moresearchhh.com redirect malware

[TheFatBready]

I tried everything I could to get rid of the redirection to Bing. I don't have any extensions besides Adblocker and Grammarly on my browser. I Scanned my PC using 2 different Antiviruses including Malwarebytes, and Hitman Pro. Still, nothing changed and when I type anything into the Google search engine it goes to moresearchhh.com and then to Microsoft Bing with the result.

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Lets find out where this malware is hiding.

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Ensure that you are in an Administrator Account
Double-click to run it. When the tool opens click Yes to disclaimer.
Check the boxes as seen here:

Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Please attach the logs for my review.
How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.

https://deeprybka.trojaner-board.de/eset/eng/attachlogs.png

Wait for further instructions

p.s.
This program is updated often.
If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided.
if the download was from the site I provided you should restore the program from the Quarantine folder. It's SAFE.
====

 

[TheFatBready]

This is my

 

[TheFatBready]

And this one as well i didn't see that when I read this at first time

 

[nasdaq]

Hi,

Question: Did you install this program in Bold? c:\Program Files\InternetGuardian

----

Syncing:

If Chrome is Synced with other Devices reset it.

Chrome Secure Preferences detection always returns

Sign in & sync in Chrome - Computer - Google Chrome Help

When you sign in to Chrome with your Google Account, you can get your info on all your devices and use additional Chrome features. When you sign in You can get your bookmarks, passwords, and

support.google.com

Execute the suggested fix.

Restart the computer normally.
====

Please download AdwCleaner by Malwarebytes your Desktop.

• Close all open programs and internet browsers.[/*]
• Double click on AdwCleaner.exe to run the tool.[/*]
• Click the Scan button and wait for the process to complete.[/*]
• Click the LogFile button and the report will open in Notepad.[/*]

IMPORTANT

• If you click the Clean button all items listed in the report will be removed.[/*]

If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.

• Close all open programs and internet browsers.[/*]
• Double click on AdwCleaner.exe to run the tool.[/*]
• Click the Scan button and wait for the process to complete.[/*]
• Check off the element(s) you wish to keep.[/*]
• Click on the Clean button follow the prompts.[/*]
• A log file will automatically open after the scan has finished.[/*]
• Please post the content of that log file with your next answer.[/*]
• You can find the log file at C:\AdwCleanerCx.txt (x is a number).[/*]

===

Before you post the AdwCleanerCx.Txt file do this.

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Please post the Fixlog.txt and let me know if the problem persists.

 

[TheFatBready]

No, I don't think I installed the app you asked about.

 

[nasdaq]

Hi,

If the problem persists please do an other scan with the Farbar program and attach both the FRST.txt and Addition.txt logs for my review.

 

[TheFatBready]

The problem is still there.And this is still the problem ----> every time I'm trying to search something in google It redirects me to this and then to bing.

 

[nasdaq]

Hi,

Here is the new fix.

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

If the problem persists after the Restart of the system run this Microsoft Safety Scanner - MSERT.exe

Please set File Explorer to SHOW ALL folders, all files, including Hidden ones.
View hidden files and folders in Windows - Microsoft Support.
Follow the instructions.


Then Download the Microsoft Scanner for this site:
Microsoft Safety Scanner Download - Microsoft Defender for Endpoint

Launch MSERT.exe
Accept the agreement terms of Microsoft
Select CUSTOM scan
Look on Scan Options & select CUSTOM scan & then select the C drive to be scanned.

Then start the scan. Have lots of patience. Once you start the scan & you see it started, then leave it be.

Once you see it has started, take a long long break; walk away. Do not pay credence if you see some intermediate early flash messages on screen display. The only things that count are the End result at the end of the run.
Again, any on-screen display about repeat 'infection' is not to be relied on. Ignore those.
We only rely on the end result that is on the log-report-file.


This is likely to run for many hours ( depending on number of files on your machine & the speed of hardware.)

The log is named MSERT.log

the log will be at

Windows\debug\msert.log
Please attach that log with your reply

p.s.
There are more information for you to read in the download link.
<<>>>

Please post the Fixlog.txt and let me know what problem persists.

 

[TheFatBready]

The Problem is no longer there. Thank you for being so helpful!

 

[nasdaq]

Glad we could help.