X
Tap here to go to the mobile version of the site.

Support Forum

browser search hijack

Posted

Current situation: My Firefox brower search default is Google. But it has settled into a pattern of being is hijacked to a site named primeinfospot.com. Initially, the search redirection was to several different sites, but now it is just one site. This might be a result of my attempts to remove the hijacker. Chrome and Safari browsers are not hijacked.

Cause: Attempting to get a better corded connection between my Galaxy and MacBook, I downloaded a file named Android.zip from http://d-h.st/nl5l#!/ This included an install of ADB and Fastbooks. This led to an attempted auto-download of Flash, which I rejected. My browser search then was hijacked first to a number of different sites: readysoft, ikolag, ncontentdelivery, everydayconsumers, primeinfospot, search-switch.

Attempts to remove: Looked through plug-ins and extensions in Firefox, but couldn't find anything that looked like the hijacker. Uninstalled/reinstalled Firefox. Scanned with Malwarebytes (report= clear), Went to Mac hard drive > Applications > Library and uninstalled any files installed on Ocotber 24th (when the problem started).

Current situation: My Firefox brower search default is Google. But it has settled into a pattern of being is hijacked to a site named primeinfospot.com. Initially, the search redirection was to several different sites, but now it is just one site. This might be a result of my attempts to remove the hijacker. Chrome and Safari browsers are not hijacked. Cause: Attempting to get a better corded connection between my Galaxy and MacBook, I downloaded a file named Android.zip from http://d-h.st/nl5l#!/ This included an install of ADB and Fastbooks. This led to an attempted auto-download of Flash, which I rejected. My browser search then was hijacked first to a number of different sites: readysoft, ikolag, ncontentdelivery, everydayconsumers, primeinfospot, search-switch. Attempts to remove: Looked through plug-ins and extensions in Firefox, but couldn't find anything that looked like the hijacker. Uninstalled/reinstalled Firefox. Scanned with Malwarebytes (report= clear), Went to Mac hard drive > Applications > Library and uninstalled any files installed on Ocotber 24th (when the problem started).
Quote

Additional System Details

Installed Plug-ins

  • OpenH264 video codec
  • Widevine content decryption module

Application

  • User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:63.0) Gecko/20100101 Firefox/63.0

More Information

FredMcD
  • Top 10 Contributor
3824 solutions 53098 answers

You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.
Was this helpful to you? 0
Quote

Question owner

Thanks, but the only scanner listed in that article is Malware Bytes, which is not picking up any problems on my computer. Following the links on that page takes me around in a circle back to that page.

Thanks, but the only scanner listed in that article is Malware Bytes, which is not picking up any problems on my computer. Following the links on that page takes me around in a circle back to that page.
Was this helpful to you? 0
Quote
McCoy
  • Top 10 Contributor
227 solutions 1967 answers

PabloSkilz said

Thanks, but the only scanner listed in that article is Malware Bytes,

There are five scanners listed in that article though .....

Especially for Mac : https://www.malwarebytes.com/mac/

''PabloSkilz [[#answer-1169810|said]]'' <blockquote> Thanks, but the only scanner listed in that article is Malware Bytes, </blockquote> There are five scanners listed in that article though ..... Especially for Mac : https://www.malwarebytes.com/mac/
Was this helpful to you? 0
Quote
jscher2000
  • Top 10 Contributor
7934 solutions 64836 answers

Helpful Reply

Other Mac users with this problem had a rogue extension named "Search Updater".

You can view, disable, and often remove unwanted or unknown extensions on the Add-ons page. Either:

  • Command+Shift+a (Windows: Ctrl+Shift+a)
  • "3-bar" menu button (or Tools menu) > Add-ons
  • type or paste about:addons in the address bar and press Enter/Return

In the left column of the Add-ons page, click Extensions.

Then cast a critical eye over the list on the right side. Any extensions Firefox installs for built-in features are hidden from this page, so everything listed here is your choice (and your responsibility) to manage. Please disable or remove Search Updater. If in doubt about any of the others try disabling it.

After that, you should regain control of your settings. You then can restore your preferred default. See: Change your default search settings in Firefox.

Success?

Other Mac users with this problem had a rogue extension named "Search Updater". You can view, disable, and often remove unwanted or unknown extensions on the Add-ons page. Either: * Command+Shift+a (Windows: Ctrl+Shift+a) * "3-bar" menu button (or Tools menu) > Add-ons * type or paste '''about:addons''' in the address bar and press Enter/Return In the left column of the Add-ons page, click Extensions. Then cast a critical eye over the list on the right side. Any extensions Firefox installs for built-in features are hidden from this page, so everything listed here is your choice (and your responsibility) to manage. Please disable or remove Search Updater. If in doubt about any of the others try disabling it. After that, you should regain control of your settings. You then can restore your preferred default. See: [[Change your default search settings in Firefox]]. Success?
Was this helpful to you? 1
Quote

Question owner

jscher, I owe you beers at least. I'd gone through the list of extensions several times with a suspicious eye (since given all the indicators this was a likely source of the problem) and looked at Search Updater on each occasion apparently without noticing it. Now it's gone and the problem is solved. I am impressed by your search skills. I went through several forums and different search criteria, but only found one reference to this problem, which was unanswered. Now I should try to find that reference and provide this advice. Incidentally, the default search engine as named in the relevant section did not need to be altered: It always read Google throughout the hijack period.

jscher, I owe you beers at least. I'd gone through the list of extensions several times with a suspicious eye (since given all the indicators this was a likely source of the problem) and looked at Search Updater on each occasion apparently without noticing it. Now it's gone and the problem is solved. I am impressed by your search skills. I went through several forums and different search criteria, but only found one reference to this problem, which was unanswered. Now I should try to find that reference and provide this advice. Incidentally, the default search engine as named in the relevant section did not need to be altered: It always read Google throughout the hijack period.

Modified by PabloSkilz

Was this helpful to you?
Quote
jscher2000
  • Top 10 Contributor
7934 solutions 64836 answers

Hi PabloSkilz, thank you for reporting back. I think it's a new issue, it's just come up a few times in recent days. I haven't seen any explanation of how it spreads.

Hi PabloSkilz, thank you for reporting back. I think it's a new issue, it's just come up a few times in recent days. I haven't seen any explanation of how it spreads.
Was this helpful to you?
Quote
Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.