Google search in Chrome redirects to Bing or Yahoo search result

Status
Not open for further replies.

rcm1964us

New Member
Thread author
Aug 13, 2023
7
Tried a host of malware programs but the problem persists. Any help would be appreciated.

THX
 

rcm1964us

New Member
Thread author
Aug 13, 2023
7
Sorry here's the MB log and the FRST info
 

Attachments

  • mb scan.txt
    5.6 KB · Views: 4
  • FRST.txt
    48.5 KB · Views: 8
  • Addition.txt
    27.3 KB · Views: 3

nasdaq

Moderator
Verified
Staff Member
Nov 5, 2019
1,431
Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Please post the Fixlog.txt and let me know what problem persists.
 

Attachments

  • Fixlist.txt
    5.6 KB · Views: 6

rcm1964us

New Member
Thread author
Aug 13, 2023
7
nasdaq:

THX. Did as you asked. Attached is file. Problem still persists. If I stare at the address window I see the mobility-search website come up in an instant and then it directs to Bing or sometimes Yahoo...

Rick
 

Attachments

  • Fixlog.txt
    13.2 KB · Views: 1

nasdaq

Moderator
Verified
Staff Member
Nov 5, 2019
1,431
Hi,

Please set File Explorer to SHOW ALL folders, all files, including Hidden ones.
Please use this Guide for Windows 10 or 11. https://support.microsoft.com/en-us...d-folders-in-windows-97fbc472-c603-9d90-91d0-
Follow the instructions.

Then Download the Microsoft Scanner for this site:

Launch MSERT.exe
Accept the agreement terms of Microsoft
Select CUSTOM scan
Look on Scan Options & select CUSTOM scan & then select the C drive to be scanned.

Then start the scan. Have lots of patience. Once you start the scan & you see it started, then leave it be.

Once you see it has started, take a long long break; walk away. Do not pay credence if you see some intermediate early flash messages on screen display. The only things that count are the End result at the end of the run.
Again, any on-screen display about repeat 'infection' is not to be relied on. Ignore those.
We only rely on the end result that is on the log-report-file.


This is likely to run for many hours ( depending on number of files on your machine & the speed of hardware.)

The log is named MSERT.log

the log will be at

Windows\debug\msert.log
Please attach that log with your reply

p.s.
There are more information for you to read in the download link.
<<<>>>


Please post the log and lif the problem persists run an other scan with the Farbar program and post fresh FRst.TXT and Additional.txt log for my reviews.
 

rcm1964us

New Member
Thread author
Aug 13, 2023
7
nasdaq

Still have the same issue. Attached are logs from the MS scan and the FRst scan.

Rick
 

Attachments

  • msert.log
    1.6 KB · Views: 2
  • Addition.txt
    30.4 KB · Views: 2
  • FRST.txt
    48.8 KB · Views: 2

nasdaq

Moderator
Verified
Staff Member
Nov 5, 2019
1,431
Hi,

Nothing suspicious was found in your logs.

Try this:

Syncing

If the problem persists and Chrome is Synced with other Devices reset it.



Execute the suggested fix.

Restart the computer normally.
===========

If the problem persist continue.

Reset Chrome

Open Google Chrome, click on menu icon [img=[URL]http://www.techsguide.com/wp-content/uploads/2013/12/google-chrome-setting-icon.png[/URL]] or the 3 vertical dots located right side top of the google chrome.

Click "Settings" then "Show advanced settings" at the bottom of the screen.

Click "Reset and clean up" > "Restore settings to their original defaults"

Restart Chrome.
<<<>>>

Conltinue if the problem persists.

Launch Notepad, and copy/paste all the blue instructions below to it.
Save in: Desktop
File Name: fixme.reg
Save as Type: All files
Click: Save

Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains]


Then, disconnect from the Internet!
Next,
Back on the Desktop, double-click on the fixme.reg file you just saved and click on Yes when asked to merge the information.
Optional if the following programs are in your computer.
Note that since the Domains are deleted SpywareBlaster protection must be re-enabled. Spybot's Immunize feature must be used again, also you have to re-install IE-SpyAd if installed.

Restart the computer normally.

If the problem persists we may have to remove Chrome and reinstall a Fresh copy. Will see.
 

rcm1964us

New Member
Thread author
Aug 13, 2023
7
Nasdaq:

I did a little experiment that might be helpful? On another computewr I logged in to my google account and did the same chrome searches as on the problem computer and no redirect. So this means something is "special" on the problem machine???

Rick
 

nasdaq

Moderator
Verified
Staff Member
Nov 5, 2019
1,431
Hi,

Before you proceed I suggest you remove Chrome Syncing if you are presently using the Sync.
Restart the computer to reset the registry.

<<<>>>

Then remove Chrome using the Control Panel > Programs > Programs and Features...
When completed

Download the fixlist.txt but do not run it yet. Will remove Chrome first as suggested below
Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Remove all of Chrome's registry entries.
How to: remove Chrome using the Control Panel > Programs > Programs and Features...
When completed run the Farbar Fix you have just downloaded.
<<<>>>

If all is well the Re-install Chrome on Windows; from this Site.


You may used the other computer to gide you with the Extensions you normally use.

If at any time you need help please ask.
 

Attachments

  • Fixlist.txt
    6 KB · Views: 3

rcm1964us

New Member
Thread author
Aug 13, 2023
7
Nasdaq:

You are a genius! No more redirect. Thank you for your patience. Attached is the log file.

Rick
 

Attachments

  • Fixlog.txt
    13.9 KB · Views: 2
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top