Jump to content

Yahoo Search Re-direct

fablhof

By fablhof
in Resolved Malware Removal Logs

 Share

Recommended Posts

fablhof

fablhof

Posted
Posted

I have a brand new Yoga laptop. I set it up with my standard softward (Adobe, MS Office, etc). I set Google chrome as my default browser and search engine. I even downloaded Malwarebytes right off the bat and ran a scan just for the fun of it. Nothing was found. When I open Google Chrome, perform a search and click on a search result link, a new chrome browser window opens with the Yahoo search results. IF, instead of clicking on the google chrome search results directly, I right click on the link and "open link in new tab"  it doesn't open up the Yahoo search results. I've re-ran Malwarebytes and nothing is found but I can't find a way to prevent this from happening.

Any thoughts on what I need to do?

Lenovo Yoga C930, Windows 10 verson 1809, Google Chrome version 76.0.xxxxx.

Link to post
Share on other sites
fablhof

fablhof

Posted
  • Author
Posted

An update on the issue....

This only happens with Chrome. If I click the link in search results in Edge, it opens directly to the info. However, one of the issues I have with Edge is that I can't set the search results to open in a new tab. Therefore, I don't like to use Edge. But with this issue, Chrome is the same as Edge because I have to manipulate a couple of things to get it to open in a new tab in Chrome.

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Hi, Fablhof.     :welcome:

My name is Maurice. I will be helping and guiding you, going forward on this case.


We need to get information from this machine in order to have the proper detail to help you forward.
 NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

    Download Malwarebytes Support Tool
    
    
    Once the file is downloaded, open your Downloads folder/location of the downloaded file
    Double-click mb-support-1.4.0.623.exe to run the report
        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
        
    Place a checkmark next to Accept License Agreement and click Next
    You will be presented with a page stating, "Get Started!"

    Do NOT use the button “Start repair” !
    Click the Advanced tab on the left column
    
    Click the Gather Logs button
    
    A progress bar will appear and the program will proceed with getting logs from your computer
   
    Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
    Please attach the ZIP file in your next reply.

 

Thank you.

 

Link to post
Share on other sites
fablhof

fablhof

Posted
  • Author
Posted

So, it turns out that my removing Yahoo as a search engine didn't solve the problem for long. I found another post that has a solution that is working for now. It appears that Searchstab.com is causing the problem. I don't know what that is or if its malware or how it got added to my search engine. This page...https://support.google.com/chrome/answer/2765944?p=ui_software_removal_tool&rd=2&visit_id=636990051096122904-938401422 discusses removing malware but then walks through resetting Chrome settings. This worked for me, at least for now. If this comes up again, this information might be helpful but I'm not sure if its a malware problem or what. 

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Thanks for the news & information.  If you will run the FRST diagnostic report, I will review it.

Run a report tool known as FRST. This has no personal information. It is a well-known & widely used & safe.
FRST will help provide me with a list of installed programs and other information about your computer that will help me see if there are any other problems that are not being detected. Please follow the steps below to run FRST.


1: Please download FRST from the link below and save it to your desktop:

"Download link for 32-Bit version Windows"

"Download link for 64-Bit Version Windows"

Please wait and look toward the top or bottom of your browser for the option to Run or Save.
Click Save to save the file version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.


Run report with FRST

Right-click on FRST icon and select Run as Administrator to start the tool , and reply YES to allow it to proceed and run.

_Windows 8 or 10 users will be prompted about Windows *SmartScreen protection* - click line More info information on that screen and click button Run anyway on next screen._

Click YES when prompted by Windows U A C prompt to allow it to run.
Note: If you are prompted by Windows SmartScreen, click More info & followup & choose Run anyway.


Approve the Windows UAC prompt on Windows Vista and newer operating systems by clicking on Continue or Yes. 

Click Yes when the* disclaimer* appears in FRST.
The tool may want to update itself - in that case you'll be prompted when the update is completed and ready to use.

Make sure that Addition options is *checked* - the configuration should look exactly like on the screen below (do not mark additional things unless asked).
Press Scan button and wait.




The tool will produce three logfiles on your desktop: _FRST.txt_ , _Addition.txt_ 
Click OK button when it shows up. Close the Notepad windows when they show on screen. The tool saves the files.

Please attach these 2 files to your next reply.

Thank you.

Link to post
Share on other sites
fablhof

fablhof

Posted
  • Author
Posted

So...I've attempted the processes you describe. They aren't exactly as you mention but I think I was ok until the "make sure the addition option is checked". Also, I don't have a "screen below" to refer to. I clicked the scan button but there were at least 10 boxes checked. When it completed, I clicked ok and closed the notepad and didn't find anything on my desktop.

I'm losing confidence in your processes and systems because EVERY time I attempt to login to the malwarebytes forum I'm told my ID or PW is incorrect and I have to change my password. This doesn't instill a lot of confidence in your systems. Especially after ALL the warnings I get about loading your software. But I guess it's too late for that because whatever you wanted loaded has been loaded.

 

Link to post
Share on other sites
fablhof

fablhof

Posted
  • Author
Posted

If I can add to the reason I'm confused on what to do, you say to make sure the addition option is checked, attached is what I see when the program is loaded and all I can do is Scan. When I scan, the files don't show up where I can easily find them.

