A couple of days ago my browser (firefox) was hijacked... When starting firefox, besides opening a tab with my home page, it was also opening a tab to trustedsurf.com and at random (?) times during browsing, new tabs opened that redirected me to various other pages...
I downloaded and run the latest version of Malwarebytes Anti-Malware 2.2.1, which did a clean up in my PC and I also manually edited and removed the "redirect" to trustedsurf.com in the shortcuts of Firefox (and Chrome as well).
I was under the impression that this was it, since I didn't have any new incidents of random tabs, but I kept Anti-Malware 2.2.1 running anyway and perform another scan. Even though the new scan came back negative (0 threats), when I was browsing through a popular news site in my country (www.in.gr) I kept getting the Malicious website blocked from Anti-Malware... (note that when I closed the tab of www.in.gr while keeping the firefox open these messages stopped).
The above made me download and run the Roguekiller Anti-Malware, and even though I got only a couple of reg key warnings, it did produce a [Hidden.ADS][[[ADS]]] C:\Windows\SysWOW64:Win32App_1 message, noting that this should be removed immediately. I'm not sure if this is false positive or it is something related to the previous behavior of my browser.
Any help is greatly appreciated.
PS: Note that I'm using Win10 and I also use Norton as my default antivirus (which didn't help at all in this case)
Edited by tgeor, 31 March 2016 - 09:40 AM.