Google, Dammit!

"ttyymmnn" (ttyymmnn) 01/29/2020 at 20:24 • Filed to: None

0

41

On my son’s PC, no matter how he searches, it takes him to Yahoo. If he goes to Google.com, types in a search, it takes him to Yahoo. All of the default search settings are set to Google. I imagine that he downloaded something at some point that put a thingamabob on his computer that is forcing him to Yahoo. Where would I look for such a thingamabob?

My X-type is too a real Jaguar > ttyymmnn 01/29/2020 at 20:32

3

Check his DNS servers, also disable all add ons in chrome or firefox. If that doesn’t do it boot in safe mode and run spy bot search and destroy, malware bytes  cccleaner and hijack this in that order testing after each one. 

My X-type is too a real Jaguar > My X-type is too a real Jaguar 01/29/2020 at 20:33

0

Use googles dns servers

https://developers.google.com/speed/public-dns/docs/using

Aremmes > ttyymmnn 01/29/2020 at 20:34

4

Nuke it from orbit, it’s the only way to be sure.

Or burn a CD- or USB-based antivirus/antimalware image and do an offline scan.

SBA Thanks You For All The Fish > ttyymmnn 01/29/2020 at 20:47

0

worth downloading a clean (aka Opera, DuckDuckGo, etc) browser to see if the redirect is in the Browser (currently Chrome?) or in the IP networking stack running underneath on the PC.

If it’s (whatever “it” is) grabbed the low level DNS processing, then, yeah, a re-install of the OS might be in order.

facw > ttyymmnn 01/29/2020 at 20:53

1

Yeah, sounds like some malware. I’d remove all browser extensions, and run malwarebytes and see where that gets you.

Highlander-Datsuns are Forever > ttyymmnn 01/29/2020 at 20:53

0

That’s some weird shit. Must have been one of those “do you want to make yahoo your default search engine?” Things so there is probably some  add on software in the web browser that is tripping it up. Can you screen shot your address bar and settings menus on the right side of the menus bar?

ClassicDatsunDebate > ttyymmnn 01/29/2020 at 20:55

0

It’s Chrome’s ‘safe search’.  The default on Chrome is that if you type something in the address bar, it will use Yahoo.  Every time I update Chrome, I need to go to settings and change the default search engine from ‘safe search’ to Google.

Future Heap Owner > ttyymmnn 01/29/2020 at 20:57

4

Wait, you’re saying that he goes to google.com, and it loads the google page, and then when he hits enter/clicks the button it sends him to Yahoo?

If so, that is 100% a sign that  there’s some malware on his machine.

facw > My X-type is too a real Jaguar 01/29/2020 at 20:58

1

ttyymmnn > ClassicDatsunDebate 01/29/2020 at 20:58

0

He’s using Firefox.

ttyymmnn > SBA Thanks You For All The Fish 01/29/2020 at 20:59

0

He’s using Firefox.

ITA97, now with more Jag @ opposite-lock.com > ttyymmnn 01/29/2020 at 20:59

0

That’s some legit malware. It may or may not be a spoof of Yahoo that it is defaulting to. Follow directions from other Oppos on Malware software. You may or may not need to disable network access for the malware software magic to happen once it’s installed. On the worst case, be prepared to start fresh. There’s a security lesson for him here.

ttyymmnn > Future Heap Owner 01/29/2020 at 20:59

0

Yes.

OPPOsaurus WRX > ttyymmnn 01/29/2020 at 21:04

2

WHAT HAPPENS IF YOU BOOT IN SAFE MODE,

YELLING CUZ CAD

ClassicDatsunDebate > ttyymmnn 01/29/2020 at 21:04

0

Huh.  Maybe it’s the same issue?  I don’t use FF.

SBA Thanks You For All The Fish > ttyymmnn 01/29/2020 at 21:10

0

And, under Firefox_Settings—> Preferences—>Search he has “Google” selected?

(It might be worth changing to Bing or DuckDuckGo there just to see if it makes any difference.)

ttyymmnn > OPPOsaurus WRX 01/29/2020 at 21:11

0

I DON’T KNOW! I KNOW NEXT TO NOTHING ABOUT PCs. I AM CURRENTLY DOWNLOADING MALWAREBYTES! THIS ONLY HAPPENS ON FIREFOX, NOT ON CHROME!

