Did Anybody Experience A Google Browser Hijacker Just Recently?

[lostinisaan]

Hello and Sawasdee Khrap,

I had a weird problem and thought it was a virus, finally ran SpyHunter and deleted a few things. My son just told me that this seems to be a pretty common browser hijacker, mainly occupying Google.

Did anybody just recently experience something similar? Thanks for any useful input.

[RichCor]

Not sure what "a pretty common browser hijacker, mainly occupying Google" is supposed to mean.

Also not sure what 'sites' you're visiting, but browser exploits usually come in via JAVA.

What version of the Google Chrome Browser are you running. The latest is 42.x

[lostinisaan]

Not sure what "a pretty common browser hijacker, mainly occupying Google" is supposed to mean.

Also not sure what 'sites' you're visiting, but browser exploits usually come in via JAVA.

What version of the Google Chrome Browser are you running. The latest is 42.x

I'm sorry. Shouldn't drink and type. I don't know if other browsers are/were also affected, because my son's also using Google and many friends of him were talking about the same problem.

The problems it causes are that another website will pop up each time you're clicking on something. Then you have to close this one and click on the wanted website again.

Pretty much disgusting, when you're trying to do many things at the same time.

I meant that this virus, or whatever it is, seems to be attracted by Google users. I'm using Version 37.0.2062.124 dev-m .

Sorry, for the misleading words. I beg your pardon, Sir.

Edited April 17, 2015 by lostinisaan

[RichCor]

While it could be a JavaScript exploit, it probably is more like a JAVA app exploit.

Very common for a rouge router or website to INJECT script into non-https delivered scripts that infect the browser (and browser cache) for as long as it's on.

That's why I wondered about what sites you're visiting. Could be the site, could be a router between you and the site.

Suggest you try to use HTTPS connections as much as possible.

Also, you should update to CHROME 42. ≡ (SETTING): About Google Chrome

Version 42.0.2311.90 m

Google Chrome is up to date.

[Anthony5]

Happens all the time with pirated Spyhunters, especially because even the legal Spyhunter is a trojan.

[lostinisaan]

While it could be a JavaScript exploit, it probably is more like a JAVA app exploit.

Very common for a rouge router or website to INJECT script into non-https delivered scripts that infect the browser (and browser cache) for as long as it's on.

That's why I wondered about what sites you're visiting. Could be the site, could be a router between you and the site.

Suggest you try to use HTTPS connections as much as possible.

Also, you should update to CHROME 42. ≡ (SETTING): About Google Chrome

Version 42.0.2311.90 m

Google Chrome is up to date.

Thanks mate. Always appreciated.

[VBF]

While it could be a JavaScript exploit, it probably is more like a JAVA app exploit.

Very common for a rouge router or website to INJECT script into non-https delivered scripts that infect the browser (and browser cache) for as long as it's on.

That's why I wondered about what sites you're visiting. Could be the site, could be a router between you and the site.

Suggest you try to use HTTPS connections as much as possible.

Also, you should update to CHROME 42. ≡ (SETTING): About Google Chrome

Version 42.0.2311.90 m

Google Chrome is up to date.

Agree with that especially as Chrome 42 blocks Java plugins by default It also worthwhile blocking the abomination known as "Flash" which no-one should be using in 2015 but many sites do - even the BBC!

Under Chrome Advanced Settings set as per attached screenshot (Capture 1) then click on Manage Individual Plugins and observe it's as per attached screenshot (Capture 2)

This way if Flash is required, you HAVE to authorise it each time - if you're not sure of the website........DON'T

Edited April 17, 2015 by VBF

[bartender100]

I have had a Crome redirect virus for ages, tried everything to shift it, its not too intrusive will only redirect once, click again its ok, but bloody annoying. It must be in something I downloaded, but can't find it.

[RichCor]

Redirects to where?

That could give a clue. No other browser affected?

[jacko45k]

I was getting some redirects a while back that drove me nuts until I reset my router, then changed the Admin password from the default..

[spec4]

I battled this problem for days and tried many tools but SpyHunter seems to have fixed it.

[Fullstop]

2015 and basic computer/internet illiteracy still exists (I mean BASIC). Even the ability to use a search engine to gain instantaneous results seems a bit of a struggle for many. ....maybe the next generation...

[mikiea]

Not sure what "a pretty common browser hijacker, mainly occupying Google" is supposed to mean.

Also not sure what 'sites' you're visiting, but browser exploits usually come in via JAVA.

What version of the Google Chrome Browser are you running. The latest is 42.x

if you read tv you would know it is the new version of googles browers, not all will get it at the same time, its main feature is to "streer" you to sites that pay google a few more coins. samd as before, now on steroids. :-)

[quandow]

This happens to me frequently. I pirate a lot of movies, primarily using Rarbg.com and Torrentz.eu

I strongly suspect they are the culprits, and I deserve what I get.

The fix I've found that works is a combination of Spyhunter, Malwarebytes Anti-Malware, then setting Firefox back to its default setting. This is MOST annoying because I lose some automatic logins (TV being one of them), but again, this is the price I pay.

[bartender100]

Redirects to where?

That could give a clue. No other browser affected?

