This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Èròjà atẹ̀lélànà yii ni a ti fi pamọ́ fọ́jọ́ pípẹ́. Jọ̀wọ́ béèrè ìbéèrè titun bí o bá nílò ìrànwọ́.

Malwarebytes finding a PUP on Firefox, how do I remove?

  • 5 àwọn èsì
  • 1 ní ìṣòro yìí
  • 1 view
  • Èsì tí ó kẹ́hìn lọ́wọ́ user1280777

more options

I have a paid Mcafee account which didn't highlight a problem after a scan, but when I did a scan with the free version of Malwarebytes it highlighted some PUP's. Malwarebytes seemed to be able to delete most of them, but I'm wondering how to get rid of the one that seems to be associated with Firefox. Here is the log details;

Malwarebytes Anti-Malware www.malwarebytes.org

Scan Date: 17/11/2015 Scan Time: 01:57 Logfile: Malwarebytes Log 1.txt Administrator: Yes

Version: 2.2.0.1024 Malware Database: v2015.11.16.07 Rootkit Database: v2015.11.14.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled

OS: Windows 10 CPU: x64 File System: NTFS User: Derek

Scan Type: Threat Scan Result: Completed Objects Scanned: 346918 Time Elapsed: 23 min, 26 sec

Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled

Processes: 0 (No malicious items detected)

Modules: 0 (No malicious items detected)

Registry Keys: 0 (No malicious items detected)

Registry Values: 0 (No malicious items detected)

Registry Data: 0 (No malicious items detected)

Folders: 0 (No malicious items detected)

Files: 1 PUP.Optional.Spigot, C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\lrav38of.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "https://uk.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=926458&p=");), Replaced,[f0c794eaf794a98d124a6913996b38c8]

Physical Sectors: 0 (No malicious items detected)


(end)

I have a paid Mcafee account which didn't highlight a problem after a scan, but when I did a scan with the free version of Malwarebytes it highlighted some PUP's. Malwarebytes seemed to be able to delete most of them, but I'm wondering how to get rid of the one that seems to be associated with Firefox. Here is the log details; Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 17/11/2015 Scan Time: 01:57 Logfile: Malwarebytes Log 1.txt Administrator: Yes Version: 2.2.0.1024 Malware Database: v2015.11.16.07 Rootkit Database: v2015.11.14.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 10 CPU: x64 File System: NTFS User: Derek Scan Type: Threat Scan Result: Completed Objects Scanned: 346918 Time Elapsed: 23 min, 26 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 1 PUP.Optional.Spigot, C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\lrav38of.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "https://uk.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=926458&p=");), Replaced,[f0c794eaf794a98d124a6913996b38c8] Physical Sectors: 0 (No malicious items detected) (end)

All Replies (5)

more options

Never had this problem before, when I went to the files location to check on it's previous versions it gives me the date 02/11/2015.

I crossed referenced that date with the programs I had in the, 'uninstall a program,' section in Control Panel. The only two programs that it states were installed on that date is a host app service from Pokki, and a Pokki start menu.

I don't recall downloading this program, but after doing some research it seems it comes preinstalled on a lot of Acer computers and their subsidiaries computers. It seems that the program can be quite invasive, and can be flagged as a potentially unwanted program depending on what anti-virus software you scan your computer with.

more options

keyword.URL is no longer used in current releases, so you can reset this pref on the about:config page via the right-click context menu to the default value to have it removed.

You can open the about:config page via the location/address bar. You can accept the warning and click "I'll be careful" to continue.

more options

Pablo55 said

Files: 1
PUP.Optional.Spigot, C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\lrav38of.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "https://uk.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=926458&p=");), Replaced,[f0c794eaf794a98d124a6913996b38c8]

I wonder what that last part means? If Malwarebytes replaced the entire prefs.js file, then you would have lost some personal settings and be back to, for example, the default home page, main toolbar layout, and no pinned sites on the new tab page. Did that happen??

Ti ṣàtúnṣe nípa jscher2000 - Support Volunteer

more options

Hi, no settings changed that I am aware of. I am always clearing my cache so I never really notice any sites pinned on a new tabs page except for the generic ones.

I recently just purchased two new computers an Acer netbook, and a Packard Bell desktop. Packard Bell is a subsidiary of Acer as far as I am aware. Apparently a lot of new Acer computers come preinstalled with previously uninstalled bloatware. I think Malwarebytes might be flagging some of these programs, there is one in particular called Pokki which seems to be problematic.

I'll probably just have to get some advice on how to completely remove these types of preinstalled programs from both of my computers.

more options

I only just installed Malwarebytes on these new computers a couple of days ago, and after I ran my first scan on both computers it flagged several PUP's on each of them.

I have a paid version of Mcafee on both computers, and it didn't flag any problems after running a full scan on each of them.

Malwarebytes seems to be flagging PUP's that Mcafee isn't.