Go Back  PPRuNe Forums > Misc. Forums > Computer/Internet Issues & Troubleshooting
Reload this Page >

What is searchnu.com/430 - taken over Chrome browser?

Wikiposts
Search
Computer/Internet Issues & Troubleshooting Anyone with questions about the terribly complex world of computers or the internet should try here. NOT FOR REPORTING ISSUES WITH PPRuNe FORUMS! Please use the subforum "PPRuNe Problems or Queries."

What is searchnu.com/430 - taken over Chrome browser?

Thread Tools
 
Search this Thread
 
Old 14th Apr 2012, 10:48
  #1 (permalink)  

Rainbow Chaser
Thread Starter
 
Join Date: Jul 2001
Location: At home, mostly!
Posts: 608
Likes: 0
Received 0 Likes on 0 Posts
Wink What is searchnu.com/430 - taken over Chrome browser?

Hi all

I hope you can help me - I have been googling this morning for advice on how to stop something called searchnu.com/430 appearing in my Google Chrome browser window (and replacing it!) but thus far there appears to be only advice from companies wanting you to follow what they say (and probably end up paying to do so!).

It would appear to be some kind of hijacker and the range of advice I have seen so far involves "just" modifying registry entries or even completely reinstalling an OS. As my laptop came with its OS pre-installed I can't do that and, ideally, would hope there is a better way of removing searchnu.

Can anyone help please? I am reasonably 'puter literate as a user so am comfortable (if someone gives me clear instructions) on modifying registry etc.
brockenspectre is offline  
Old 14th Apr 2012, 11:03
  #2 (permalink)  
 
Join Date: Jan 2012
Location: .
Posts: 2,173
Likes: 0
Received 0 Likes on 0 Posts
You've been hijacked

Apart from manually setting the default home page and search settings, download and run these tools one by one

Hitman Pro Downloads - SurfRight
Smitfraudfix How to use SmitFraudFix - Geeks to Go Forums
Combofix A guide and tutorial on using ComboFix
Malwarebyte Antimalware Malwarebytes Anti-Malware - Download.com

Then install BroswerProtect Browser Hijack Protection for free - BrowserProtect.org

These are not alternatives - you need to run them all, consecutively
Smitfraudfix and Combofix should be run in safe mode, the others are OK in normal mode. Essentially, whatever they find, delete

Which version of windows are you running, and what security software?
Milo Minderbinder is offline  
Old 14th Apr 2012, 12:34
  #3 (permalink)  

Rainbow Chaser
Thread Starter
 
Join Date: Jul 2001
Location: At home, mostly!
Posts: 608
Likes: 0
Received 0 Likes on 0 Posts
My OS is Win 7 and I was relying on Windows Defender and AVG free version.

I will now go and run your recommendations (I just ran Malwarebytes by itself and it found nothing)!!

1400bst: Just ran Hitman OK and it found "stuff"... the hijacker is still there.

Smitfraudfix says it isn't for WIN7?

now to try the others..

1436bst: OK ran Combofix and nearly had a heart attack as it didn't give me the option to save it at all.. so I had to interrupt it immediately after clicking on the d/l file icon... restarted in Safe Mode and manually found it in the d/l folder and ran it from there and... it found the "meanie".

Then went to Browser Protect and that is now doing its job.

THANK YOU SO MUCH!!!

I know the Smitfraud didn't run but the problem is gone....

You are a superstar MiloMinderBender!! I am definitely going to go and share the url of this thread on FB... ok:


Last edited by brockenspectre; 14th Apr 2012 at 13:40.
brockenspectre is offline  
Old 14th Apr 2012, 14:28
  #4 (permalink)  
 
Join Date: Jan 2012
Location: .
Posts: 2,173
Likes: 0
Received 0 Likes on 0 Posts
Don't worry about the Smitfraudfix - that won't run on 64-bit, but I included it just in case. It does some useful work on older versions of windows

I suggest you remove the free AVG and instead install the free version of Avast
Update it, and then scan the whole machine
avast! | Download Free Antivirus Software or Internet Security

Note that you have to register the Avast program every 11 months, but you don't need to use a real e-mail address. Anything will do ([email protected] works)
Milo Minderbinder is offline  

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.