Keep getting redirected to Ironmodal.com when attempting web search

[Randy_D]

Everytime that I attempt to go to Bing.com, my browser is redirected to ironmodal.com.  Likewise, when I attempt a search using Google.com, I am again redirected to Ironmodal,com.

My browser is Brave, Version 1.40.105 Chromium: 103.0.5060.53 (Official Build) (64-bit).  I am running a Windows 8.1 operating system, fully updated.

Attached are the results of running the Malwarebytes gather logs.

 

Any/all help will be appreciated.

mbst-grab-results.zip

[Maurice Naggar]

Hello @Randy_D I will guide you. 

Let's do one scan with Malwarebytes Adwcleaner to check for adwares. Just before pressing that "scan" button, be sure that Chrome & Edge, or other web browser are Closed.

It will not take much time,

First download & save it

https://support.malwarebytes.com/hc/en-us/articles/360038520054-Download-and-install-Malwarebytes-AdwCleaner

Then be sure to close all web browsers.

Then go to where the EXE file is saved. Start Adwcleaner.  Then do a scan with Adwcleaner

https://support.malwarebytes.com/hc/en-us/articles/360038520114-Malwarebytes-AdwCleaner-scan-and-clean

Attach the clean log.

[Randy_D]

Attached are the logs.  It did find and clear two files, and after a couple scans, I quarantined one of the pre-installed files.  No change.

mbst-grab-results.zip AdwCleaner[C02].txt

[Maurice Naggar]

This custom script is for  Randy_D  only / for this machine only.

Be very sure to Save any work-files you have open at this point. Close & Save any open edits, if any. Next, a custom script to do  checks & some  cleanups. 

We will use FRSTENGLISH   to run a custom script.    The system will be rebooted after the script has run.

This custom script has some specific things, plus some general aspect to help the system overall.  Hoping it will not exceed 60 minutes in execute time.

NOTE-1:  This script will  run a scan using System File Checker to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. .It will also run the Windows tool DISM to check Windows integrity.  It will rebuild the Winsock. 

NOTE-2: This run is intended to help do cleanup on Brave browser.

•  
• Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this.

 

• If there are any CD / DVD / or USB-flash-thumb or USB-storage drives attached,  please disconnect any of those.
• Please save the (attached file named) FIXLIST.txt   to the   Downloads  folder. The script & FRSTENGLISH have to be in same folder. They work together.

Fixlist.txt          <<< - - - - -

Then, Start the Windows Explorer and then, go  to the  Downloads folder  

RIGHT click on FRSTENGLISH   and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

• IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

• on the FRST window:

Click the Fix button just once, and wait.

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity.

[Randy_D]

Thank you for all your work.  I finally got to run it this evening, and it seems to have done the trick.

My Fixlog,txt file is attached.

 

Thank you again.

Fixlog.txt

[Randy_D]

2 minutes ago, Randy_D said:

Thank you for all your work.  I finally got to run it this evening, and it seems to have done the trick.

My Fixlog,txt file is attached.

 

Thank you again.

Fixlog.txt 975.87 kB · 0 downloads

Perhaps not quite fixed.  My browser is now missing my Norton extensions for security, and passwords.

[Maurice Naggar]

To your last message, Which web browser is that ?  and can you re-install the Norton extension on that browser?

[Randy_D]

The browser is Brave, Version 1.40.105 Chromium: 103.0.5060.53 (Official Build) (64-bit).

I was indeed able to re-install the Norton extensions.  One odd things, is that it reads "Error" in the button for customizing the browser.  Everything seems to be working now however.

[Randy_D]

Just restarted the computer again, and the "error" sign is gone.

[Maurice Naggar]

Good to know. Question is: How is situation vis-a-vis "ironmodal" redirect?

[Randy_D]

The Ironmodal redirect is gone for both web pages.  Thank you.

[Maurice Naggar]

Let me suggest that you get your browsers each, as applicable, to have the Malwarebytes Browser Guard.

See Support article how-to

https://support.malwarebytes.com/hc/en-us/articles/360038520374-Install-Malwarebytes-Browser-Guard

See Support article how-to for Firefox
https://support.malwarebytes.com/hc/en-us/articles/4413298841747--Install-Malwarebytes-Browser-Guard-on-Firefox-browser

For the EDGE browser https://support.malwarebytes.com/hc/en-us/articles/4413298736787-Install-Malwarebytes-Browser-Guard-on-Microsoft-Edge-browser

Note: If your pc also has Opera or Brave or Vivaldi browser, you can install the Chrome version of the Malwarebytes Browser Guard ( on each as appropriate).

*

This here is for tools cleanup. 

Please download KpRm by kernel-panik and save it to your desktop.

• right-click kprm_(version).exe and select Run as Administrator.
• Read and accept the disclaimer.
• When the tool opens, ensure all boxes under Actions are checked.
• Under Delete Quarantines select Delete Now, then click Run.
• Once complete, click OK.
• A log may open in Notepad titled kprm-(date).txt.  I do not need it. Just close Notepad if it shows up.

Delete mb-support-1.8.7.918.exe
Delete mbst-grab-results.zip on the Desktop.

Consider using PatchMyPC, keep all your software up-to-date - https://patchmypc.com/home-updater#download

I wish you all the best. 😎

[Maurice Naggar]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following to help you better protect your computer and privacy Tips to help protect from infection

Thank you