This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Malware is controlling my Google

2 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from January 1, 2015, 7:50 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

the10dude
I am using Chrome version 39.0.2171.95 (Official Build) m, on Windows 8.1. I am having some problems. Whenever I try to search anything in the omnibox, I get the following page:
Your connection is not private
Attackers might be trying to steal your information from http://www.google.ca (for example, passwords, messages, or credit cards).
Reloa http://www.google.ca normally uses encryption to protect your information. When Chrome tried to connect to http://www.google.ca this time, the website sent back unusual and incorrect credentials. Either an attacker is trying to pretend to be http://www.google.ca, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Chrome stopped the connection before any data was exchanged.
You cannot visit http://www.google.ca right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.
NET::ERR_CERT_COMMON_NAME_INVALID
I get similar warnings if I try to do a search from the omnibox in Internet Explorer and Firefox. However, typing addresses works, and I can visit any website. Yes, my system clock is synchronized. When I visit http://www.google.com, it takes me to the page, but the URL in the omnibox always says: http://www.google.ca/?gfe_rd=cr&ei=Nmqj ... 8Qf294HYDw. Same thing happens when I try bing.com
If I try to search something from google.com, it redirects me to something called "gooqte.com". For example, if I search the term "chrome", my URL box says: http://www.gooqte.com/search?q=chrome.
Yes, I have considered that it might be malware or a virus. I have run multiple malware and virus scans with various different software, with none of them yielding any results. I've tried rebooting multiple times, reinstalling Chrome, but nothing works.
What is this and how can I fix it? It is really annoying.
Checked the certificate info on the Privacy Error page, it says the subject is http://www.courseadoptions.com. Also, is there any way to solve this without wiping my hard drive? I really don't want to do that...

Here, I've recorded a video showcasing the problem
https://drive.google.com/file/d/0B6EOuiF90tWtWm9QSDE4WXl2YWc/view?usp=sharing
NonSuch Administrator
If your operating system is Windows 8.1, follow the instructions for using FRST instead of DDS.

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.