Search60

[Oshin]

Earlier today I saw that when I typed in the searchbar in chrome, google would briefly appear and then would switch to SearchSixty, its a pest of a search engine, I searched my programs, nothing unusual, reset chrome, still pops up, full scanned with avast and malwarebytes, no issues were found, uninstalled and reinstalled chrome, still it pops up every time I use the searchbar, but not if I go to the google homepage, is there something I'm missing to remove it?

[AdvancedSetup]

Hello @Oshin and

Assuming the computer is not actively infected a Chrome Cleanup should correct your issue.

 

Due to the infection or modification in the Chrome browser you need to disable and Reset your Chrome sync if you're using it.

Then I'd recommend you run the Chrome Cleanup Tool which has recently been updated by Google

Make sure all your browsers are closed when running the tool.

Then once clean, look at using an Ad Blocker and Script Blocker for Chrome to help prevent these type of change requests. Unfortunately websites can ask, make some changes to allow for a look and feel to your browser. Some abuse that and make changes the user does not want.

 Let me know if the tool is able to remove the change or not.

Ron

 

 

Edited November 1, 2017 by AdvancedSetup
Updated information

[Oshin]

Sync is not on, and I tried the Chrome Cleanup already, nothing is detected still, and malwarebytes and avast are still not detecting any threat.

[AdvancedSetup]

Okay, please try the following.

Please visit each of the following sites and let's reset all of your browsers back to defaults to prevent unexpected issues.
If you are not using one of the browsers but it is installed then you may want to consider uninstalling it as older versions of some software can pose an increase in the potential for an infection to get in.

Internet Explorer
How to reset Internet Explorer settings

Microsoft Edge
How to Reset Microsoft Edge in Windows 10

Firefox
Click on Help / Troubleshooting Information then click on the Refresh Firefox button.

Chrome
Reset Chrome back to defaults to completely clear out issues with Chrome.

• First, go to >> Google Sync << and sign into your account. Make sure you know your password as this will clear it from the browser.
• Scroll down until you see the   "reset sync" button to clear your data from the server and remove your passphrase.
• Now, close all Chrome windows. Chrome cannot be running for the next step. If needed, print this information or use another browser to read the information.
• Press the Windows key + R at the same time, to bring up the run dialog box.
  • 
• Type in (or copy/paste) the following and press Enter:     %localappdata%\Google\Chrome\User Data\Default\

1. Press Ctrl + A to select all the files and folders.
2. Hold down Ctrl + A and click once on the files "Bookmarks" and "Bookmarks.bak". This will unselect them.
3. With all the files selected (except for your Bookmarks), press the Delete key and click Yes to delete the files and folders.
4. Example of all files and folders selected, except Bookmarks

 

Restart your computer now and make sure there are no longer any redirects or other browser issues. 

 

[Oshin]

That seems to have worked, thanks!

[AdvancedSetup]

You're quite welcome.

I'll go ahead and close your topic, but if you do find you need further assistance please let us know.

Take care and stay safe out there.

Ron

 

[AdvancedSetup]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

[AdvancedSetup]

Topic reopened per request

[AdvancedSetup]

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

• If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• If you don't have Malwarebytes 3 installed yet please download it from here and install it.
• Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
• If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

• Right-click on the program and select Run as Administrator to start the tool.
• Accept the Terms of use.
• Wait until the database is updated.
• Click Scan.
• When finished, please click Clean.
• Your PC should reboot now if any items were found.
• After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
• Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

[Oshin]

Addition.txt

AdwCleaner[C1].txt

mwb.txt

FRST.txt

Still nothing was detected, except the PUPs, but it doesnt seem like its going to fix it, since it always pops up 10-15 minutes after a restart

[AdvancedSetup]

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

 

Then run the Chrome Cleanup again that I sent you last time again.

Thanks

Ron

 

[Oshin]

Well, though it said it went through the fix, SearchSixty is still alive.

[AdvancedSetup]

Please post back the log.

It should have also rebooted the computer.

 

 

Edited November 1, 2017 by AdvancedSetup

[AdvancedSetup]

Let me get the fix log and then run the Google Cleanup again.

 

Chrome
Reset Chrome back to defaults to completely clear out issues with Chrome.

• First, go to >> Google Sync << and sign into your account. Make sure you know your password as this will clear it from the browser.
• Scroll down until you see the   "reset sync" button to clear your data from the server and remove your passphrase.
• Now, close all Chrome windows. Chrome cannot be running for the next step. If needed, print this information or use another browser to read the information.
• Press the Windows key + R at the same time, to bring up the run dialog box.
  • 
• Type in (or copy/paste) the following and press Enter:     %localappdata%\Google\Chrome\User Data\Default\

1. Press Ctrl + A to select all the files and folders.
2. Hold down Ctrl + A and click once on the files "Bookmarks" and "Bookmarks.bak". This will unselect them.
3. With all the files selected (except for your Bookmarks), press the Delete key and click Yes to delete the files and folders.
4. Example of all files and folders selected, except Bookmarks

 

Restart your computer now and make sure there are no longer any redirects or other browser issues. 

 

[Oshin]

Fixlog.txt

[AdvancedSetup]

The log shows that something may be wrong with your System Restore. It tried to create a System Restore Point but failed. You should check on fixing that.

Once  you run the Chrome Clean up then look at adding an AD Blocker and Script Blocker to Chrome to try to help prevent automated changes to the browser.

It's quite late here for me so I'm heading out. If you need further help let me know and I'll check back on you again sometime tomorrow.

Thank you

Ron

 

[AdvancedSetup]

Just following up @Oshin to see how things are going. Please post an update when you get a chance.

Thanks

Ron

 

[Oshin]

Well, nothing seemed to have worked, i tried all of the cleaning services again, including all the windows defender things, and out of all 3million files, it says there are no problems, my temporary solution is to switch to firefox, since it doesnt seem to affect any other browser, but im going to clean out my computer and see if I can find any files that may have caused this

[AdvancedSetup]

It's just a setting in Chrome. You can fully uninstall Chrome. Then remove the left over entries for folders it leaves behind (I can help you to remove) and a few registry entries. Then reinstall and it will be gone. But depending on what sites you're visiting it could potentially come back and why I recommended the blockers.