Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Malware is controlling my Google

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Malware is controlling my Google

Unread postby the10dude » January 1st, 2015, 8:26 pm

(FRST.txt and Addition.txt are included as attachments)
(Also, I live in Canada, which is why there are .ca)
I am using Chrome version 39.0.2171.95 (Official Build) m, on Windows 8.1. I am having some problems. Whenever I try to search anything in the omnibox, I get the following page:
Your connection is not private
Attackers might be trying to steal your information from www.google.ca (for example, passwords, messages, or credit cards).
Reloa www.google.ca normally uses encryption to protect your information. When Chrome tried to connect to www.google.ca this time, the website sent back unusual and incorrect credentials. Either an attacker is trying to pretend to be www.google.ca, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Chrome stopped the connection before any data was exchanged.
You cannot visit www.google.ca right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.
I get similar warnings if I try to do a search from the omnibox in Internet Explorer and Firefox. However, typing addresses works, and I can visit any website. Yes, my system clock is synchronized. When I visit www.google.com, it takes me to the page, but the URL in the omnibox always says: http://www.google.ca/?gfe_rd=cr&ei=Nmqj ... 8Qf294HYDw. Same thing happens when I try bing.com
If I try to search something from google.com, it redirects me to something called "gooqte.com". For example, if I search the term "chrome", my URL box says: http://www.gooqte.com/search?q=chrome. If I try to do a google images search, it's for some reason google.com.au.
Yes, I have considered that it might be malware or a virus. I have run multiple malware and virus scans with various different software, with none of them yielding any results. I've tried rebooting multiple times, reinstalling Chrome, but nothing works.
What is this and how can I fix it? It is really annoying.
Checked the certificate info on the Privacy Error page, it says the subject is www.courseadoptions.com. Also, is there any way to solve this without wiping my hard drive? I really don't want to do that...
I've also recorded a video showcasing the problem, public Google Drive link here: https://drive.google.com/file/d/0B6EOui ... sp=sharing
You do not have the required permissions to view the files attached to this post.
Active Member
Posts: 5
Joined: January 1st, 2015, 2:00 pm
Register to Remove

Re: Malware is controlling my Google

Unread postby Wingman » January 2nd, 2015, 12:55 pm

Posting Logs as Attachments

May I draw your attention to the topic: ALL USERS OF THIS FORUM MUST READ THIS FIRST, which you should have read before posting for help. Please take the time to review this information, to avoid having your topic closed again.

The instructions for running FRST found HERE, state how we need you to post the logs, so we can help you.

The section here explains why you should not post attachments unless the helper assisting you requests that you do so.

If you still require assistance, please start a new topic and copy and paste your FRST logs (FRST.txt and Addition.txt) and wait for a new helper. Thank you for your understanding.

This topic is now closed.
User avatar
Posts: 14347
Joined: July 1st, 2008, 1:34 pm
Location: East Coast, USA

  • Similar Topics
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!

Who is online

Users browsing this forum: No registered users and 97 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware