Spyware, Viruses, & Security forum


Browser Hijacked - blendersearch.com

by michael_fett / October 11, 2011 3:37 AM PDT

I have somesort of browser hijacking going on. Randum searches will take me to strange websites. The only common part I see is blendersearch.com (Warning: do not visit site) in my listings under the back button. I'm using Windows 7 Professional 64-bit. Browser is Internet Explorer 8. Had Microsoft Security Essentials on here with Malwarebytes. Neither of those found it. Installed Trend Micro Internet Security 2012, that did not work either. Tried Spybot Search and Destroy, still nothing. It is still doing it. Any ideas how to get this off this machine?

Note: This post was edited by a forum moderator to disable link and put up warning note about site which maybe malicious on 10/11/2011 at 11:50 AM PT

Discussion is locked
You are posting a reply to: Browser Hijacked - blendersearch.com
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Browser Hijacked - blendersearch.com
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Clarification Request
Same Problem
by sameproblem / October 12, 2011 3:41 AM PDT
Collapse -
by momomo100 / October 12, 2011 5:31 AM PDT
In reply to: Same Problem

I had the same exact problem. I tried using SUPERAntiSpyware, MSE, and TDSSKiller. I kept updating my SUPERAntiSpyware throughout the day, and eventually one of the updates last night was able to detect the Trojan.

Collapse -
Have you checked ..
by Carol~ Moderator / October 12, 2011 7:35 AM PDT
In reply to: Same Problem

In addition to using the scanning tools suggested, have you checked Windows HOSTS file, to see if it's been altered in any way? What about your DNS settings? Have you tried resetting your router to its default setting / configuration?


All Answers

Collapse -
Additional scanners to try..
by Carol~ Moderator / October 11, 2011 5:29 AM PDT


If Malwarebytes' Anti-Malware didn't find anything, give the below a try:

Kaspersky's TDSSKiller - Instructions are listed below. (Additional instructions can be found here)


Hitman Pro - It's free to use without a license. If a virus is found, you will receive a free 30-day license to remove the threat. Note: There is a separate download for 64-bit versions of Windows 7.


ESET Online Scanner

You might also want to check to make sure your settings haven't been changed to use a Proxy Server. Open IE and go to Tools>Internet Options>Connection Tab. Click on the LAN settings button. If there is a checkmark next to "Use a proxy server for your LAN", uncheck it. Click OK. Then OK, again.

Lastly. You wrote you 'had' MSE installed and it didn't find anything. Then you wrote you installed Trend's suite. Does that mean you uninstalled MSE? IF not, I would strongly suggest only using ONE of the two.

Best of luck..

Collapse -
by michael_fett / October 13, 2011 5:04 AM PDT

SuperAntiSpyware did the trick. I found it and removed it.

Collapse -
Great! Glad you were able to straighten it out :)
by Carol~ Moderator / October 13, 2011 7:16 AM PDT
In reply to: SUPERAntiSpyware


Thanks for posting back and letting us know.

Do you happen to have the name of what SAS detected? It should be in the log.

In addition to my own curiosity, it may help others.


Popular Forums
Computer Newbies 10,686 discussions
Computer Help 54,365 discussions
Laptops 21,181 discussions
Networking & Wireless 16,313 discussions
Phones 17,137 discussions
Security 31,287 discussions
TVs & Home Theaters 22,101 discussions
Windows 7 8,164 discussions
Windows 10 2,657 discussions


We are giving away 'Black Panther' swag!

Four lucky readers will be taking home *Marvel*ous "Black Panther" prizes, including magazines autographed by the King of Wakanda himself! Giveaway ends Feb. 25, 2018.