Solved Chrome search hijack - cant remove

Status
Not open for further replies.

blunted

New Member
Thread author
Jul 20, 2017
11
Hi chrome search redirect , have tried just about everything to fix :(

logs etc attached.
 

Attachments

  • FRST.txt
    94.2 KB · Views: 3
  • Addition.txt
    66.2 KB · Views: 1

blunted

New Member
Thread author
Jul 20, 2017
11
hi ty for looking at this

yes only chrome. not happening in chrome canary , not happening in edge (installed but i dont use it).
 

blunted

New Member
Thread author
Jul 20, 2017
11
sorry hadnt tried firefox which is also installed I just forgot about it. just tested it doesnt happen in this browser either.
 

blunted

New Member
Thread author
Jul 20, 2017
11
ok I removed ninja kit, a video downloader plugin and block image. all these were disabled.

leaving

uBlock Origin
Reddit enchancement suite
avast online security

restarted

still redirecting.

I removed them all and restarted chrome. still redirecting.

faster searcher eluxer.com and a few others (hard to see they flash up so fast) are still showing in status at bottom left of window whenever i search , eventually redirects to yahoo7.
 

blunted

New Member
Thread author
Jul 20, 2017
11
hi - whatever it is seems to be adding random dns servers.

ipconfig /displaydns output attached.
 

Attachments

  • ipconfig displaydns.txt
    128.9 KB · Views: 6

blunted

New Member
Thread author
Jul 20, 2017
11
I tried ipconfig /flushdns
they vanish , then are added to nameserver list again soon afterwards
no keys in registry under local machine/ system/tcpip/parameters/
 

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition.txt option is checked.

    2873ryc.png

  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please attach report into your next reply.
 

blunted

New Member
Thread author
Jul 20, 2017
11
thank you - attached
 

Attachments

  • Addition.txt
    69.7 KB · Views: 1
  • FRST.txt
    96.1 KB · Views: 1

blunted

New Member
Thread author
Jul 20, 2017
11
Hi,

Sorry for late reply , have only just had time to look at this again.
yes it came back after signing in to google account. I uninstalled , cleared sync data, reinstalled and it is now gone

tyvm for your help!
 

ausrock60

New Member
Aug 9, 2017
1
Hello,
I'm having exactly the same problem.
Driving me crazy {{cleanerserp.net}}
I thought I might have to delete Chrome and re-install.
Thanks for the above.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top