McMike > ttyymmnn 01/29/2020 at 21:11

0

It’s in the settings of FF.

Click the magnifying glass in the upper right search window, and select “change search settings”

Are there a lot of options in “One-Click Search Engines?”

You can delete ones you don’t want, arrange, or add a check to the ones you want to use.   I have nothing in mine but google.

ttyymmnn > McMike 01/29/2020 at 21:12

2

I tried that. I did find a weird extension in his FF called lookbox which I deleted. Downloading and running Malwarebytes right now.

Chariotoflove > ttyymmnn 01/29/2020 at 21:13

3

Future Heap Owner is right. You have ad malware. Download and install Malewarebytes and run it. It will identify and let you delete the files. 

ttyymmnn > Chariotoflove 01/29/2020 at 21:16

1

Running right now. Thx.

SilentButNotReallyDeadly...killed by G/O Media > ttyymmnn 01/29/2020 at 21:18

5

This must be the work of Yahoo Serious.

OPPOsaurus WRX > ttyymmnn 01/29/2020 at 21:18

2

NUKE FIREFOX FROM ORBIT...OR UNINSTALL? DONT LISTIN TO ME I ALSO KNOW NEXT NOTHING ABOUT PCS

ttyymmnn > SilentButNotReallyDeadly...killed by G/O Media 01/29/2020 at 21:20

4

ttyymmnn > OPPOsaurus WRX 01/29/2020 at 21:22

1

OPPOsaurus WRX > ttyymmnn 01/29/2020 at 21:36

3

Jim Spanfeller > ttyymmnn 01/29/2020 at 21:37

2

Throw a half-full Styrofoam coffee cup at it and begin screaming at it in G erman.  That tends to solve most of my problems...

PyramidHat > ttyymmnn 01/29/2020 at 21:40

3

Could be worse.  Could be Bing 

ttyymmnn > PyramidHat 01/29/2020 at 21:48

0

On a whim, I tried Bing once. For about 15 seconds. 

LastFirstMI is my name > ttyymmnn 01/29/2020 at 21:52

6

My computer was running really slow. Then I accidentally dumped a cup of a Ramen noodles on the keyboard and fried it. Then I bought a new one which works fine.

You could try that?

BaconSandwich is tasty. > PyramidHat 01/29/2020 at 21:55

0

I actually use Bing, and have been for the past year and a bit. Gotta earn those sweet Microsoft Rewards somehow.  So far I've earned something like $46.

ttyymmnn > LastFirstMI is my name 01/29/2020 at 21:58

0

My kids eat the ramen raw out of the package. 

SilentButNotReallyDeadly...killed by G/O Media > ttyymmnn 01/29/2020 at 21:59

1

LastFirstMI is my name > ttyymmnn 01/29/2020 at 22:11

6

I guess I should specify that it was wet Ramen noodles. Probably would have survived the dry ones. unless the computer got high blood pressure and stroked out from all the sodium.

ttyymmnn > LastFirstMI is my name 01/29/2020 at 22:13

4

I mentioned it more as a way of spotlighting my son’s strange eating habits. 

Thomas Donohue > ttyymmnn 01/29/2020 at 22:56

1

Yahoo is the least of your problems.

Thomas Donohue > ttyymmnn 01/29/2020 at 22:57

1

Bing maps is good for alternative street view images, as well as birdseye view.

Thought that’s not really Bing. Bing sucks.

-Chandler

Thomas Donohue > OPPOsaurus WRX 01/29/2020 at 22:58

0

Damn, Artie Lange continues to go downhill......

ttyymmnn > Thomas Donohue 01/29/2020 at 23:37

2

Turns out it was some funky extension. I deleted it and it’s fine now. Malware turned up nothing. 

Thomas Donohue > ttyymmnn 01/29/2020 at 23:38

3

My kids eat the ramen raw out of the package.

Like I said, Yahoo is the least of your problems!

sony1492 > ttyymmnn 01/30/2020 at 01:10

0

In 7th grade a few kool kids were snorting top ramen seasoning......they are probably in jail now