 

 

2019-08-05_19-58-54.png

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Hello.   Yes those are the files from the report tool.   Thanks.   I am sorry that you had a bit of a struggle on that.

You use Chrome as the browser.  Lets start by turning off the Sync feature of Google Chrome.

Use Chrome  to go to https://www.google.com/settings/chrome/sync and sign into your account.
Scroll down until you see the "reset sync" button and click on the button
At the prompt click on "Ok".

 .

I  would suggest to download, Save, and then run Malwarebytes ADWCLEANER.

Please close Chrome and all other open web browsers after you have saved the Adwcleaner and before you start Adwcleaner scan.

Version 7.4 of Adwcleaner  detects factory Preinstalled applications too!

I  encourage you to take a look at the announcement blogpost to learn more this new detection category: https://blog.malwarebytes.com/malwarebytes-news/2019/07/your-device,-your-choice:-adwcleaner-now-detects-preinstalled-software/.

 

Please download  Malwarebytes AdwCleaner  https://downloads.malwarebytes.com/file/adwcleaner
 

Be sure to Save the file first, to your system.  Saving to the Downloads folder should be the default on your system.

 

Go to the folder where you saved Adwcleaner. Double click Adwcleaner  to start it.

At the prompt for license agreement, review and then click on I agree.

 

You will then see a main screen for Adwcleaner. ( if you do not see it right away, minimized the other open windows, so you can see Adwcleaner).

Then click on Dashboard button.

Click the blue button "Scan Now".

 

allow it a few minutes to finish the Scan.   Let it remove what it finds.

NOTE:  When it comes to the section "

Pre-installed applications

 

You can skip that.

Please find and send the Adwcleaner "C" clean report.

In Adwcleaner, click the "Reports" button.  Look at the list of reports for the latest date & type "Clean".

Double Click that line & it will open in Notepad.   Save the file to your system and then Attach that with your reply.

Thanks.  Keep me advised.

 

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Thanks for the report.   How is the situation when doing a search ?

If there is still a redirect, I need to know for sure which web browser is in use, plus, which search engine is set as your preference.

 

You had said you use Chrome.  Lets tighten it up.

.

You may do some browser "beefing up" to help in general  to reduce unwanted ads.

beef up each web browser ( put an ad block extension).
Malwarebytes has a browser extension for Chrome & a separate one for Firefox browser.

 

See this article on our Malwarebytes Blog
How to tighten security and increase privacy on your browser

.

Look at the following Malwarebytes Blog article and scroll down to the section marked *Clear your browser's cache* 
and do that for each of your web browser programs.
https://blog.malwarebytes.com/puppum/2017/04/adware-the-series-part-1/

.

Look at the following Blog article & turn off push notifications for Chrome, Firefox, Edge, Opera
https://blog.malwarebytes.com/security-world/technology/2019/01/browser-push-notifications-feature-asking-abused/

.

beef up each web browser ( put a ad block extension).
Malwarebytes has a browser extension for Chrome & a separate one for Firefox browser.

 

if you use Chrome or Firefox browser, install the Malwarebytes beta browser extension.  There is one for Chrome & another for Firefox.

To get & install the Malwarebytes beta Chrome extension,

Open this link in your Chrome browser: https://chrome.google.com/webstore/detail/malwarebytes/ihcjicgdanjaechkgeegckofjjedodee

Then proceed with the setup.

 

ID this pc has Firefox browser   .....   To get & install the Malwarebytes beta Firefox extension.

Open this link in your Firefox browser: https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/

Then proceed with the setup.

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Thank you so much for the confirmation.   I am happy to hear this good news.

It is not enough to just have a security program installed. Each pc user needs to practice daily safe computer and internet use.

 

Safer practices & malware prevention:
Follow best practices when browsing the Internet, especially on opening links coming from untrusted sources.
First rule of internet safety: slow down & think before you "click".
Free games & free programs are like "candy". We do not accept them from "strangers".


Never open attachments that come with unexpected ( out of the blue ) email no matter how enticing.
Never open attachments from the email itself. Do not double click in the email. Always Save first and then scan with antivirus program.

Never click links without first hovering your mouse over the link and seeing if it is going to an odd address ( one that does not fit or is odd looking or has typos).

 

Pay close attention when installing 3rd-party programs. It is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed.
Take great care in every stage of the process and every offer screen, and make sure you know what it is you're agreeing to before you click "Next".

Use a Standard user account rather than an administrator-rights account when "surfing" the web.
See more info on Corrine's SecurityGarden Blog http://securitygarden.blogspot.com/p/blog-page_7.html
Dont remove your current login. Just use the new Standard-user-level one for everyday use while on the internet.


Check in at http://windowsupdate.microsoft.com 
Windows Update and install any Important Updates offered.

Make certain that Automatic Updates is enabled.
https://support.microsoft.com/en-us/help/12373/windows-update-faq



Keep your system and programs up to date. Several programs release security updates on a regular basis to patch vulnerabilities. Keeping your software patched up prevents attackers from being able to exploit them to drop malware.

For other added tips, read "10 easy ways to prevent malware infection"

.

Sincerely,

Maurice

 

 

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.