Avast WEBforum

Other => Viruses and worms => Topic started by: avast21 on July 23, 2022, 07:41:40 PM

Title: Chrome search hijack not detected by Avast
Post by: avast21 on July 23, 2022, 07:41:40 PM
My Google search in Chrome on Windows 10 got hijacked with pulpysearch.  Any query redirected to pulpysearch.com and finally to bing.

Scans with Avast and Malawarebytes found nothing wrong.

Chrome settings showed nothing wrong in the search engines.  No extensions loaded.

Clean install of Chrome cured it .. until i signed into Google at which point the hijack reappeared.

Clearing Appdata/Local/Google/Chrome/User Data fixed it ... until Google synch ran and the problem returned.

It seems that the replication was bringing the hijack into the /Default/Syncdata/LevelDB

Avast deep scan still saying nothing found.

With a bit of tinkering, I turned off Sync of Settings ... that seems to where the hijack was hiding ... Then cleared my Google data and the infection hasn't returned.

Why does Avast not find and clear this hijack?
Title: Re: Chrome search hijack not detected by Avast
Post by: Pondus on July 24, 2022, 01:33:02 AM
Quote
Why does Avast not find and clear this hijack?
Is PUP detection ON ?



Title: Re: Chrome search hijack not detected by Avast
Post by: avast21 on July 24, 2022, 12:00:45 PM
Default settings on File Shield and Web Shield.

I've had other PUP show up in Quick Scan and Deep Scan before.   This one didn't.
Title: Re: Chrome search hijack not detected by Avast
Post by: polonus on July 24, 2022, 02:30:03 PM
This stresses the importance of having a decent ad- and script-blocker inside the browser.
uBlock origin and uMatrix for instance.

Be aware, some online removal schemes are from malicious/suspicious sources as such.
Use Google Safe Browsing and stay away from suspicious or malicious extensions.
Visiting or downloading from suspicious websites/sources may infest you.

polonus