Solved chromesearch.today hijaked Google Chrome

Tyburne

New Member
Thread author
Oct 25, 2017
6
Hi there,

through tiredness fueled stupidity, I accidentally installed an infected Extension when searching for a special piece of software. Thus, chromesearch.today hijacked my browser and searching as well as any attempts to fix it myself didn't yield any kind of proper result, so I really need some proper help.

So far, uninstalling Chrome, resetting Chromeand running adwCleaner or Malwarebytes did nothing after the initially found extension, though there seems to be some residue, that installs chromesearch.today as a locked search engine for Chrome upon reinstalling.

Attached you will find the FRST Report!
 

Attachments

  • FRST.txt
    40.7 KB · Views: 8
  • Addition_25-10-2017 17.00.47.txt
    99.1 KB · Views: 1
Last edited:

Tyburne

New Member
Thread author
Oct 25, 2017
6
No business computer. Just my private gaming desktop at home. Other than that just a VPN Client and CAD/CAM software for university (I study mechanical engineering).
 

Tyburne

New Member
Thread author
Oct 25, 2017
6
The extension (Bitmotion New Tab Extension) itself is gone, and I don't get the Bitmotion New Tab Page anymore, but within googles settings the search engine is still locked in as chromesearch.today and can't be changed. The New Tab Page still differs from the original google one, too (lacking the google logo).
 

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.



When the fix is done, you will find Date|Time archive on your Desktop.

Please upload it via this link:

Submit a Malware Sample
 

Attachments

  • fixlist.txt
    39 bytes · Views: 9

Tyburne

New Member
Thread author
Oct 25, 2017
6
Done, at least I hope so. FRST installs as a German version on my machine, so I tried "entfernen" (delete), as there is no "fix" button.
 

Attachments

  • Fixlog_26-10-2017 17.19.34.txt
    622 bytes · Views: 3

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.



Let me know if this fixed the issue.
 

Attachments

  • fixlist.txt
    179 bytes · Views: 4

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top