaces items on the page with fake ads. Especially on youtube, where it replaces the thumbnail of a video and the title in order to try and get you to click on fake links and get more malware. I've tried running MRT and Windows Defender, but neither of them is picking up the malware.

I tried disabling and deleting the add-on in Firefox, but when I restart the browser it shows right back up. I think it popped up one time as "Zpevdo" or something like that in a Windows Defender warning message but when I clicked the message, it didn't show any viruses detected. Can anyone tell me how to get rid of this thing, short of formatting my computer? I'm afraid that it's a keylogger or something.

I made the mistake of downloading malware called Mail.Ru and it installed itself into Firefox as an add-on which makes my browser so slow it's unusable, and replaces items on the page with fake ads. Especially on youtube, where it replaces the thumbnail of a video and the title in order to try and get you to click on fake links and get more malware. I've tried running MRT and Windows Defender, but neither of them is picking up the malware. I tried disabling and deleting the add-on in Firefox, but when I restart the browser it shows right back up. I think it popped up one time as "Zpevdo" or something like that in a Windows Defender warning message but when I clicked the message, it didn't show any viruses detected. Can anyone tell me how to get rid of this thing, short of formatting my computer? I'm afraid that it's a keylogger or something.

All Replies (6)

more options

Does Firefox show a Remove button or only a Disable button?

If removed extensions come back on their own, assume the worst: Troubleshoot Firefox issues caused by malware

more options

It shows a disable button and a remove button. I click disable, then remove and it stays gone until I close and then reopen Firefox and it's there again, enabled.

more options
more options

I recommend using the malware cleaning programs as the next step.

more options

I've tried MRT, Bitdefender, and Windows Defender. Know any other good free anti-malware programs?

more options

Did you try the programs in our support article? Here's the link again: Troubleshoot Firefox issues caused by malware.

You may also want to:

Clean Reinstall

This takes about 5 minutes. It's not about your settings, it's about making sure the program files are clean (no inconsistent or alien code files). As described below, this process does not disturb your existing settings. It's not essential to uninstall Firefox, but you can if you like, saying No to any request about removing personal data.

It only takes a few minutes.

(A) Download a fresh installer for Firefox to a convenient location:

https://www.mozilla.org/firefox/all/

(B) Exit out of Firefox (if applicable).

If you use Microsoft Office, please change your default browser to Internet Explorer temporarily before the next step.

(C) Using Windows Explorer/My Computer (hold down the Windows key and press E to launch it), right-click > rename the program folder as follows (you might have one or both):

C:\Program Files (x86)\Mozilla Firefox =to=> C:\Program Files (x86)\OldFirefox

C:\Program Files\Mozilla Firefox =to=> C:\Program Files\OldFirefox

(D) Run the installer you downloaded in step (A). It should automatically connect to your existing settings.

Any improvement?