What is searchnu.com/430 - taken over Chrome browser?

[brockenspectre]

Hi all

I hope you can help me - I have been googling this morning for advice on how to stop something called searchnu.com/430 appearing in my Google Chrome browser window (and replacing it!) but thus far there appears to be only advice from companies wanting you to follow what they say (and probably end up paying to do so!).

It would appear to be some kind of hijacker and the range of advice I have seen so far involves "just" modifying registry entries or even completely reinstalling an OS. As my laptop came with its OS pre-installed I can't do that and, ideally, would hope there is a better way of removing searchnu.

Can anyone help please? I am reasonably 'puter literate as a user so am comfortable (if someone gives me clear instructions) on modifying registry etc.

[Milo Minderbinder]

You've been hijacked

Apart from manually setting the default home page and search settings, download and run these tools one by one

Hitman Pro Downloads - SurfRight (http://www.surfright.nl/en/downloads)
Smitfraudfix How to use SmitFraudFix - Geeks to Go Forums (http://www.geekstogo.com/forum/topic/109268-how-to-use-smitfraudfix/)
Combofix A guide and tutorial on using ComboFix (http://www.bleepingcomputer.com/combofix/how-to-use-combofix)
Malwarebyte Antimalware Malwarebytes Anti-Malware - Download.com (http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html)

Then install BroswerProtect Browser Hijack Protection for free - BrowserProtect.org (http://www.browserprotect.org/)

These are not alternatives - you need to run them all, consecutively
Smitfraudfix and Combofix should be run in safe mode, the others are OK in normal mode. Essentially, whatever they find, delete

Which version of windows are you running, and what security software?

[brockenspectre]

My OS is Win 7 and I was relying on Windows Defender and AVG free version.

I will now go and run your recommendations (I just ran Malwarebytes by itself and it found nothing)!!

1400bst: Just ran Hitman OK and it found "stuff"... the hijacker is still there.

Smitfraudfix says it isn't for WIN7?

now to try the others..

1436bst: OK ran Combofix and nearly had a heart attack as it didn't give me the option to save it at all.. so I had to interrupt it immediately after clicking on the d/l file icon... restarted in Safe Mode and manually found it in the d/l folder and ran it from there and... it found the "meanie".

Then went to Browser Protect and that is now doing its job.

THANK YOU SO MUCH!!!

I know the Smitfraud didn't run but the problem is gone....

You are a superstar MiloMinderBender!! I am definitely going to go and share the url of this thread on FB... ok:

:ok:

[Milo Minderbinder]

Don't worry about the Smitfraudfix - that won't run on 64-bit, but I included it just in case. It does some useful work on older versions of windows

I suggest you remove the free AVG and instead install the free version of Avast
Update it, and then scan the whole machine
avast! | Download Free Antivirus Software or Internet Security (http://www.avast.com/index)

Note that you have to register the Avast program every 11 months, but you don't need to use a real e-mail address. Anything will do ([email protected] works)