Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. the allsearch virus

the allsearch virus

Scheduled Pinned Locked Moved The Lounge
comwindows-adminquestiondiscussion
21 Posts 10 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • A AspDotNetDev

    Is this one of those viruses that only works in a web browser? Perhaps you only see it when Chrome is installed because it only works in Chrome?

    Thou mewling ill-breeding pignut!

    R Offline
    R Offline
    rspercy65
    wrote on last edited by
    #12

    It infected 3 of my browsers, and It does not now. I removed everything google, no problems. I ran CCleaner, Malwarebytes, and AVG, nothing was found.

    rspercy65

    A 1 Reply Last reply
    0
    • R rspercy65

      I removed everything that pertained to google and deleted thier folders from the registry and installed it again. There it was again. I previously removed it with Malwarebytes. All I can say is 'Download and Install it' and find out for yourself

      rspercy65

      Richard DeemingR Offline
      Richard DeemingR Offline
      Richard Deeming
      wrote on last edited by
      #13
      • Did you delete the relevant folders under %APPDATA%\Google?
      • After removing allsearch with Malwarebytes, did you run through the manual removal steps[^] to make sure it was gone?
      • Did you check your hosts file and DNS settings?
      • Did you download Chrome from https://www.google.com/chrome[^]?

      If the answer to all of the above is "yes", and you're still seeing allsearch with a clean install of Chrome, then your computer is still infected.


      "These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

      "These people looked deep within my soul and assigned me a number based on the order in which I joined" - Homer

      R 1 Reply Last reply
      0
      • R rspercy65

        It infected 3 of my browsers, and It does not now. I removed everything google, no problems. I ran CCleaner, Malwarebytes, and AVG, nothing was found.

        rspercy65

        A Offline
        A Offline
        AspDotNetDev
        wrote on last edited by
        #14

        I recall that Chrome runs from some user directory rather than from Program Files like it is supposed to (and I hear it does this to allow for silent automatic updates without a security notice to the user). Perhaps the virus takes advantage of this and can only run when Chrome is installed. That would explain why it only runs when Chrome is installed without assuming it gets installed with Chrome.

        Thou mewling ill-breeding pignut!

        R 1 Reply Last reply
        0
        • L Lost User

          rspercy65 wrote:

          All I can say is 'Download and Install it.'

          From which link?

          Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^]

          R Offline
          R Offline
          rspercy65
          wrote on last edited by
          #15

          From Google.Com/Chrome

          rspercy65

          1 Reply Last reply
          0
          • Richard DeemingR Richard Deeming
            • Did you delete the relevant folders under %APPDATA%\Google?
            • After removing allsearch with Malwarebytes, did you run through the manual removal steps[^] to make sure it was gone?
            • Did you check your hosts file and DNS settings?
            • Did you download Chrome from https://www.google.com/chrome[^]?

            If the answer to all of the above is "yes", and you're still seeing allsearch with a clean install of Chrome, then your computer is still infected.


            "These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

            R Offline
            R Offline
            rspercy65
            wrote on last edited by
            #16

            That allsearch virus was infecting all 3 of my mainstream browsers. I uninstalled SeaMonkey, Google Chrome, but not IE. When I run IE the virus does not show up any more. That tells me that is was not just for infecting google because I had it in all 3 browsers. I did go thru the motions that is discribed on the web-site and I just checked AppData folder for any Google folders. There was none. None of the registry keys that are displayed on the web-site were listed in the registry. IE boots up to Yahoo.com and not allsearch as before.

            rspercy65

            1 Reply Last reply
            0
            • L LloydA111

              I'm sorry but thats a very stupid thing to say and shows a clear lack of understanding of viruses. Just because you installed it again, how is that going to in some way stop the the virus that is already on your machine from infecting Chrome again once you install it? Virus's are designed to bury themselves deep into the system and it is from there that it is infecting Chrome again. Standard practice for this is to reinstall the OS, it's the only way of ever being sure it's gone.

