chromesearch.today

Viruses and worms
1

After opening a suspicious file chrome made chromesearch.today my deafault search engine. It wont let me change it.
I tried:
-reinstalling chrome
-multiple anti malware/virus tools
-deleting everything I didnt recognize
-searching taskmanager for suspicious tasks and deleting them

Does someone have the same problem? I found many recent post about this, but all of them want me to buy an antivirus which gets detected by avast

2

have you tried Malwarebytes AdwCleaner (it is FREE) >> https://www.malwarebytes.com/adwcleaner/

if you still have problems, follow instructions here and you will get help
Instructions >> https://forum.avast.com/index.php?topic=194892.0

3

all of this didnt help, but i found a comment on youtube, which told me the way
https://www.youtube.com/watch?v=VUf_RL2b0yw&lc=z12zhnypioyouxfjm04chvlw3pykcd1awqk0k (the comment, not the video)
"For any one wondering, this is how you rid of it.

  1. open cmd as administrator.
  2. Make sure it says C:\Windows\system32.
  3. type the following lines exactly.
  4. RD /S /Q “%WinDir%\System32\GroupPolicyUsers­” hit enter
  5. RD /S /Q “%WinDir%\System32\GroupPolicy” hit enter
    6 gpupdate /force hit enter Will update for a minute…
  6. Open chrome in administrator mode, on startup tab click set pages, get rid of safesearch, Search tab make chrome default and delete safesearch.
  7. Done. Curse out safesearch for being assholes."
4

Please:

4. RD /S /Q “%WinDir%\System32\GroupPolicyUsers­”
I got the following response: The system can not find the file specified.

5. RD /S /Q “%WinDir%\System32\GroupPolicy”
cmd returns to: C:\Windows\system32> without any additional message

6 gupdate /force
gpupdate / force is not recognized as an internal or external command, program, or executable batch file.

Can You help me?
Thank You so much.

5

Problem solved.
Many thanks “jorgecornelius”, you recipe worked perfectly.
You should correct point 6. Where it says: gupdate, it should say: gpupdate.
Thank you very much.

6

Same issue - Avast is not detecting the malware neither is Malwarebytes or Adwcleaner

7

If you want help, start your own topic and attach the requested logs from the guide I linked to above
FRST diagnostic logs are the important ones

8

Guys,

If reinstalling your browser doesn’t help you, you should check the following

  1. Your HOSTS file - C:\Windows\System32\drivers\etc\hosts
  2. Browser shortcuts - you can find instruction here - malware often adds extra code to browser shortcuts
  3. Taskbar - any suspicious processes there?
  4. Browser hijacker can hide itself inside Windows Registry