It redirects to different advertising sites,I've been taken to Bet365 a few times I am not a novice on PC's, and fought many of these over the years, but this one is stubborn, it does not affect FF

[Suradit69]

Not sure what "a pretty common browser hijacker, mainly occupying Google" is supposed to mean.

Also not sure what 'sites' you're visiting, but browser exploits usually come in via JAVA.

What version of the Google Chrome Browser are you running. The latest is 42.x

I'm sorry. Shouldn't drink and type. I don't know if other browsers are/were also affected, because my son's also using Google and many friends of him were talking about the same problem.

The problems it causes are that another website will pop up each time you're clicking on something. Then you have to close this one and click on the wanted website again.

Pretty much disgusting, when you're trying to do many things at the same time.

I meant that this virus, or whatever it is, seems to be attracted by Google users. I'm using Version 37.0.2062.124 dev-m .

Sorry, for the misleading words. I beg your pardon, Sir.

" The problems it causes are that another website will pop up each time you're clicking on something. Then you have to close this one and click on the wanted website again."

Sometimes happens when you download a program or app and you don't notice a box ticked that says you agree to also download some browser "helper." Usually you can untick the freebie and proceed without bother.

Happened to me the first time I downloaded UTorrent and wasn't paying attention to what they were adding on. Sometimes it's something relatively innocuous, but annoying like a free trial of McAfee and other times it's something that hijacks your browser and is difficult to remove.

Edited April 18, 2015 by Suradit69

[ozyjon]

Be careful where you go and what you do,, (on the internet)

i have been working with computers and

the internet since 1988, there are a group

of us that all started together and we are still

friends now, am i a computer expert NO, why

because the internet is so fluid / dynamic and

evolving at such lightning speed that NO ONE

can say I KNOW IT ALL,, and if they do they

are lyres, P-R-O-T-E-C-T....Y-O-U-R-S-E-L-F

Today i spend more time on duckduckgo

(like google) researching any program that

tries to load on to my system, i don't click on

anything unless i'm sure it's not infected.

Here are some programs that might be

useful to members.... i use,,

Norton 360, i have a 5 key one for all my stuff

Epic Browser

ZenMate

All the pop up blockers i can get

Deluge - to download torrents

Magrent - to download magnets

Look them up and use them as an alternative to the

other stuff that tracks your every keystroke.

As i said before P-R-O-T-E-C-T....Y-O-U-R-S-E-L-F

[RichCor]

...something tells me a few of these people started out as AOL users

[HooHaa]

Not sure what "a pretty common browser hijacker, mainly occupying Google" is supposed to mean.

Also not sure what 'sites' you're visiting, but browser exploits usually come in via JAVA.

What version of the Google Chrome Browser are you running. The latest is 42.x

I'm sorry. Shouldn't drink and type. I don't know if other browsers are/were also affected, because my son's also using Google and many friends of him were talking about the same problem.

The problems it causes are that another website will pop up each time you're clicking on something. Then you have to close this one and click on the wanted website again.

Pretty much disgusting, when you're trying to do many things at the same time.

I meant that this virus, or whatever it is, seems to be attracted by Google users. I'm using Version 37.0.2062.124 dev-m .

Sorry, for the misleading words. I beg your pardon, Sir.

i would suspect your son and his friends are all downloading something from or visiting the same site or sites, hence the prevalence of the hijack amongst their group.

[MikeOwen]

Not sure what "a pretty common browser hijacker, mainly occupying Google" is supposed to mean.

Also not sure what 'sites' you're visiting, but browser exploits usually come in via JAVA.

What version of the Google Chrome Browser are you running. The latest is 42.x

I'm sorry. Shouldn't drink and type. I don't know if other browsers are/were also affected, because my son's also using Google and many friends of him were talking about the same problem.

The problems it causes are that another website will pop up each time you're clicking on something. Then you have to close this one and click on the wanted website again.

Pretty much disgusting, when you're trying to do many things at the same time.

I meant that this virus, or whatever it is, seems to be attracted by Google users. I'm using Version 37.0.2062.124 dev-m .

Sorry, for the misleading words. I beg your pardon, Sir.

Look in settings for the Chrome Browser and see if any weird EXTENSIONS are in use , if so DELETE them , I've had this happen many times !

[gandalf12]

I find IxQuick or Duckduckgo is better although IxQuick does use the Chrome platform

[Suradit69]

Not sure what "a pretty common browser hijacker, mainly occupying Google" is supposed to mean.

Also not sure what 'sites' you're visiting, but browser exploits usually come in via JAVA.

What version of the Google Chrome Browser are you running. The latest is 42.x

I'm sorry. Shouldn't drink and type. I don't know if other browsers are/were also affected, because my son's also using Google and many friends of him were talking about the same problem.

The problems it causes are that another website will pop up each time you're clicking on something. Then you have to close this one and click on the wanted website again.

Pretty much disgusting, when you're trying to do many things at the same time.

I meant that this virus, or whatever it is, seems to be attracted by Google users. I'm using Version 37.0.2062.124 dev-m .

Sorry, for the misleading words. I beg your pardon, Sir.

