Jump to content

Unkillable Helper2 extension on Firefox

Recommended Posts

Like a another member “MegJo”  I am experiencing a problem with  a Unkillable Helper2 extension on firefox.

TwinHeadedEagle’s solution involved running the Farbar Recovery Scan Tool and sending in 2 files, FRST.txt and Addition.txt.

To expedite the process I have taken the initiative to download and run the tool.  Attached are the 2 files.

Please review the files and let me know the next steps.

Thank you



Link to post
Share on other sites

Hello Felaniz,

I will be guiding you as we go forward.  I do need to see other diagnostic information from this system, so that I can see about pinning down the source of this issue.
I would like to ask that you always attach any report or file I ask for, from time to time. Just a regular email attachment.

Restarting Firefox with add-ons disabled:
Start Firefox.   
Using the menu bar, select Help then select *Restart with Addons Disabled...*
When prompted press the Restart button to proceed with that.  Press Start in Safe mode button to re-confirm.

Clicking the Start in Safe Mode button will temporarily disable your extensions and themes, turn off hardware acceleration and reset toolbar and button customizations. When you leave Safe Mode and start Firefox up normally, your extensions, themes, and settings will return to the state they were in before you entered Safe Mode.


Checkout the tips listed in the section marked "Troubleshooting problems in Safe Mode".

SEE "How to remove or disable add-ons in Firefox browser"

You may also keep this set of tips handy
"Fix slowness, crashing, error messages and other problems"

While in Firefox, press "Shift+CTRL+Delete keys" and delete temporary internet cache files.

Also see


Hopefully, the tips above will help you overcome the issue of the "extension" in Firefox.



Link to post
Share on other sites

If you mean Safe mode with the browser, I encourage you to go thru the settings, the list of installed Extensions, find the one that is the problem, and either Uninstall it or diable that extension by using the options in Firefox.  I hope you have reviewed all the articles I cited.

When you get all done, Close the browser.  Then you can restart it in normal way.

Link to post
Share on other sites

This link seems to have help resolve this problem for another user.  TwinHeadedEagle seems to have had a solution by running FarBar Recovery Scan Tool with a fixlist.txt file he created.  Can you simply do the same for me using the files I sent you.  There is no sense in recreating the wheel... it seems like TwinHeadedEagle has a solution.

Providiung me with websites and asking me to find it myself is not helpful. 

Link to post
Share on other sites

I have found the Helper2 extension and removed it using a tool called Freefixer.  I also located a scheduled executable, astask.exe, and deleted it.  The problem is that after I remove all the infected components the infection returns within as few days or some times weeks.  I have done this over 10 times and it still returns.  I can not identify the root of the problem.  I need guidance in isolating the cause of the infection.

Link to post
Share on other sites

What the other user had in their Firefox, is not reported in your report from FRST.  hence, any body else's custom fix was, does not apply to this pc.

Here are my suggestions.
There is a add-on you can get from Mozilla to help you get Firefox reset to normal default.
Please review / study / and apply the add-on called *SearchReset*
This is the link for the information page

When you see that in Firefox, it will show a yellow-color button to add this to Firefox
This add-on is very simple: on installation, it backs up and then resets your search preferences and home page to their default values, and then uninstalls itself.

This link is for the download of the add-on

Next, do a custom scan on your computer.  Let us see what is then reported.
Let us please do a Custom Scan run like this.  Start the Anti-Malware program. Click Scan icon  on the very top bar at the top.
Make sure you see the screen showing the 3 different scan options.

Then next please click the *CUSTOM Scan*.
Then make sure you select the *C:* drive    ( as shown on the right side of the picture below).   We want to scan drive *C*
Then look and be sure that the line *Scan for rootkits* has a check-mark.  If it does not not, click that box 1 time.
The scanning for rootkits is important.


Then press Scan now.

Then you should see a screen like this once the scanning phase has completed IF there is a detection.  Titled Scan Results.


Kindly be real sure that each one of the  lines detected  has a CHECK-mark in the checkbox.   as shown in this last image.
Then press the button marked Remove Selected.

After all is done. please attach the log-report file with your next email reply.
Thank you,


In case the same issue in Firefox is still around, then we can do some other searches, deeper ones, using some other techniques.

Link to post
Share on other sites

I would suggest to always take extra care about Firefox  ( and all the rest of your web browsers, too).   Most especially when browsing new or unknown websites.

And in general pay real care when you install anything of any sort.

Pay close attention when installing 3rd-party programs. It is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed.
Take great care in every stage of the process and every offer screen, and make sure you know what it is you're agreeing to before you click "Next".


Safer practices & malware prevention:
Follow best practices when browsing the Internet, especially on opening links coming from untrusted sources.
First rule of internet safety: slow down & think before you "click".
Free games & free programs are like "candy".  We do not accept them from "strangers".
Never open attachments that come with unexpected ( out of the blue ) email no matter how enticing.
Never open attachments from the email itself.  Do not double click in the email.  Always Save first and then scan with antivirus program.

Never click links without first hovering your mouse over the link and seeing if it is going to an odd address   ( one that does not fit or is odd looking or has typos).

Use a Standard user account rather than an administrator-rights account when "surfing" the web.
See more info on Corrine's SecurityGarden Blog http://securitygarden.blogspot.com/p/blog-page_7.html
Don't remove your current login.  Just use the new Standard-user-level one for everyday use while on the internet.


Other tips for your Firefox browser:

Truly consider getting these 2 browser add-ons.

Adblock Plus



NoScipt Suite Lite



One other item you may want to consider is Win Patrol. 

You may want to consider using WinPatrol to assist you in keeping your browser settings safer
Tutorial here http://www.winpatrol.com/features.html

Also, Do not browse the web whilst logged in with administrator-rights account. Use standard-user-level account.

The whole theme of this is to always take pro-active daily practices to keep your browsers and your computer safer.


Backup is your best friend.

Link to post
Share on other sites

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.