Morning all! Hopefully someone could help with this weird problem i'm having. Somehow I believe I have managed to get some malware. The problem is, I can't work out what it is that is doing it. I have scanned with kaspersky, defender, AMBytes, AdwCleaner, zemana, gone through a whole forum post to do with removing adware/malware using various programs like rkill, FRST64, sophos. NONE have found anything to get rid of on my machine. Tried in safemode and standard. The problem I am having is simply, clicking links, or infact anywhere on a webpage, randomly i'll have a page open advertising something. Sometimes a new tab, sometimes in the current tab. I also get one saying Firefox Safesearch incognito protect your privacy. It appears completely random, not every click. Windows 10, all updates current. Using firefox 53.0.3 (32-bit). I have reinstalled firefox twice, and disabled addons. Anyone seen this? Pain in the arse! Cheers for any help
Have you checked the Startup tab in Task Manager for anything random looking? In fact, have you just checked the running processes in Task Manager?
Right click your chrome/ie/firefox whatever you're using and check it's launch parameters, in my experience it's either a toolbar that's missed, extensions or launch parameters.
Have you checked your "programs"? go into there and sort by install date, make sure it's not an app that has been installed and is doing it.
Yeah checked the services/programs/startup tabs in TM. Nothing strange there. No strange parameters in short cut, or in urls in the actual settings of firefox. No apps installed that I didn't do myself that are showing. Just can't work it out, very very strange.
Try HiJack This: http://filehippo.com/download_hijackthis/ It will show you any browser hijack objects in the registry that could be changing stuff