I'm having trouble with the searchguide.level3 browser hijacking malware. I've reinstalled Firefox twice...please help!
I'm on a mac using the latest OS and I've reinstalled FireFox twice now. Where is this malware coming from? It seems benign enough; it sits in the background and waits for me to mistype a url then it takes me to its search results page...( But I know this means it could also be logging everything I'm doing as well as all my keystrokes. I checked the tutorials on how to remove it but they said I'd have to reset my search preferences and nothing in that panel has been changed. I don't have any weird software installed on my computer and I don't download strange files. Please advise!
PS- It only goes to http://searchguide.level3.com/ when I type in something with .com at the end that won't load. If I type in something that's more of a search term, it goes to google per my settings.
All Replies (3)
Good for you to be on the alert, cause you're dealing with a browser hijacker.
See : https://www.2-spyware.com/remove-searchguide-level-3-virus.html#mac-os-x
Go to the Firefox menu (≡) => Add-ons => Extensions
( Mac : Command + Shift + A)
Look for anything unfamiliar - if you find one, remove it.
Next step : run malwarescans.
Further information can be found in this article : https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no
Run most or all of the listed malware scanners. They all work differently - what one program doesn't pick up, the other might.
Especially for Mac : https://www.malwarebytes.com/mac/
And : https://malwaretips.com/blogs/remove-mac-os-x-virus/
Are things back to normal now ?
It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but other programs as well.
You have heard of the fine print in shady contracts, right? Well, some installers you need to look at the itsy bitsy teeny weeny fine print.
You are thinking you are giving the installer permission to install the program you want by using the recommended option. But if you use the Manual Option Instead, you discover all kinds of stuff that you do not even know what it is or what it does.
From now on, everyone needs to Use The Manual Option to put a stop to this.
Note that these programs can also change browser/computer settings.
Do you use CenturyLink for your internet connection? According to http://www.level3.com/en/, "Level3 is now CenturyLink." That makes me think this could be a "service" associated with your ISP.
Some ISPs return site listings and/or ads instead of "server not found" error messages. On the "results" page, there often is a link where you can disable that "feature." With different ISP's, it will look different, but check toward the right edge and bottom for any opt-out or "why am I seeing this" or other links that might lead to a page where you can stop them from doing it. Or you could complain to them.
Edit:
Similar inquiry for Safari from a couple years back: https://apple.stackexchange.com/questions/240000/non-existing-urls-redirect-to-searchguide-level-3-in-safari
Modified by jscher2000 - Support Volunteer