This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Malware is controlling my Google

2 min read

This thread's last reply is from January 1, 2015, 7:50 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

I am using Chrome version 39.0.2171.95 (Official Build) m, on Windows 8.1. I am having some problems. Whenever I try to search anything in the omnibox, I get the following page:
Your connection is not private
Attackers might be trying to steal your information from http://www.google.ca (for example, passwords, messages, or credit cards).
Reloa http://www.google.ca normally uses encryption to protect your information. When Chrome tried to connect to http://www.google.ca this time, the website sent back unusual and incorrect credentials. Either an attacker is trying to pretend to be http://www.google.ca, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Chrome stopped the connection before any data was exchanged.
You cannot visit http://www.google.ca right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.
NET::ERR_CERT_COMMON_NAME_INVALID
I get similar warnings if I try to do a search from the omnibox in Internet Explorer and Firefox. However, typing addresses works, and I can visit any website. Yes, my system clock is synchronized. When I visit http://www.google.com, it takes me to the page, but the URL in the omnibox always says: http://www.google.ca/?gfe_rd=cr&ei=Nmqj ... 8Qf294HYDw. Same thing happens when I try bing.com
If I try to search something from google.com, it redirects me to something called "gooqte.com". For example, if I search the term "chrome", my URL box says: http://www.gooqte.com/search?q=chrome.
Yes, I have considered that it might be malware or a virus. I have run multiple malware and virus scans with various different software, with none of them yielding any results. I've tried rebooting multiple times, reinstalling Chrome, but nothing works.
What is this and how can I fix it? It is really annoying.
Checked the certificate info on the Privacy Error page, it says the subject is http://www.courseadoptions.com. Also, is there any way to solve this without wiping my hard drive? I really don't want to do that...

Here, I've recorded a video showcasing the problem
https://drive.google.com/file/d/0B6EOuiF90tWtWm9QSDE4WXl2YWc/view?usp=sharing
If your operating system is Windows 8.1, follow the instructions for using FRST instead of DDS.