Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How To Remove AVG Search Hijack of Search Pages


  • Please log in to reply
2 replies to this topic

#1 chemaes

chemaes

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:07:49 AM

Posted 12 March 2015 - 09:45 AM

Hi,

 

I'm running windows 7 and use Firefox for my browser.

 

After recently downloading one of either Malwarebytes, Spybot, Adwcleaner or hitman pro believe it or not, AVG somehow hijacked my browser. Whenever opening a new tab, AVG SEARCH appears. learned later that when you download things from on trusted sites they may inbed this PUP.

 

I tried looking online for a solution. The common involved resetting firefox browser, then running Hitman Pro, AdwCleaner, then running Malwarebytes etc. And, after all of that AVG SEARCH was still there.

 

Here's how I got rid of it finally after a couple of days:

 

Reset Firefox browser by:

1) Hit button top right of browser that looking like 3 horizontal lines

2) Hit question mark at bottom of next screen (help button)

3) select trouble shooting information

4)refresh firefox select

 

Restart Computer in Safe Mode.

1)I'm running a lenovo, so after restart there is an initial bios boot, and just after it finishes and windows is about to start hit function key F8 repeatedly. With whatever appears, choose "safe mode" only, not command prompt or the other option.

 

2)Once windows starts up, start windows explorer.

3)search for AVG

4)I found hundreds of AVG temp folders and file folders and I don't have avg security on my computer. I deleted all of them. In APPDATA I had a folder for AVG and this is a must delete. Be careful because after searching for avg you will have some file names that may be avgbtost or something like it with avg and a bunch of characters. You must be certain it is an AVG security item before deleting it. and these were typically all in folders saying "AVG Toolbar" or "AVG Security" or "AVG tools". I deleted them all. if you're not sure google the name.

 

 

Go to the START menu and enter REGEDIT into the command line:

 

(Playing with the registry can be dangerous) so you better be careful and sure you want to delete whatever you are deleting)

 

I believe AVG developed some program that is reinstalling at the root level even after it's removed so this is why I believe you have to go into the registry.

 

Do a search for avg.

 

I just about deleted everything with AVG in it. Sometimes when you are not sure, right click the item and select modify. if I saw anything that said avg secure or avg security I deleted it.

 

In one attempt at deleting items in the registry under HKEY_LOCAL_MACHINE/SOFTWARE/WOW6432Node/Windows/CurrentVersion/InternetSettings/Zonemap/Domains , they would reappear when I went back to the registry to look for it after I deleted it. I tried this several times and found the solution. In this situation you have to go into the permission (right click) and dissallow the ability for Special Permissons control from the Creator Owner. Only when I did this, did it stop reappearing in the registry.

 

When I started my computer, after 3 days of trying to rid myself of this, everything was fine.

 

I may not have followed protocal in posting this, but hopefully it helps someone.

 

Warning. Messing around in the registry can be dangerous, don't delete it if you are not sure. If there is a file name your not sure of, google it to see if it is indeed from AVG, for instance I had a file name avgtbx64 or something like it that I wasn't sure of and it was in the system drivers and created by AVG. i left it alone with the intent of going back to delete it if secure search still persisted.

 

good luck


Edited by hamluis, 13 March 2015 - 06:45 PM.
Moved from MRL to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,565 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:49 AM

Posted 13 March 2015 - 06:49 PM

If you are referring to AVG Secure Search...there is a guide Here.

 

Louis



#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,288 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:49 AM

Posted 13 March 2015 - 07:22 PM

AVG Security Toolbar and AVG Secure Search (created by the makers of AVG Anti-virus) are optional add-ons when installing their anti-virus product if you choose "Customized" install instead of "Express". Since most folks choose an Express install they usually are not aware these options are also being installed as they are pre-checked by default during installation. Some users have also reported that after AVG auto-updates, it will install the toolbar as a browser add-on without input from the user.

AVG Security Toolbar and AVG Secure Search are also commonly bundled as an option with other free software users may download and install. Many folks overlook that option since it is pre-checked by default and they unknowingly install it. For example, the toolbar is bundled with PDFCreator.

So even if you decline the option to use AVG Security Toolbar or AVG Secure Search when installing AVG anti-virus, you may still end up finding them on your system some point after an AVG update or by unknowingly downloading and installing another program where they have been bundled. This also explains how those who never used AVG anti-virus also sometimes find AVG Secure Search and the Security Toolbar installed. Be careful what you download and read everything during the installation.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users