|Something has gotten into my son's computer and I can't find it.|
Here are the symptoms - I'll use ccleaner as an example, but it happens with lots of other searches also.
If I do a Google search, I will get the standard list of hits, but if I click on any of them, I'll get sent to a totally different site. Let's say I do a search on ccleaner. ccleaner.com will appear in the drop down, but if I follow it, I might get taken to mydealmatch.com.
Or if I let Google search for cccleaner, the first hit will be for www.piriform.com, the new homepage for ccleaner. If I hover over the link it will say www.piriform.com/ccleaner/download which is the correct link.
However, when I click the link, whoops! this time avast just blocked a trojan. I tried it again and was sent to prime-downloads.com
I just did a Yahoo Search on the Yankees and instead of following the link to a news report on the Yankees, I was sent to a Ticket Liquidator site.
I can type any URL in the address bar and get to where I want to go, but clicking a link from a Google or Yahoo search takes me to some random site where they want to sell me something.
I ran a full system scan with avast, AVG, Malwarebytes and SuperAntiSpyware. I ran TFC and ccleaner. What was found was cleaned, but the problem still exists.
I can't run Spybot because the install program tries to access the safer-networking site and I think - but can't be sure - that the access attempt is being redirected because I get a message that says:
"The server name or address could not be resolved".
The same install package runs fine on another system, so I'm pretty sure the install is being blocked by whatever has invaded this system.
Any thoughts on what tool(s) I can use to clean this system?
You assistance would be greatly appreciated!