Jump to content

mysearchcorp google redirect


Recommended Posts

Hi all,

I was recently hit with a virus/trojan that caused Google to redirect search results to other sketchy search engines by bouncing the results to mysearchcorp.com and web-search-api.com. I'm curious about two things - one, how is it that these websites haven't been taken down already as they are pretty obviously criminal (yes that's my opinion and not legal opinion), and two, how the heck did that get installed on my computer? I am REALLY diligent about keeping anti-virus up to date, and I don't routinely download random programs and install them, so I'm really baffled as I'm a pretty savvy user and I have no idea how it happened.

FYI - malwarebytes did seem to recognize and remove the threat, so I am grateful for that.

Thanks,

Zephyr

Link to post
Share on other sites

Hello Zephyr and :)

First, Malwarebytes' already knows about those sites and could have protected your computer if you had the Malwarebytes' Pro Version

The Pro version adds a IP Blocker-read HERE and a Scheduler-read HERE

one, how is it that these websites haven't been taken down already

These sites are sometimes in locations around the world where they can not be got to and/or no laws to govern this :)

two, how the heck did that get installed on my computer?

Not only do you have to keep your Antivirus software updated but Anti-malware software, Windows updated, Adobe and Java updated and old versions deleted or any other software you use must be updated. So how did I get infected in the first place?

Now if for any reason you may think that your computer may still be infected or just want to make sure,

I suggest letting one of the Experts have a look at it to start the cleaning process. It is a FREE service

As we don't work on Malware removal in the General Malwarebytes' Anti-Malware Forum as it is for issues with the program itself,

only in the Malware Removal - HijackThis Logs section

Please print out, read and follow the Directions Here, skipping any steps you are unable to complete. Then post a NEW Topic Here

One of the Expert helpers there will give you one-on-one assistance when one becomes available.

Please note that it may take 48 hours or more for you to receive a response in the malware removal forum, as it is often busy at times. Please do not reply to your own post asking for help unless its been more than 48 hours since you originally posted, as this can make it appear as though you are being helped and take longer for you to get help. If no one has replied within 48 hours then please go ahead and either reply to your post or send a private message to a Moderator and let them know that you're still needing assistance.

Logs to reply with:(If possible)

MBAM

DDS/GMER

If you are unable to do all or any of the steps in the link to the directions above, just post your problem into the forum I gave you a link to anyway and someone will be able to assist you.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options(Immediate Email Notification) so that you're alerted when someone has replied to your post.

Email Notification of new messages

Also, when replying, please use the ADDREPLYa8JTu.jpg button located at the bottom of the page, as this makes the forum easier to read.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or HERE

Thanks :)

Link to post
Share on other sites

I'm guessing that some site that I visited used an exploit in Firefox or Chrome, as it was definitely not due to randomly downloading software, nor was it IE (I don't use IE), nor was it failing to keep Windows up-to-date ( a) I automatically update and :) I am behind a sturdy firewall - none of my other machines are affected). Immensely frustrating. Thank you for the response - the information you posted is very useful, and I apologize if it seemed like a question that everyone else in the world asks - I was specifically wanting to know if anyone knew how THAT SPECIFIC virus/trojan was spread, because I can't find any info on it anywhere!!

Anyway, thanks again, and I may take some additional steps that you suggested, and I will post here if anything important happens!

Best,

Zephyr

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.