I've clicked the Undo button since you aren't the creator (shubh7177 had set a reply as the solution) of the thread and you won't find it.

1jazzguy said

Happy112 said

See my post from August 15, 2017 : https://malwaretips.com/blogs/remove-search-rspark-com/

I tried all of that already. No luck.

Does that include what it says at the bottom (as a last resort)  ?

Refresh Firefox : https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings

Yes. I refreshed twice to no avail. Thank you.

cor-el said

Only devtools.chrome.enabled is on the about:config page. If you set this pref to true with a double-click if it is currently false then you should see a command line with a prompt (>) at the bottom of the Browser Console the next time you open this Console. 1. Done. No problem.

• "3-bar" menu button or Tools -> Web Developer

2. Opened On the command line in the Browser Console you can now paste the code and press the Enter key to evaluate the code and see the result.

• aboutNewTabService.newTabURL

3. aboutNewTabService.newTabURL does not work as a code.

I'm trying my best to work with syntax, but it's a foreign language. Exactly what or where is the code I should enter in the Browser window?

I just searched for SPARK in the about:config and returned one result. Should I erase that by modification ? Here is the result found by searching SPARK.

media.getusermedia.screensharing.allowed_domains;webex.com,*.webex.com,ciscospark.com,*.ciscospark.com,projectsquared.com,*.projectsquared.com,*.room.co,room.co,beta.talky.io,talky.io,*.clearslide.com,appear.in,*.appear.in,tokbox.com,*.tokbox.com,*.sso.francetelecom.fr,*.si.francetelecom.fr,*.sso.infra.ftgroup,*.multimedia-conference.orange-business.com,*.espacecollaboration.orange-business.com,free.gotomeeting.com,g2m.me,*.g2m.me,*.mypurecloud.com,*.mypurecloud.com.au,spreed.me,*.spreed.me,*.spreed.com,air.mozilla.org,*.circuit.com,*.yourcircuit.com,circuit.siemens.com,yourcircuit.siemens.com,circuitsandbox.net,*.unify.com,tandi.circuitsandbox.net,*.ericsson.net,*.cct.ericsson.net,*.opentok.com,*.conf.meetecho.com,meet.jit.si,*.meet.jit.si,web.stage.speakeasyapp.net,web.speakeasyapp.net,*.hipchat.me,*.beta-wspbx.com,*.wspbx.com,*.unifiedcloudit.com,*.smartboxuc.com,*.smartbox-uc.com,*.panterranetworks.com,pexipdemo.com,*.pexipdemo.com,pex.me,*.pex.me,*.rd.pexip.com,1click.io,*.1click.io,*.fuze.com,*.fuzemeeting.com,*.thinkingphones.com,gotomeeting.com,*.gotomeeting.com,gotowebinar.com,*.gotowebinar.com,gototraining.com,*.gototraining.com,citrix.com,*.citrix.com,expertcity.com,*.expertcity.com,citrixonline.com,*.citrixonline.com,g2m.me,*.g2m.me,gotomeet.me,*.gotomeet.me,gotomeet.at,*.gotomeet.at,miriadaxdes.miriadax.net,certificacion.miriadax.net,miriadax.net,*.wire.com,sylaps.com,*.sylaps.com,bluejeans.com,*.bluejeans.com,*.a.bluejeans.com,*.bbcollab.com

1jazzguy said

I just searched for SPARK in the about:config and returned one result. Should I erase that by modification  ?

No, Cisco Spark has nothing to do with the browser hijacker you're dealing with.

Call me stubborn, but are you sure that you've run all malwarescans that are mentioned in this article  ?

https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware

@Happy112 Yes. I'm 100% sure. Nothing, is helping. Nothing.

1jazzguy said

@Happy112 Yes. I'm 100% sure. Nothing, is helping. Nothing.

There has to be a solution  !

Could you give us a list of the add-ons you have installed  ?

And would you please take a good look at this article and see if maybe, just maybe, there is something that you haven't tried ......

http://www.myantispyware.com/2017/06/30/how-to-remove-search-rspark-com-chrome-firefox-ie-edge/

Hi 1jazzguy, the three ways I'm aware of that the new tab can be set to something other than the built-in page are:

(1) An extension (most common)

(2) An autoconfig file (see https://support.mozilla.org/questions/1171430#answer-1062194)

(3) Modified version of Firefox

To address the possibility of #3:

Clean Reinstall

We use this name, but it's not about removing your settings, it's about making sure the program files are clean (no inconsistent or alien code files). As described below, this process does not disturb your existing settings. It's not essential to uninstall Firefox, but you can if you like, saying No to any request about removing personal data.

