Question Dns hijacking problem

Mar 18, 2019
1
0
10
Hi, so a couple days ago I did something stupid and ended installing malware in my pc, I have cleaned all of it except from one thing, everytime that my computer boots up Powershell opens then closes and when I go to my browser(Firefox) it says that my connection is not secure, I installed Zemana anti malware and it detected the following:

8895b6e16ef7b37e26b654d087e07a95-full.png


I have to do this everytime that I want to use my computer since it blocks me from accesing google, also using Chrome when I go to Google.com It redirects me to Google.ga

I have tried Defender, Malwarebytes and Zemana, only Zemana detected the DNS hijack but nothing else.

Any idea of what should I do?
 

Ralston18

Titan
Moderator
Ideas:

1) Open Task Manager. Check the Startup Tab.

Look for some strange or unknown program being launched. If you cannot identify something, then google accordingly. Just do not start "ending" things.

2) Search your computer for Powershell script files: filename.ps1

Especially where the file can be executed at boot time.

3) Another place to look is in the hosts file. Especially with requests to "google.com" going to "google.ga"

Hosts file reference:

http://www.steves-internet-guide.com/hosts-file/

There are other similar links to be found.

Do note make any immediate changes or file deletions. Look first - verify a potential problem. Then focus on a fix.