Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Proxy settings changing automatically - Google Custom Search Malware

Hi all,

My firefox proxy settings are changing automatically from "No proxy" to "Use system proxy settings". Now, whenever it is using "system proxy settings" all google searches are getting redirected to cse.google.com (Google Custom Search Malware?).

However, for the short duration when I am not using any proxy i am able to search normally on Google.

Hi all, My firefox proxy settings are changing automatically from "No proxy" to "Use system proxy settings". Now, whenever it is using "system proxy settings" all google searches are getting redirected to cse.google.com (Google Custom Search Malware?). However, for the short duration when I am not using any proxy i am able to search normally on Google.

All Replies (6)

hi, next to the security software already in place, please run a scan with various other security tools like the free version of malwarebytes, adwcleaner & eset online one-time scanner and see if they will come up with any unwanted pieces?

Troubleshoot Firefox issues caused by malware

Security Issue: Update your Flash Player Note: Windows users should download the active_x for Internet Explorer. and the plugin for Plugin-based browsers (like Firefox).

Note: Windows 8 and Windows 10 have built-in flash players and Adobe will cause a conflict. Install the plugin only. Not the active_x.

Flash Player Version: 23.0.0.162 Flash Player (Linux) Version 11.2.202.635

https://get.adobe.com/flashplayer/ Direct link scans current system and browser Note: Other software is offered in the download.

https://get.adobe.com/flashplayer/otherversions/ Step 1: Select Operating System Step 2: Select A Version (Firefox, Win IE . . . .) Note: Other software is offered in the download.


See if there are updates for your graphics drivers https://support.mozilla.org/kb/upgrade-graphics-drivers-use-hardware-acceleration

Do you get a results page or just the form (https://cse.google.com/)? If you get a results page, could you post the full address of an example page (search for something non-personal like firefox)? Perhaps that will help to identify the culprit.

The "system proxy" settings usually can be found in either Internet Explorer or the Windows Control Panel under "Internet Options". Check the Connections tab in that dialog, then the LAN Settings button. If your settings keep getting reverted, then something definitely is going on with your system.

philipp said

hi, next to the security software already in place, please run a scan with various other security tools like the free version of malwarebytes, adwcleaner & eset online one-time scanner and see if they will come up with any unwanted pieces? Troubleshoot Firefox issues caused by malware

Ran the eset online scanner.. It found one threat which it cleaned. However problem continues.

jscher2000 said

Do you get a results page or just the form (https://cse.google.com/)? If you get a results page, could you post the full address of an example page (search for something non-personal like firefox)? Perhaps that will help to identify the culprit. The "system proxy" settings usually can be found in either Internet Explorer or the Windows Control Panel under "Internet Options". Check the Connections tab in that dialog, then the LAN Settings button. If your settings keep getting reverted, then something definitely is going on with your system.

1. No.. I got a full search page. For eg. when i searched for "firefox" this is the address of the search result i got : https://cse.google.com/?cx=partner-pub-8646304209325463:9163023839&urd9=aHR0cDovL3d3dy5hcW92ZC5jb20v&noregcheck=7BFEACFDC9DC489353B80DC2183EE39A&q=firefox#gsc.tab=0&gsc.q=firefox&gsc.page=1

2. I had changed the LAN settings as well .. thats getting changed too.

3. In addition, windows firewall is getting turned off and microsoft security centre services is automatically getting disabled too.

So there's infection for sure, but Windows Defender not able to detect it.

Since it was an online upgrade from Windows 7 to Windows 10, I cant uninstall the OS and install again

The logo in the upper left corner of the custom search results links to aqovd.com, which leads me to think it's something like this:

https://malwaretips.com/blogs/remove-aqovd-com/

But you might also want to consult the specialized malware cleaning forums listed in our support article (linked earlier). They can walk you through the use of more advanced tools that we can't recommend using on your own.