X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

Google search is hijacked

Posted

(Nearly) every time I use Google search, the search is hijacked to any number of other sites. There are "many" such sites, too many to block individually. If use Firefox tools/options/privacy and remove all cookies that I don't recognize, the search may work momentarily, however, the cookies are written back very quickly, and, my hijack problem recurs once again.

If I block 'all' cookies, certain web sites don't work (like, my Google mail, which tells me to go back and enable cookies).

I have tried any number of security programs (Symantec, Spybot etc) but, the effect is the same as above, momentarily the hijack problem disappears, only to reappear. Veritably, the Sorcerer's Apprentice effect!

My feeling is, Firefox needs a very quick fix for what appears to be a gaping security hole in Firefox.

Chosen solution

Probably caused by Malware on your PC.

Install, update, and run these programs in this order. They are listed in order of efficacy.
(Not all programs detect the same Malware, so you may need to run them all to solve your problem.)
These programs are all free for personal use, but some have limited functionality in the "free mode" - but those are features you really don't need to find and remove the problem that you have.
Note: If your Malware infection is bad enough and you are mis-directed to URL's other than what is posted, you may have to use a different PC to download these programs and use a USB stick to transfer them to the afflicted PC.

Malwarebytes' Anti-Malware - http://www.malwarebytes.org/mbam.php
SuperAntispyware - http://www.superantispyware.com/
AdAware - http://www.lavasoftusa.com/software/adaware/
Spybot Search & Destroy - http://www.safer-networking.org/en/index.html
Windows Defender: Home Page - http://www.microsoft.com/windows/prod.../default.mspx
Also, if you have a search engine re-direct problem, see this:
http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html

If these don't find it or can't clear it, post in one of these forums for specialized malware removal help:
http://www.spywarewarrior.com/index.php
http://forum.aumha.org/
http://www.spywareinfoforum.com/
http://bleepingcomputer.com

Read this answer in context 3

Additional System Details

Sites Affected

http://

Installed Plug-ins

  • Allows browsing on RealArcade sites with Mozilla browsers.
  • Yahoo! activeX Plug-in Bridge
  • Office Plugin for Netscape Navigator
  • Adobe PDF Plug-In For Firefox and Netscape 10.0.1
  • Shockwave Flash 10.2 r159
  • 4.0.60310.0
  • Version 0.8.6c, copyright 1996-2006 The VideoLAN Teamhttp://www.videolan.org/
  • Next Generation Java Plug-in 1.6.0_18 for Mozilla browsers
  • Npdsplay dll
  • DRM Store Netscape Plugin
  • DRM Netscape Network Object

Application

  • User Agent: Mozilla/5.0 (Windows NT 5.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1

