Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

After Win 10 re-install I alwaysget Goofbid result when searching.


  • Please log in to reply
40 replies to this topic

#1 zzzz

zzzz

  • Members
  • 656 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:04:47 AM

Posted 11 November 2016 - 05:52 AM

In Google settings I enter Google as the default search engine but doing a search in the address box it always gets to the Goofbid misspelling page. How could this happen?

 

Could this be anything to do with the settings I made in a new Panda AV Free install?

 

How to get back to the normal Google search engine? Thanks for help.



BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:08:47 PM

Posted 11 November 2016 - 10:11 AM

Delete all of the optional search engines, delete all of the search engines listed, re-enter Google, be sure to check your spelling.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 britechguy

britechguy

    Been there, done that, got the T-shirt


  • Moderator
  • 9,005 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Staunton, VA
  • Local time:11:47 PM

Posted 11 November 2016 - 10:54 AM

This screams "malware infection" to me.  I'd post over in the, "Am I infected?," forum.   Hijacking appears to be occurring.


Brian  AKA  Bri the Tech Guy (website in my user profile) - Windows 10 Home, 64-Bit, Version 1803, Build 17134 

     . . . the presumption of innocence, while essential in the legal realm, does not mean the elimination of common sense outside it.  The willing suspension of disbelief has its limits, or should.

    ~ Ruth Marcus,  November 10, 2017, in Washington Post article, Bannon is right: It’s no coincidence The Post broke the Moore story


 

 

 

              

 


#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:08:47 PM

Posted 11 November 2016 - 11:15 AM

Do you have Goofbid: Auction Sniper & eBay Bidding Tools installed on this computer?


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 zzzz

zzzz
  • Topic Starter

  • Members
  • 656 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:04:47 AM

Posted 11 November 2016 - 11:34 AM

Thanks for your responses.

 

This glitch has come up right after I had this laptop needing a re-install of Win 10 (I should have mentioned that!) so a number of apps deleted. 

 

I don't have that Goofbid nor ever had on this laptop. Unless the re-installer helper put it on but it is not listed in All app.

 

The malware tip I have seen and went thru the Chrome Cleanup tool which found nothing. This is twice I have switched it on since the re-install. No sign of hacking on 3 other computers in the house.

 

Cannot delete the optional search engines as in the list there is no option to delete  - clicking on one just highlights it, nothing else except for the Done button. I see on the extended list of 'Other search engines' the list just contains website urls.

 

Initially I could put in Google as the default engine but then a search in the address bar got me to the Goofbid page. Going back to settings the default engine was changed to Goofbid. The down arrow next to Manage Search engines in Settings does not work now.


Edited by zzzz, 11 November 2016 - 11:35 AM.


#6 zzzz

zzzz
  • Topic Starter

  • Members
  • 656 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:04:47 AM

Posted 11 November 2016 - 11:40 AM

' clicking on one just highlights it, nothing else' - not quite true. Right clicking on a item just gets -

 

Select all; Spell check; Writing Direction; Inspect.   Other ones such as Copy, Undo etc. are greyed out. There is no Delete.



#7 britechguy

britechguy

    Been there, done that, got the T-shirt


  • Moderator
  • 9,005 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Staunton, VA
  • Local time:11:47 PM

Posted 11 November 2016 - 11:48 AM

Again, I suggest you pursue this on the "Am I infected?" forum.  This is not a normal behavior in any way, shape, or form and has all the hallmarks of hijacking.


Brian  AKA  Bri the Tech Guy (website in my user profile) - Windows 10 Home, 64-Bit, Version 1803, Build 17134 

     . . . the presumption of innocence, while essential in the legal realm, does not mean the elimination of common sense outside it.  The willing suspension of disbelief has its limits, or should.

    ~ Ruth Marcus,  November 10, 2017, in Washington Post article, Bannon is right: It’s no coincidence The Post broke the Moore story


 

 

 

              

 


#8 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:08:47 PM

Posted 11 November 2016 - 11:49 AM

When you open the search engines place the pointer at the end of one of the search engines, you should see a X appear at the right of the engine.  Click on this to delete it.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#9 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:08:47 PM

Posted 11 November 2016 - 11:53 AM

I have requested that this topic be moved to the Am I Infected.  The security tools used there can not be used in the Windows forums.
 
Please run TDSSKiller.
 
Please download TDSSKiller from here and save it to your Desktop.
 
The log for the TDSSKiller can be very long.  If you go to the bottom of the log to where you find Scan finished you will see the results of the scan.  If it shows Detected object count: 0 and Actual detected object count: 0, this means that nothing malicious was found and you will not need to post the log.
 
1.  Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
 
tdss1_zps90132559.png
 
2.  Check Loaded Modules, Verify Driver Digital Signature, and Detect TDLFS file system.
 
If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now.
 
tdsskillermultiple_zps472c18eb.png
 
3.  Click Start Scan and allow the scan process to run.
 
tdss4_zps6792a13c.png
 
4.  If threats are detected select Cure (if available) for all of them unless otherwise instructed.
 
***Do NOT select Delete!
 
Click on Continue.
 
tdss5_zps98fc5887.png
 
5.  Click on Reboot computer.
 
Please copy the TDSSKiller.[Version]_[Date]_[Time]_log.txt file found in your root directory (typically c:\) and paste it into your next reply.
 
Note:  The log may be very long.  You may need to break it into parts to post the whole log.
 
Post this in your topic.
 
 

Please run Malwarebytes AntiMalware
 
Please download Malwarebytes Anti-Malware
 
1)  Double-click on mbam-setup.exe, then click on Run to install the application, follow the prompts through the installation.
 
