It's on Windows, I assume.

First, you should uninstall all suspicious software through the Windows Control Panel, either Add/Remove Programs (XP) or Uninstall a Program. You can click the install date column to sort by date and see which were bundled together.

Second, run some supplemental malware scans using the tools listed in this support article: Troubleshoot Firefox issues caused by malware. If you can't download them using IE, you may be able to run Firefox in its Safe Mode.

Firefox's Safe Mode is a standard diagnostic tool to bypass interference by extensions (and some custom settings). More info: Diagnose Firefox issues using Troubleshoot Mode.

You can restart Firefox in Safe Mode using

Help > Restart with Add-ons Disabled

Of if you can't use the menus in Firefox in normal mode, close all Firefox windows, then hold down the Shift key while starting Firefox.

In the small dialog that comes up, click "Start in Safe Mode" (not Reset)

Third, clear out or disable ALL nonessential or unrecognized extensions on the Add-ons page. Either:

• Ctrl+Shift+a
• orange Firefox button (or Tools menu) > Add-ons

In the left column, click Extensions. Then, if in doubt, disable or remove.

Usually a link will appear above at least one disabled extension to restart Firefox. You can complete your work on the tab and click one of the links as the last step.

Based on past threads about Websteroids / ScorpionSaver / Tube Dimmer, you might have some malware that will reinstall or reenable the unwanted extensions, in this hidden folder:

C:\ProgramData\Updater

If Windows won't let you delete an .exe file in that folder, you may need to kill the corresponding process in the Windows Task Manager. In some cases, it's easier to restart Windows in Windows Safe Mode and then run the malware cleanup programs.

Hi jscher2000,

Thank you for your detailed help. I tried several times to remove the program through control panel>add/remove programs with no success. I took several other steps, including making sure McAfee was up to date, downloading and running Malwarebytes (which had temporary success) etc. Your suggestions are great too.

I think I may have resolved the issue by going back to a previous image of my computer. What I read indicates that this is not reversible if done in safe mode, implying that it is reversible in other modes. I did not use safe mode to do this, and everything is back up and running perfectly.

I believe the unwanted software came with a free download (from the wrong website) of Sketchup 13. I won't be going back there!

Thank you for your help. I hope this solution is lasting instead of another temporary fix.