BleepingComputer.com: My google search seems to have been hijacked . . .

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

My google search seems to have been hijacked . . .

#1 User is offline   Boob Dole 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 07-February 11

Posted 07 February 2011 - 01:08 PM

So, my computer seems to have been messed with recently and for whatever reason, using the google search from both firefox and windows explorer (but not chrome) causes me to get a 404 error (see attachment). My firefox browser used to say "seek" in the top left corner rather than google, so I assumed it was a browser hijack. I used Spybot, Ad-Aware, Malwarebytes, and CCleaner and between the four, all I found was a viewbarbho.dll, which I removed from the system. However, since I had done this, my google search still doesn't work. I have been able to switch to other search engines with success so I'm assuming that it took over the google toolbar, I removed it and it removed something important from it and now is not working. I wanted to be safe and make sure everything is gone though so below is my hijack this log (which I had ran through the online analyzer and everything seems to look clean except for a few items, which I didn't know about like that marimba tuner. What is that?). Any help you can give me would be greatly appreciated. Thanks!

Attached File(s)


This post has been edited by hamluis: 07 February 2011 - 01:49 PM
Reason for edit: Moved from XP forum to Am I Infected.


#2 User is offline   Boob Dole 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 07-February 11

Posted 07 February 2011 - 02:32 PM

Bah, wrong section. My bad. Oh, and I had a Hijack this log here but apparently, it was moderated out . . . I think I included enough info without it but if not, let me know. If you need me to reupload the Hijack this log, let me know. Thanks.

#3 User is offline   Boob Dole 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 07-February 11

Posted 10 February 2011 - 01:12 PM

Well, for anyone that might have a similar problem but can't find any additional info, this is what I found. After running:

Spyware
Adaware
Malware Bytest
CCleaner
SuperAntiSpyware
ATFCleaner
TDSS Cleaner

I had found a viewbarbho.dll in one of the programs and removed it but the problem didn't go away. As it turns out, the malware had edited my default search engine/google search so it looked like a standard google search in the top right corner of the browsers to it's own search engine. From where I sat, I was using a regular google search and getting errors.

As it turned out, these programs had cleaned my system and the reason I was still getting these errors is because the fake search was being redirected to a file that had already been removed by the spyware cleaners, so it wasn't a working piece of malware on my computer but a gutted one, causing the errors I was seeing.

I hope this is of some use to someone. Enjoy.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users