2)  Malwarebytes will automatically open.  You will see an image like the one below, click on Update Now.  
 
mbam1_zps98e7fba9.png
 
3)  Click on Settings, you will see a image like the one below.
 
malware%20settings_zpsixkea5sd.png
 
When Settings opens click on Detection and Protection, then under Non-Malware Protection, click on the down arrow for PUP (Potentially Unwanted Programs) detections and select Treat detections as malware.  Under Detection Options place a check in the box for Scan for rootkits
 
4)  Click on Scan (next to Settings), then click on Scan Now.  The scan will automatically run now.
 
5)  When the scan is complete the results will be displayed.  Click on Delete All.
 
malwarenew_zps34b58fdc.png
 
6)  Please post the Malwarebytes log.
 
To find your Malwarebytes log,download mbam-check.exe from here and save it to your desktop.
 
To open the log double click on mbam-check.exe on your desktop.  Copy and paste the log in your topic.
 
 

Please run AdwCleaner
 
Please download AdwCleaner and install it.
 
When AdwCleaner opens you will see an image like the one below.
 
adwcleaner11_zps48314883.png
 
Click on Scan to start the scan.
 
Once the search is complete a list of the pending items will be displayed.  If you see any which you do not want removed, remove the check mark next to it.
 
If there are no malicious programs are found you will receive the following message.
 
adwcleaner%20111_zpsiduqrrrp.png
 
Click on Clean to remove the selected items.  If you have any questions about any items in the list please copy and paste the list in your topic so we can review it.  
 
You will receive a message telling you that all programs will be closed so that the infections can be removed.  Click on OK.  The computer will be restarted to complete the cleaning process.
 
When the cleaning process is complete a log of what was removed will be presented.  Please copy and the paste this log in your topic.


Please run the ESET OnlineScan

This scan takes quite a long time to run, so be prepared to allow this to run
till it is completed.

***Please note. If you run this scan using Internet Explorer you won't need
to download the Eset Smartinstaller.***

ESET Online Scanner

  • Click here to download the installer for ESET Online Scanner and save it to your Desktop.
  • Disable all your antivirus and antimalware software - see how to do that
    here
    .
  • Right click on esetsmartinstaller_enu.exe and select Run as Administrator.
  • Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.
  • Select Enable detection of potentially unwanted applications.
  • Click Advanced Settings, then place a checkmark in the following:
    • Remove found threats
    • Scan archives
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • Click Start to begin scanning.
  • ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.
  • When the scan is done, click List threats ([color=redonly available if ESET Online Scanner found something
  • ).
  • Click Export, then save the file to your desktop.
  • Click Back, then Finish to exit ESET Online Scanner.

Edited by dc3, 11 November 2016 - 11:54 AM.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#10 britechguy

britechguy

    Been there, done that, got the T-shirt


  • Moderator
  • 9,005 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Staunton, VA
  • Local time:11:47 PM

Posted 11 November 2016 - 11:55 AM

Thank you dc3.  I considered reporting the thread and asking for it to be moved, as I did not want to post the kind of content you actually just posted in this forum (not that it's incorrect, but just doesn't fit under Windows 10 support).

 

I will be shocked if this doesn't turn out to be malware of some ilk and since it's doing this after a reset a particularly recalcitrant ilk.


Brian  AKA  Bri the Tech Guy (website in my user profile) - Windows 10 Home, 64-Bit, Version 1803, Build 17134 

     . . . the presumption of innocence, while essential in the legal realm, does not mean the elimination of common sense outside it.  The willing suspension of disbelief has its limits, or should.

    ~ Ruth Marcus,  November 10, 2017, in Washington Post article, Bannon is right: It’s no coincidence The Post broke the Moore story


 

 

 

              

 


#11 zzzz

zzzz
  • Topic Starter

  • Members
  • 656 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:04:47 AM

Posted 11 November 2016 - 11:59 AM

Looking more carefully I notice that when putting in a search item in omnibox under it I see -

Item - Goofbay{not bid} eBay Misspelling Search Search  which then gets me to the Goofbid (not bay) site - well it used to - now I get 'This site can't be reached'!

 

Tried this many times.  I'll try a restart to see what happens.



#12 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:08:47 PM

Posted 11 November 2016 - 12:08 PM

This is not listed as a search engine, at least in the same vane as Google or Yahoo.  It is a eBay tool to find content.

 

Please open the Control Panel and select Programs and features, scroll through it to see if Goofbay is listed.  

 

Even if it is listed it shouldn't be seen as a search engine in Google Settings.

 

Edit:  I see that this topic has now been moved to the Am I Infected forum where it belongs.  If after effecting the removal of any malware you still have any problems related to this topic you can ask a Moderator to reopen this topic in it's original forum.


Edited by dc3, 11 November 2016 - 12:10 PM.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#13 zzzz

zzzz
  • Topic Starter

  • Members
  • 656 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:04:47 AM

Posted 11 November 2016 - 12:09 PM

Yes that X at the end of the engine list. Of course I tries that at first but it did nothing - now it does! Now I have just google.co.uk there.

 

Puttng in a search item I get suggestions underneath OK but that is perhaps 'cos I have that in my Book marks. I put in King Kong but that didn't do anything at all.

 

Will go to infections forum now I guess.



#14 zzzz

zzzz
  • Topic Starter

  • Members
  • 656 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:04:47 AM

Posted 11 November 2016 - 12:13 PM

dc3 - yes it's an eBay tool. Unfortunately Programs and features doesn't reveal goofbid.

 

Could it have anything to do with Panda AV free which I have installed? It seemed to have started after I installed it.



#15 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:08:47 PM

Posted 11 November 2016 - 12:18 PM

No, this would not have any relationship with Panda antivirus.  Please run the scans I posted in the order they are requested.  Post the logs in your topic, do not post these logs at a host website.  All of these logs can be posted in the Am I Infected forum.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users