Solved chromesearch.today hijacked my search engine (Google Chrome)

[AHamsterPig]

Today I let my nephew play on my computer today while the family visited and getting back on it I learned firsthand why my uncle wouldn't like me using his computers as a child.

Also when I ran FRST, I closed the disclaimer and a warning popped up saying:

Registry key not found:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\hivelist

ERUNT can try to backup the system registry with default values.
User registries cannot be saved that way, however.
Continue?

Not exactly sure what it meant so I just continued and scanned as normal.

 

[TwinHeadedEagle]

Hello,

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.


When the fix is done, you will find Date|Time archive on your Desktop.

Please upload it via this link:

Submit a Malware Sample

 

[AHamsterPig]

Unfortunately that doesn't seemed to have worked. When I click the three dots to remove chromesearch.today in the "Manage search engines" page, it won't pull up the Edit and Remove options window. I submitted the Date/Time Archive and here's the Fixlog.
P.S. Thanks for the amazing service you provide here, wonderful community you all have here. Have a beer on me

Update: I found y'all's page on removing "This setting is enforced by adminstrator" and updating my Group Policy seems to have done the trick. Thanks so much for your time though!

 

[TwinHeadedEagle]

Let me see if it worked after this fix:

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[AHamsterPig]

Step 1 on this page seems to have worked. Should I go ahead and run this new fix as well?

 

[TwinHeadedEagle]

Yes, please do it anyway.

 

[AHamsterPig]

Here ya go!

 

[TwinHeadedEagle]

That's it, you're good to go

 

[AHamsterPig]

Thanks so much man! Huge thanks to all of you guys that run this community

 

[SupermanX]

TwinHeadedEagle,

You are a god send. I was highjacked by chromesearch as well and used your steps and it worked. Thank you so much. I have attached my fixlog as well in case you use it in the future.