Google redirecting to related sites

[Paladin3]

Running Chrome on Win10 with all updates, and my google searches have been getting redirected on occasion. Example: I just searched "prime clerk llc payless shoes" and did a right click > open in new tab on the first result "https://cases.primeclerk.com/pss/Home-Index" but I ended up at at www.jcpenney.com/g/shoes... instead.

When I close the tab and go back to my search I can click on the link again and it takes me to the correct site on the second click and every click after that. It's been happening more and more often over the last week or two. It always happens exactly once, and I can never repeat the redirect. And it never takes me to a malicious website, it always takes me to a legit website selling something similar to what I am searching for, like the JCPenny.com misdirect when I searched for info about Payless Schoes and their bankruptcy. I'd assume it was a virus if I got redirected to a dubious site, but it's like Google is forcing me to visit their preferred advertisers.

Avast antivirus and Malwarebytes say the system is clean. CCleaner doesn't show any new extensions or apps in Chrome. Any ideas? Has Google really sunk this low???

Thanks a ton in advance.

 

[Paladin3]

I may have answered my own question. I found and removed and extension in Chrome named New Tab Redirect. I thought I had installed this so when I opened a new tab it opened google.com instead of just a blank page. Not so sure now, so I deleted it. My new tabs are still opening to google.com, but I *think* that will be the case unless I reset my browser.

Not sure this is a fix, only time will tell.

 

[balloonshark]

I don't use Chrome often but when I open a new tab it opens a google search with my recently visited sites. No idea where to change this option in settings. I tried searching settings for the word tab but it's only mentioned under "On Startup". A very brief search also seems to point to extensions as the only way to change what opens in a new tab.

 

[Paladin3]

I don't use Chrome often but when I open a new tab it opens a google search with my recently visited sites. No idea where to change this option in settings. I tried searching settings for the word tab but it's only mentioned under "On Startup". A very brief search also seems to point to extensions as the only way to change what opens in a new tab.

This is exactly why I suspect it may be some kind of Google shenanigans rather than a malicious virus.

I removed the New Tab Redirect extension and all it did was change the page that opens in a new tab from a generic google.com page to one with shortcuts to my recent searches added. So I doubt that was actually the cause.

 

[Paladin3]

Yup, it's still happening. I was searching for a Chromebook compatible TV tuner and the first link I clicked Google sent me to a page selling Chromebooks rather than the page talking about what I was actually looking for. Plus, when I went back to my tab with the google search it had been changed to a bing.com search. I clicked back and got back to my real google search. Google is pulling some serious shenanigans.

 

[Paladin3]

I just searched for "pc computers" and when I hovered my mouse over the links in the results they didn't turn blue or show the underline like normal. So I clicked in a white/blank spot on the page and cyberpowerpc.com opened in a new window. It's as if the first click after a search is being hyjacked to market products related to my search. It keeps happening and never takes me to a dubious or dangerous looking site, and I can't reproduce it after it happens the first time. It is as if google is forcing me to sellers websites related to my search, but not the link I am actually clicking on.

Ha, it just happened again. I searched "computer tower" and clicked in a blank area on the page and was taken to a dell.com website. Went back, clicked the exact same spot on the search page and nothing happened.

 

[balloonshark]

When you hover over a link is it showing the correct link at the bottom left of the page? I'm not seeing the same results as you if I initiate the search from the address bar or from a new tab with its google search. The links I hover over are blue with a line underneath. I wonder if the add-on was the cause and it left the redirect behind after the uninstall or there is another add-on you're missing. I also wonder if a reset would help.

 

[Paladin3]

When I hover over a link and the link is active (turns blue and shows underline) then the correct matching address is displayed at the bottom of the page. I think it's not changing the link destination, so much as hijacking the first click on the page regardless of where I click.

When I hover over a link and nothing happens (link doesn't turn blue or seem active), that's when I know the next click anywhere on the page will open a site in a new tab that I didn't want to. It is always a legit site that is selling something related to the terms I searched. It also loads a bing search page in place of the tab where I made the original google search. If I click back from the bing search page I get back to the google search I actually made.

Again, it doesn't always happen, but it did happen regardless of having New Tab Redirect extension installed or not. And I'm almost positive my system is clean. Every kind of virus and malware check I've done comes up clean. I've looked for stuff with Malwarebytes, Avast Antivirus, CCleaner, rkill, and Trend Micro housecall and they are all reporting the system clean.

I really think it's just google.com shenanigans, especially since it is directing me to legit sites selling legit products. Google trying to get their advertisers more hits???

 

[balloonshark]

I'm not that familiar with Chrome but if you go to settings and type reset there are two options. I'm not sure what all they change but if it was me I would try them both (clean up computer and reset settings). You can read about them if you click the little question mark.

I would probably also run an adware/browser hijack specific scanner that they recommend on any reputable malware removal forum. That's just what I would do and it may not necessarily be the right thing or will work but it shouldn't do any harm unless a scanner would remove something important. Uninstalling and reinstalling Chrome would also be on the table. Just be sure to back up your bookmarks or anything you deem important.

 

[Paladin3]

Ok, I gave up. Backed up my bookmarks and uninstalled Google Chrome. Then I scrubbed the registry and hard drive of any remaining elements and reinstalled. So far no redirects. Keep your fingers crossed and may The Force be with me. Thanks for the help balloonshark.

 

[balloonshark]

Good to hear you fixed your issue.

 

[VirtualLarry]

Check for router-level DNS server hijacks. Those are popular these days. Potentially injecting JS into your search pages.

Edit: Also check Chrome's Proxy Server settings, and also in IE's Internet Control Panel, for Windows' system-wide Proxy Server settings that some browsers may auto-pick-up when starting them.

Had that happen to Firefox, you can set the "ProxyType" in about:config in Firefox to 0 (zero), to disable using a proxy server, if you have a rogue one on your PC that you can't disable in the IE settings. (It can get locked in there via Group Policy settings by malware.)

Edit: Btw, you don't happen to be using Avast or AVG anti-virus, do you? They may be "monetizing search". (Yes, "free" A/V software, may actually act like a virus, these days, trying to "monetize" their installations.) Read the fine print when you install them, you may be agreeing to this behavior.