Malware redirects all my google searchs

[Jeremycards]

Jeremycards last edited by

Ok so this is a problem with all of my browsers, first i noticed than when trying to enter any google sites i would get stopped by a privacy security warning and no browser would allow me to go on no matter what. After a sweep of Malwarebytes i found out i had redirection malware and promptly quarentined it, restarted pc and tried again, but all my browsers are still not letting me google anything (or accesing google maps or gmail). My guess is that even if the malware is gone, the redirection settings are still saved somewhere. But at least cleaning cache and such didn't help...

Since i almost only use Opera i decided to ask here if anyone can help, since this is getting really annoying to deal with and this is as far i can go on my own knowlwdge.

[sgunhouse]

sgunhouse Moderator Volunteer @Jeremycards last edited by

@jeremycards Are you familiar with the hosts (sometimes hsts) file? It is a way to redirect certain domains to a specifed IP address. They might have used one.

[Jeremycards]

Jeremycards @sgunhouse last edited by

@sgunhouse Not familiar with it, but it sounds like that's the case since i read that mentioned in the explanations from the error... Any idea how to undo that?

[sgunhouse]

sgunhouse Moderator Volunteer @Jeremycards last edited by

@jeremycards Find the file and delete it. It is supposed to be somewhere in C:\Windows.

[Jeremycards]

Jeremycards @sgunhouse last edited by

@sgunhouse any idea what the syntaxis could be?

[sgunhouse]

sgunhouse Moderator Volunteer @Jeremycards last edited by

@jeremycards Syntax? Well known, but not important if you're just deleting it. Its just a list with domain followed by address to use instead. Something like

www.google.com 12.34.56.78

(the number is obviously made up here)

[Jeremycards]

Jeremycards @sgunhouse last edited by

@sgunhouse Alright, will try to hunt it down when i get home, i guess sorting files by date modified should make it easy enough. Thanks for the info!

[blackbird71]

blackbird71 @Jeremycards last edited by

@jeremycards In a typical Win 10 system, you can find it at folder: C:\windows\system32\drivers\etc. Note that the file has no extension term, but is simply "hosts". You can open it and edit it in Notepad... just make sure to again save it without a file extension. Suggestion: before you edit it, save a copy of the original as hosts.bak, just in case something gets messed up... if it does get messed up, you can then always get back to the original.

[Jeremycards]

Jeremycards @blackbird71 last edited by

@blackbird71 Thanks! I could find the file but it seems to only have the commented section with the # symbols before it... So there's not much to modify

[blackbird71]

blackbird71 @Jeremycards last edited by blackbird71

@jeremycards said in Malware redirects all my google searchs:

... I could find the file but it seems to only have the commented section with the # symbols before it... So there's not much to modify

In that case, your hosts file is essentially "generic"... that is, it hasn't been modified from the original, hence it's not the source of your malware redirection. In some malware cases, the malware writes redirection lines into the hosts file, but apparently not in your situation. The cause of the redirections lies elsewhere... perhaps Malwarebytes didn't remove all instances of the malware (not an uncommon problem, which is why usually it's best to use a couple of different removal tools in succession).

[Jeremycards]

Jeremycards @blackbird71 last edited by

@blackbird71 said in Malware redirects all my google searchs:

@jeremycards said in Malware redirects all my google searchs:

... I could find the file but it seems to only have the commented section with the # symbols before it... So there's not much to modify

In that case, your hosts file is essentially "generic"... that is, it hasn't been modified from the original, hence it's not the source of your malware redirection. In some malware cases, the malware writes redirection lines into the hosts file, but apparently not in your situation. The cause of the redirections lies elsewhere.

Seems that way, and to make matters worse, this issue is also blocking capcha from some sites, making me unable to log in... I think i'll bite the bullet and format my pc, havent done one in years and problems are starting to pile up

Thanks for your help anyway!

[lavanyadeepak 0]

lavanyadeepak 0 @Jeremycards last edited by

@jeremycards Try using Trend Micro Housecall to do a on-call scan https://www.trendmicro.com/en_in/forHome/products/housecall.html

However a standalone and realtime #Antivirus is required to continuous constant monitoring and protection

[iamdrdani]

iamdrdani @Jeremycards last edited by

@jeremycards Bro sometime free plugin or crack plugin may cause this issue, or may be sometime Nulled Theme also responsible for this kind of issue.

[ianrichardson]

ianrichardson last edited by

last month my friend got malware and some other deadly virus in his site he hired a wordpress developer to fix all this stuff in a right way

[ianrichardson]

ianrichardson @ianrichardson last edited by ianrichardson

bing shows more malware url in website then google i think its bing fault

[kanikavatsyayan]

kanikavatsyayan last edited by

One thing that you can try to access your browser is check for any browser reset options. It would get you off all the cache, history, download data, plus any malicious cookies or content that is preventing you to run google searches. Let me know if it helps! You may also try deleting the browser and reinstalling it to check if resolves the issue.