[Solved]opera hijacked badly

[edluedlu5]

edluedlu5 last edited by

Hello guys

I tried troubleshooting for hrs, just can't find the answer.
1st is was the homepage hijacked, after searching and searching, I found out that it was at Opera properties - launching target was added an website. see pic:

now I get a toolbar, which replaces whatever I type into search, I can click and close it at X, but next start of opera comes again.
see pic:

I ran malware bytes, adware, no help.
there are no extentions
there are no plugins

So this is a little bit beyond my level. I re-installed Opera, not help. I don't know how to reset (w/o losing pass, bookmarks etc)
Any help?

Any help?

[edluedlu5]

edluedlu5 last edited by

it was with Safesurfs.net the start page hijacked.

[alobpreis]

alobpreis last edited by

Did you check what was left in Opera folders after uninstalling? Did you check with msconfig what's being executed on start? Try downloading the portable version and see what happens there. If it appears, then it's a process already running. If it doesn't, then it's probably something in Opera's folders.

[sgunhouse]

sgunhouse Moderator Volunteer last edited by

I thought you said you had no extensions - I see icons for extensions in your main toolbar! (ABP is presumably AdBlock Plus, can't identify what's right of that).

[edluedlu5]

edluedlu5 last edited by

alobpreis, I run all kind of spyware, malware removal tools, nothing, still hijacks from time to time clicks, and off course that damn bar, which I cannot find nowhere that is installed.

Anyway, I had to reset it, well that was not easy to find, lots of guides for chrome, IE, or Firefox, nothing for OPERA 39.
For those searching go to: C:\Users\username\AppData\Roaming\Opera Software\Opera Stable
and delete "Preferences" file, most of the guides out there are for older version of Opera. This resets opera, but keeps passwords, keeps bookmarks.

sgunhouse: yes, I have extensions what I meant some suspicious.

So no clue how comes that bar, it hijacks the search, and even typing into google search goes into that search bar, which makes very frustrating.

I think with reset I am done. To be safe I reset chrome, IE, and Firefox.

thx guys

[alobpreis]

alobpreis last edited by

edluedlu5, have you tried what I suggested? Uninstall Opera, remove all Opera folders you may find in the subfolders under C:\Users\username and then reinstall it, or try with the portable version instead.

Does something appear if you right click on that toolbar?

Does it appear if you open a new private window?

[onthehunt]

onthehunt last edited by

I too am having a big issue with being redirected/hijacked. When I open a webpage initially and use the back button, the screen goes blank and I see in the address bar an ad clicker address. I click the back button again and another adjacker address appears. I have to close Opera and reopen to get out of the hijack loop. Ever since the hacker attack on Opera, it just doesn't seem to be working right.

I am also having an issue with speed dial not syncing between my laptop and desktop even though I am signed in on both computers. Prior to the hack, it worked flawlessly.

[edluedlu5]

edluedlu5 last edited by

alobpreis, uninstalling and installing did not help, the reset did the trick. But the trick was to find a way to reset.

Here again the guide "For those searching go to: C:\Users\username\AppData\Roaming\Opera Software\Opera Stable and delete "Preferences" file, most of the guides out there are for older version of Opera. This resets opera, but keeps passwords, keeps bookmarks."

it is all good, working perfectly.

thanks

[edluedlu5]

edluedlu5 last edited by

onthehunt: just do a reset, you do not lose the bookmarks or passwords.