More Information

Application Basics
Name
Firefox
Version
4.0.1
User Agent
Mozilla/5.0 (Windows NT 5.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Profile Directory
Open Containing Folder
Enabled Plugins
about:plugins
Build Configuration
about:buildconfig
Extensions
Name
Version
Enabled
ID
Microsoft .NET Framework Assistant
1.2.1
false
{20a82645-c095-46ed-80e3-08825760534b}
Java Console
6.0.02.03
false
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
Java Console
6.0.03
false
{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
Java Console
6.0.05
false
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
Java Console
6.0.07
false
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
Java Console
6.0.12
true
{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
Java Console
6.0.13
true
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
Java Console
6.0.14
true
{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
Java Console
6.0.15
true
{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
Java Console
6.0.18
true
{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
Java Quick Starter
1.0
false
jqs@sun.com
Norton IPS
2.0
true
{BBDA0591-3099-440a-AA10-41764D9DB4DB}
Norton Toolbar
5.6
true
{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}
Modified Preferences
Name
Value
accessibility.typeaheadfind.casesensitive
1
accessibility.typeaheadfind.flashBar
0
browser.history_expire_days.mirror
180
browser.places.importBookmarksHTML
false
browser.places.importDefaults
false
browser.places.migratePostDataAnnotations
false
browser.places.smartBookmarksVersion
2
browser.places.updateRecentTagsUri
false
browser.startup.homepage
www.google.com
browser.startup.homepage_override.buildID
20110413222027
browser.startup.homepage_override.mstone
rv:2.0.1
browser.tabs.autoHide
true
extensions.lastAppVersion
4.0.1
general.useragent.extra.microsoftdotnet
(.NET CLR 3.5.30729)
gfx.blacklist.direct2d
2
gfx.blacklist.layers.direct3d10
2
gfx.blacklist.layers.direct3d10-1
2
keyword.URL
http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p=
network.cookie.prefsMigrated
true
places.database.lastMaintenance
1304630777
places.history.expiration.transient_current_max_pages
69610
places.last_vacuum
1299968575
print.print_printer
hp deskjet 3600 series
print.printer_hp_deskjet_3600_series.print_bgcolor
false
print.printer_hp_deskjet_3600_series.print_bgimages
false
print.printer_hp_deskjet_3600_series.print_command
print.printer_hp_deskjet_3600_series.print_downloadfonts
false
print.printer_hp_deskjet_3600_series.print_edge_bottom
0
print.printer_hp_deskjet_3600_series.print_edge_left
0
print.printer_hp_deskjet_3600_series.print_edge_right
0
print.printer_hp_deskjet_3600_series.print_edge_top
0
print.printer_hp_deskjet_3600_series.print_evenpages
true
print.printer_hp_deskjet_3600_series.print_footercenter
print.printer_hp_deskjet_3600_series.print_footerleft
&PT
print.printer_hp_deskjet_3600_series.print_footerright
&D
print.printer_hp_deskjet_3600_series.print_headercenter
print.printer_hp_deskjet_3600_series.print_headerleft
&T
print.printer_hp_deskjet_3600_series.print_headerright
&U
print.printer_hp_deskjet_3600_series.print_in_color
true
print.printer_hp_deskjet_3600_series.print_margin_bottom
0.5
print.printer_hp_deskjet_3600_series.print_margin_left
0.5
print.printer_hp_deskjet_3600_series.print_margin_right
0.5
print.printer_hp_deskjet_3600_series.print_margin_top
0.5
print.printer_hp_deskjet_3600_series.print_oddpages
true
print.printer_hp_deskjet_3600_series.print_orientation
0
print.printer_hp_deskjet_3600_series.print_page_delay
50
print.printer_hp_deskjet_3600_series.print_pagedelay
500
print.printer_hp_deskjet_3600_series.print_paper_data
1
print.printer_hp_deskjet_3600_series.print_paper_height
11.00
print.printer_hp_deskjet_3600_series.print_paper_size_type
0
print.printer_hp_deskjet_3600_series.print_paper_size_unit
0
print.printer_hp_deskjet_3600_series.print_paper_width
8.50
print.printer_hp_deskjet_3600_series.print_reversed
false
print.printer_hp_deskjet_3600_series.print_scaling
1.00
print.printer_hp_deskjet_3600_series.print_shrink_to_fit
true
print.printer_hp_deskjet_3600_series.print_to_file
false
print.printer_hp_deskjet_3600_series.print_unwriteable_margin_bottom
0
print.printer_hp_deskjet_3600_series.print_unwriteable_margin_left
0
print.printer_hp_deskjet_3600_series.print_unwriteable_margin_right
0
print.printer_hp_deskjet_3600_series.print_unwriteable_margin_top
0
privacy.sanitize.migrateFx3Prefs
true
security.warn_viewing_mixed
false
Graphics
Adapter Description
Intel(R) 82945G Express Chipset Family
Vendor ID
8086
Device ID
2772
Adapter RAM
Unknown
Adapter Drivers
igxprd32
Driver Version
6.14.10.4847
Driver Date
6-22-2007
Direct2D Enabled
false
DirectWrite Enabled
false (0.0.0.0, font cache n/a)
WebGL Renderer
(WebGL unavailable)
GPU Accelerated Windows
0/1

the-edmeister
  • Top 10 Contributor
  • Moderator
3197 solutions 24401 answers

Chosen Solution

Probably caused by Malware on your PC.

