How to get rid of www1.search-result malware
This malware redirects Firefox Google searches to a limited set of commercial and other dubious sites. It isn't a problem with Internet Explorer, but I need Firefox because of Zotero. Standard security software scans (Sophos) doesn't detect any problems, and resetting Firefox didn't help. An internet search for possible solutions suggests looking for the www1.search-results via the control panel and uninstalling didn't help as the program wasn't listed. Any other suggestions would be appreciated
Chosen solution
Just to understand what you're seeing:
- you are on the legitimate Google site, you click a result, and it takes you to an unexpected site?
- you are on the legitimate Google site, and additional/inauthentic content is injected into the results page?
- you can't use Google because you are diverted to a different site?
In Firefox, could you check your connection setting here:
"3-bar" menu button (or Tools menu) > Options > Advanced > Network mini-tab > "Settings" button
The default setting of "Use system proxy settings" should piggyback on your Windows/IE "LAN" settings, but you also can try "No proxy" to see whether that helps.
Any change?
Malware often masquerades under an innocent name, and/or is protected by other programs installed at the same time. Therefore, I suggest returning to the Windows Control Panel, Uninstall a Program, for a second look. After the list loads, click the "Installed on" column heading to group the additions by date. This can help in smoking out undisclosed bundle items or other mystery programs that snuck in with some software you agreed to install. Take out as much trash as possible here.
You can "mop up" remaining issues with the scanning/cleaning tools suggested in this support article: Troubleshoot Firefox issues caused by malware. Although there is nothing wrong with Sophos, each vendor tends to have slightly different patterns for detecting malware versus programs considered "annoying". Also, the classic "Google redirect virus" often required a rootkit remover before it could be fully cleaned up.
Read this answer in context 👍 1All Replies (4)
Chosen Solution
Just to understand what you're seeing:
- you are on the legitimate Google site, you click a result, and it takes you to an unexpected site?
- you are on the legitimate Google site, and additional/inauthentic content is injected into the results page?
- you can't use Google because you are diverted to a different site?
In Firefox, could you check your connection setting here:
"3-bar" menu button (or Tools menu) > Options > Advanced > Network mini-tab > "Settings" button
The default setting of "Use system proxy settings" should piggyback on your Windows/IE "LAN" settings, but you also can try "No proxy" to see whether that helps.
Any change?
Malware often masquerades under an innocent name, and/or is protected by other programs installed at the same time. Therefore, I suggest returning to the Windows Control Panel, Uninstall a Program, for a second look. After the list loads, click the "Installed on" column heading to group the additions by date. This can help in smoking out undisclosed bundle items or other mystery programs that snuck in with some software you agreed to install. Take out as much trash as possible here.
You can "mop up" remaining issues with the scanning/cleaning tools suggested in this support article: Troubleshoot Firefox issues caused by malware. Although there is nothing wrong with Sophos, each vendor tends to have slightly different patterns for detecting malware versus programs considered "annoying". Also, the classic "Google redirect virus" often required a rootkit remover before it could be fully cleaned up.
Thanks for those suggestions - my problem is number 3 - I couldn't use Google because I was being diverted to another site.
I had another look at the control panel and uninstalled a few programs that might perhaps have been the source and at the moment Google seems to be working again, but the problem has been intermittent in the past so I'm not completely confident. If it returns I'll try your other suggestions.
Thanks again for your quick and helpful response
I spoke too soon ! - the problem has recurred. I'm now going to try your 'no proxy' settings suggestion - I'll report back whether this helps
The 'no proxy' option didn't work either, but I think I've found the solution - the Firefox"Search Reset" addon at :
- I've tested all sorts of search terms in Google and its no longer getting redirected.