Jump to content

Unremovable chrome search engine redirect


sro

Recommended Posts

Earlier today I did a stupid, and got myself some weird malware that is hijacking my search bar.

It calls itself "chromesearch.today" and has made itself my default search engine, and somehow managed to make it unselectable in the chrome settings menu (making it undeletable according to all the basic guides i could find) and also changed my options for all other search engines to only be "edit" or "remove from list", so i can't just make a different one my default.

The way it works is that when I type something into my search bar it first opens up a url for about two seconds that looks like this: https://chromesearch.today/search?q=stop&uid=qTO6G2jchxlsv6NWMga93LlSYmVrItLW4te4w0UfqRmI3B50SmdkAGT36yUbL%2F0yk%2BfVbbtEK3C5rVX%2FslOmPK5e8GuY6CBe&pid=fob (managed to snag a ctrl + c in there) before redirecting me to an extremely fake yahoo knock off that is nothing like the actual thing. The url here is something like: https://dk.search.yahoo.com/yhs/search?hspart=ima&hsimp=yhs-batch1&p=stop&type=batch1q50000008_nsq with the "dk" being to translate everything into danish, the language my browser was set to when I accidentally installed this.

I have run Malwarebytes but it didn't fix the issue, and I'm now looking at a total system reboot if I can't figure out how to get rid of this. Hopefully someone on here can help, because I am officially way out of my depth here!

Addition.txt

2017-10-18 (1).png

2017-10-18 (4).png

Malware log.txt

Link to post
Share on other sites

Thanks for those logs sro, continue as follows:

Please download Zemana AntiMalware and save it to your Desktop.
 
  • Install the program and once the installation is complete it will start automatically.
  • Without changing any options, press Scan to begin.
  • After the short scan is finished, if threats are detected press Next to remove them.
    Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please re-boot your computer manually.
     
  • Open Zemana AntiMalware again.
  • Click on user posted image icon and double click the latest report.
  • Now click File > Save As and choose your Desktop before pressing Save.
  • Attach saved report in your next message.


Next,

Download AdwCleaner by Malwarebytes onto your Desktop.

Or from this Mirror
 
  • Right-click on AdwCleaner.exe and select user posted imageRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  • Accept the EULA (I accept), then click on Scan
  • Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Clean button. This will kill all the active processes
  • Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it
  • After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply


Next,

Download Microsoft's " Malicious Software Removal Tool" and save direct to the desktop

Ensure to get the correct version for your system....

32 Bit version:
https://www.microsoft.com/downloads/en/confirmation.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

64 Bit version:
https://www.microsoft.com/downloads/en/confirmation.aspx?FamilyId=585D2BDE-367F-495E-94E7-6349F4EFFC74&displaylang=en

Right click on the Tool, select “Run as Administrator” the tool will expand to the options Window
In the "Scan Type" window, select Quick Scan
Perform a scan and Click Finish when the scan is done.

Retrieve the MSRT log as follows, and post it in your next reply:

1) Select the Windows key and R key together to open the "Run" function
2) Type or Copy/Paste the following command to the "Run Line" and Press Enter:

notepad c:\windows\debug\mrt.log

The log will include log details for each time MSRT has run, we only need the most recent log by date and time....

Next,

Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt under "Optional scan" Select scan, when done post the new logs. "FRST.txt" and "Addition.txt"

Let me see those logs in your reply, also tell me if thre are any remaining issues or conceerns....

Thank you,

Kevin
Link to post
Share on other sites

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.