Install, update, and run these programs in this order. They are listed in order of efficacy.
(Not all programs detect the same Malware, so you may need to run them all to solve your problem.)
These programs are all free for personal use, but some have limited functionality in the "free mode" - but those are features you really don't need to find and remove the problem that you have.
Note: If your Malware infection is bad enough and you are mis-directed to URL's other than what is posted, you may have to use a different PC to download these programs and use a USB stick to transfer them to the afflicted PC.

Malwarebytes' Anti-Malware - http://www.malwarebytes.org/mbam.php
SuperAntispyware - http://www.superantispyware.com/
AdAware - http://www.lavasoftusa.com/software/adaware/
Spybot Search & Destroy - http://www.safer-networking.org/en/index.html
Windows Defender: Home Page - http://www.microsoft.com/windows/prod.../default.mspx
Also, if you have a search engine re-direct problem, see this:
http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html

If these don't find it or can't clear it, post in one of these forums for specialized malware removal help:
http://www.spywarewarrior.com/index.php
http://forum.aumha.org/
http://www.spywareinfoforum.com/
http://bleepingcomputer.com

Question owner

I tried several of the above.

Malwarebytes' Anti-Malware: ineffective, at least, on my PC (as was Symantec)

SuperAntispyware - VERY effective

AdAware - requires a subscription to a number of web services; typically, the first month was "free", but, canceling from such is always problematic; did not try

Spybot Search & Destroy - as mentioned, tried this earlier; ineffective

Several days on, my hijack problem is history (fingers crossed). SuperAntispyware worked best, for me, anyhow. The various blogs and forums are, IMHO, for dedicated tekkies.

bjoyful0881 0 solutions 1 answers

Helpful Reply

well, Im no IT but Im pretty adept- I have tried spybot, malwarebytes, ccleaner and mcafee and I still have this hijack issue. I dont like the idea of not using google or firefox anymore, but I'll do what I have to do to get what I need. Someone needs a fix for this, pronto.

plberes 0 solutions 1 answers

Helpful Reply

Best Way to Stop Re-Directs. After being told by Firefox that the malware I downloaded to get rid of the Foxfire Redirect Problem is the real source of the redirects and trying all of the above but with no positive results I found the perfect solution? DELETE FIREFOX! and find another browser because I cannot stand it any more having a redirect every five seconds!

Question owner

It has been two weeks, and, after using the suggested software (above), the redirect problem has NOT surfaced. I do rerun these packages periodically, and they "do" appear to locate infected files (which they "fix"; of course, you never really know what they are doing).

That said, should this problem reoccur, I'm with plberes: I'm going to delete Firefox. There are too many other browsers out there. This is a problem Firefox needs to be addressing, in the form of a new release.

Varushka 0 solutions 1 answers

Hello NZFilmProf, Which browser would you recommend for immunity to hijack malvirewares? IE8, IE9 and FF4 (uninstalled and reinstalled) all suffer same search engine parasitism, and AFAIK (TTBOMK), non of the big software houses have a regular download product to stop them.

bnovice 0 solutions 5 answers

I was having a problem like you. I deleted "AVG" out of the register. FF on my home page. When I typed anything in search or the address, it would redirect to isearch.AVG.... I went to tools and updated FF and it cleaned out AVG from FF. Now I have Google, FF & IE. I will never download a free trial "File Cleaner", it had AVG attached, installed itself and hijacked all my browsers. Free at last--after two months. AVG SUCKS!

bnovice 0 solutions 5 answers

OOPS! Go to Help vs tools. Sorry typo.