                     .-.
                    |o,o|
                 ,| \_\\=/\_      .-""-.
                 ||/\_/\_\\\_\\    /\[\] \_ \_\\
                 |\_/|(\_)|\\\\  \_|\_o\_LII|\_
                    \\.\_./// / | ==== | \\
                    |\\\_/|"\` |\_| ==== |\_|
                    |\_|\_|    ||" ||  ||
                    |-|-|    ||LI  o ||
                    |\_|\_|    ||'----'||
                   /\_/ \\\_\\  /\_\_|    |\_\_\\
              
              R Offline
              R Offline
              rspercy65
              wrote on last edited by
              #17

              It was infecting 3 of my mainstream browsers, IE, Chrome, Seamonkey. It does not show on IE anymore, just Yahoo.com. That is what it should be and not allsearch.

              Lloyd Atkinson wrote:

              Standard practice for this is to reinstall the OS, it's the only way of ever being sure it's gone.

              I have done this 4 times because of a virus and it takes a very long time with four 1TB drives installed. If thats what I have todo, .....well here I go again.

              rspercy65

              1 Reply Last reply
              0
              • R rspercy65

                The allsearch virus comes with Google-Chrome. I redownloaded Google-Chrome from google.com and what do you think I saw when it booted up after Installing it?, Allsearch was looking back at me and probably laughing. I had the virus again. This time I removed everything that pertained to google and deleted thier folders from the registry, No More VIRUS.

                rspercy65

                G Offline
                G Offline
                gardnerp
                wrote on last edited by
                #18

                So Google has decided to take revenue away from their search and instead send its users to allsearch for some bad results? I'm not buying it.

                1 Reply Last reply
                0
                • R rspercy65

                  All I can say is 'Download and Install it.'

                  rspercy65

                  R Offline
                  R Offline
                  Rajesh R Subramanian
                  wrote on last edited by
                  #19

                  Yeah, I've downloaded and installed it and I don't find anything funny. By the way, I work on an antivirus product for a day job.

                  "Real men drive manual transmission" - Rajesh.

                  1 Reply Last reply
                  0
                  • A AspDotNetDev

                    I recall that Chrome runs from some user directory rather than from Program Files like it is supposed to (and I hear it does this to allow for silent automatic updates without a security notice to the user). Perhaps the virus takes advantage of this and can only run when Chrome is installed. That would explain why it only runs when Chrome is installed without assuming it gets installed with Chrome.

                    Thou mewling ill-breeding pignut!

                    R Offline
                    R Offline
                    rspercy65
                    wrote on last edited by
                    #20

                    I did a full system scan using AVG and it just got done this morning and it was showing 19 more worms, trojans, and virus'. I Quarantined them then deleted them. I opened up IE and it was still there and I do not have anything google on my system. I do not see how 3 Highly Rated virus, malware, and registry apps cannot get rid of a a virus. This tells me to remove them and find something different or format all my drives. I am sorry for all the wrong saying about google and it coming with the virus in the google chrome app. I actually thought that it did. Once again I am very sorry for that stupid accusation.

                    rspercy65

                    1 Reply Last reply
                    0
                    • R rspercy65

                      The allsearch virus comes with Google-Chrome. I redownloaded Google-Chrome from google.com and what do you think I saw when it booted up after Installing it?, Allsearch was looking back at me and probably laughing. I had the virus again. This time I removed everything that pertained to google and deleted thier folders from the registry, No More VIRUS.

                      rspercy65

                      D Offline
                      D Offline
                      Dexterus
                      wrote on last edited by
                      #21

                      Hmm, best way to redirect that I found so far was injection into IP stack. Not sure it still works on Win7 but damn that was hard to track down when I got it like 6-7 years ago. Fun though, tinkering is always fun.

                      1 Reply Last reply
                      0
                      Reply
                      • Reply as topic
                      Log in to reply
                      • Oldest to Newest
                      • Newest to Oldest
                      • Most Votes


                      • Login

                      • Don't have an account? Register

                      • Login or register to search.
                      • First post
                        Last post
                      0
                      • Categories
                      • Recent
                      • Tags
                      • Popular
                      • World
                      • Users
                      • Groups