Flash player pop up hijack

Hi
I have been struggling to remove this from my system. Used various
malware progs, but the flash player pop up keeps returning. I am
guessing that it has changed the registry. What should I look for in Win
xp and win 7? I have blocked pop ups, restored firefox a dozen times,
set my browser page to blank. Web searches just get hijacked by the pop
up.
Thanks in advance

 

What programs are you using to scan? Try in safe mode as well.

 

B73%!ur~>X:^[email protected]+VaMV>l\[email protected][x`#&AHSdl`m<-EEhk=1%t9iRthI|;~8)[email protected]}x5l:zhDO(.as
NeO!\oL7huHfsoF'I5,0G+Yo[G-G"FG,l`QJ$IgwH/[\a]vRH^'=`;cY+*_{Or`
Cancel-Lock: sha1:lpzX44LkDxH5bBbkTPUe6ONOkNI=
Bytes: 2752
Xref: number.nntp.dca.giganews.com uk.comp.homebuilt:248659

Reinstalling Firefox doesn't remove the profile. That will be in
%APPDATA% (you can type this into search in either OS, it's a standard
Windows environment variable) along with the browser cache and a load
of other crud that you need to get rid of.

https://support.mozilla.org/en-US/kb/profiles-where-firefox-stores-user-data

Generally speaking, Firefox doesn't do a great deal in the registry. Its
cross-plaform nature means that, outside of registering shared objects
which do get removed on a deinstall, it pretty much creates its own
ecosystem. That ecosystem remains across upgrades and reinstalls, warts
and all.

You may want to back up your bookmarks and suchlike before nuking the
profile. Bookmarks/favourites are separate from the config data and
should be safe to restore to a clean profile without polluting anything
else.