Look in settings for the Chrome Browser and see if any weird EXTENSIONS are in use , if so DELETE them , I've had this happen many times !

With the really sticky ones, that doesn't get rid of it. The worst one I had added a second opening page whenever I opened Chrome and became the default search even if I deleted the extension, deleted it as an opening page and set Google as the default search again. It planted something somewhere (excuse my non-techy computer language) and just kept re-inserting itself.

Had to do a search on Google to find a more complicated way of getting rid of it. Can't recall what I ended up doing, but finally succeeded.

[lostinisaan]

While it could be a JavaScript exploit, it probably is more like a JAVA app exploit.

Very common for a rouge router or website to INJECT script into non-https delivered scripts that infect the browser (and browser cache) for as long as it's on.

That's why I wondered about what sites you're visiting. Could be the site, could be a router between you and the site.

Suggest you try to use HTTPS connections as much as possible.

Also, you should update to CHROME 42. ≡ (SETTING): About Google Chrome

Version 42.0.2311.90 m

Google Chrome is up to date.

Agree with that especially as Chrome 42 blocks Java plugins by default It also worthwhile blocking the abomination known as "Flash" which no-one should be using in 2015 but many sites do - even the BBC!

Under Chrome Advanced Settings set as per attached screenshot (Capture 1) then click on Manage Individual Plugins and observe it's as per attached screenshot (Capture 2)

This way if Flash is required, you HAVE to authorise it each time - if you're not sure of the website........DON'T

Thanks a lot. Gotta add that SpyHunter also helped to delete some unwanted stuff.Cheers-

[lostinisaan]

Happens all the time with pirated Spyhunters, especially because even the legal Spyhunter is a trojan.

You seem to be a computer literate. How comes that Kaspesky, which I'm also running, doesn't see it as a Trojan?

And nor do any other AV programs. If you could back your statement up, I'd really appreciate it.

Took me many years to be where I am, but still wondering about some comments.

AVG free is the best. BAIDU free is the best and other rotten fish sauce. .

Edited April 18, 2015 by lostinisaan

[Anthony5]

Happens all the time with pirated Spyhunters, especially because even the legal Spyhunter is a trojan.

You seem to be a computer literate. How comes that Kaspesky, which I'm also running, doesn't see it as a Trojan?

And nor do any other AV programs. If you could back your statement up, I'd really appreciate it.

Took me many years to be where I am, but still wondering about some comments.

AVG free is the best. BAIDU free is the best and other rotten fish sauce. .

Wasn't that you who posted this ?

For a poster who sent me a private message regarding Spy Hunter. Some wannabe programs do see it a a virus. Switch all of them off, once you've got all running you do not need Kaspersky & Co anymore.

http://www.thaivisa.com/forum/topic/810677-my-opinion-regarding-best-possible-protection-without-condom/?p=9213741

[lostinisaan]

Happens all the time with pirated Spyhunters, especially because even the legal Spyhunter is a trojan.

You seem to be a computer literate. How comes that Kaspesky, which I'm also running, doesn't see it as a Trojan?

And nor do any other AV programs. If you could back your statement up, I'd really appreciate it.

Took me many years to be where I am, but still wondering about some comments.

AVG free is the best. BAIDU free is the best and other rotten fish sauce. .

Wasn't that you who posted this ?

For a poster who sent me a private message regarding Spy Hunter. Some wannabe programs do see it a a virus. Switch all of them off, once you've got all running you do not need Kaspersky & Co anymore.

http://www.thaivisa.com/forum/topic/810677-my-opinion-regarding-best-possible-protection-without-condom/?p=9213741

I apologize. No war, please.

Just trying to sort the never ending problems out. I've heard that cracks are usually seen as Trojan horses, but I'm aware that nobody should use them.

[RichCor]

I apologize. No war, please.

Just trying to sort the never ending problems out. I've heard that cracks are usually seen as Trojan horses, but I'm aware that nobody should use them.

The outright theft of someone else's Intellectual Property aside,

the reason they are flagged as Trojan is your 'great little find' directly patches other programs (assembly or registry entries), and as such are also ideal targets for other on the 'net to edit, add code and redistribute with adware, sniffers or botnet listeners waiting for instructions.

[connda]

Subscribe to https://www.us-cert.gov/ncas/current-activity US CERT/CC which will give you up to date information regarding exploits of various kinds and the steps to remediation the problem. You'll be informed as soon as updates are available for most vulnerable software you're running.

[lostinisaan]

Got my PC working well, but the notebook's still showing the "I'm dead Jim, message."

Could Torch be the problem, or any setting related to Torch? It's just too hot to even think logically now.

Thanks for any useful input.

[RichCor]

Got my PC working well, but the notebook's still showing the "I'm dead Jim, message."

Could Torch be the problem, or any setting related to Torch? It's just too hot to even think logically now.

Have you uninstalled Chrome Browser, run CC cleaner, made sure all Chrome folders have been deleted (Program Files and hidden App Data folders). Reboot and reinstall.

Probably an bad extension, bad Plug-in or even bad, very bad Adobe Flashplayer

How to start chrome without Extensions or Plug-ins

(the not so graceful diagnostic icon data edit)