It only takes a few minutes.

(A) Download a fresh installer for Firefox to a convenient location:

• Stable release: https://www.mozilla.org/firefox/all/
• Extended Support Release: https://www.mozilla.org/firefox/organizations/all/

(B) Exit out of Firefox (if applicable).

If you use Microsoft Office, please change your default browser to Internet Explorer, Chrome or Edge before the next step. You can change it back later after Firefox is up and running after reinstallation.

(C) Using Windows Explorer/My Computer (hold down the Windows key and press E), right-click > rename the program folder as follows (you might have one or both):

C:\Program Files (x86)\Mozilla Firefox =to=> C:\Program Files (x86)\OldFirefox

C:\Program Files\Mozilla Firefox =to=> C:\Program Files\OldFirefox

(D) Run the installer you downloaded in step (A). It should automatically connect to your existing settings. Note: Downgrading to the Extended Support Release may delete all your browsing and session history.

Any improvement?

After carefully following your instructions, it did not resolve the issue. I'm not at all sure this didn't download with Firefox 57.0.4 (64 bit) (Quantum) itself. Have there been any other reports of this? Short of letting an expert into my system, I'm at wits end.

Hi 1jazzguy, earlier in this thread you mentioned that when you open a new tab, it should be blank. How are you blanking it, using the little "gear" or "sprocket" icon on the right side of the page or though some other means?

Also, are we both talking about the new tab that appears when you click the "+" button on the tab bar, or press the Ctrl+t keyboard shortcut?

The only gear I have displays as 3 horizontal bars. I'm sending a screen shot of that..

When I click on the "+" sign to open a new tab. That opens the Spark thing.

There used to be a way to open a blank page when opening a new tab. I just can't remember where.

1jazzguy said

The only gear I have displays as 3 horizontal bars. I'm sending a screen shot of that.. When I click on the "+" sign to open a new tab. That opens the Spark thing. There used to be a way to open a blank page when opening a new tab. I just can't remember where.

Whoops, the "gear" is in the built-in new tab that you're not being allowed to see...

Could you try switching from the "new" new tab page design ("Activity Stream") to the old one and see whether that makes any difference? Here's how:

(1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful or accepting the risk.

(2) In the search box above the list, type or paste newt and pause while the list is filtered

(3) Double-click the browser.newtabpage.activity-stream.enabled preference to switch the value from true to false

(4) To show a blank page, double-click the browser.newtabpage.enabled preference to switch the value from true to false

Does that make any difference?

1jazzguy said

The only gear I have displays as 3 horizontal bars. I'm sending a screen shot of that.. When I click on the "+" sign to open a new tab. That opens the Spark thing. There used to be a way to open a blank page when opening a new tab. I just can't remember where.

Could you provide a screenshot of that 'Spark thing' as well  ?

@jscher2000 That was so simple I thought it would work, but no luck. I hate to keep you going with this. If you wish, you can move on and I would not hold it against you. One more screen shot coming.

@Happy112 Attached

What are these icons for and have you tried disabling all of your extensions, in case you were too lenient on the first round?

This thread mentions hd-youtube-downloader and that could be the HD in the screenshot.

• /questions/1195303#answer-1051582
• https://addons.mozilla.org/firefox/addon/hd-youtube-downloader/

2-TO CHANGE TAB PAGE Open addon options and select Use None, it will stop opening search.rspark tab page.

@jscher The "HD" is a switch for Youtube. When on, it plays the video automatically in high def when possible. I've had it for a couple of years. The "A" on a paintboard is Firefox Theme Changer. You should know that one? Had this since 6 months ago at least. The smiley is a Firefox extension which opens an emoji cheatsheet for use in email, Youtube comments and Facebook. Also had this 6 months or longer. The icons below are websites I visit on a regular basis. I know the symbol so to save room I deleted the names.

cor-el said

This thread mentions hd-youtube-downloader and that could be the HD in the screenshot.

• /questions/1195303#answer-1051582
• https://addons.mozilla.org/firefox/addon/hd-youtube-downloader/

2-TO CHANGE TAB PAGE Open addon options and select Use None, it will stop opening search.rspark tab page.

It is a Youtube extension offered by Firefox to automatically play videos in high def.