In all browsers, after loading the page, an incomprehensible site opens. How to remove a virus that opens sites?

Question

Malware

Windows 10 AXIS, Windows Defender included.
After loading almost any site in any browser on my computer, some incomprehensible site is loaded. In the status bar of the browser, I see that the taobao.com domain is loading.
Analysis of the html code of the page showed that there is a frame on every page in the browser:

<iframe width=&quot;1&quot; height=&quot;1&quot; frameborder=&quot;0&quot; src=&quot;http://gotu.haiwaitao.in/click/r.php?target=http%3A%2F%2Fwww.16bingtuan.com%2Fcha oshi.php%3Ffrom%3D1451812653872&quot;></iframe>

ADWCleaner did not find anything, Kaspersky 2015 too. My computer, I am very scrupulous about installing programs. I will be glad for any help.

Answer 1

Check the shortcut properties of the browsers you are launching from. Most likely there the path will not be to the browser, but to some kind of batch file buried in the bowels of the system.
Usually what should be done in such cases:
1) Demolish everything suspicious. Not a standard uninstaller, but something more powerful.
2) Check autoload. Everything suspicious - under the root, demolish exactly exe.
3) Check services. Do everything as in p2.
If something is not deleted - Unlocker will help you.

Answer 2

I had the same. rearranged Windows

Answer 3

Try IT: https://ru.malwarebytes.org/ The
free version is enough.
At one time, he helped me out a lot where Kaspersky was powerless.

Answer 4

Alternatively, maybe someone changed the dns server in Windows or the router? Or the hosts file is corrupted.

Answer 5

Is Kaspersky 2015 a KVRT or a personal product?
If personal, it is advisable to switch to the 2016 version of Kaspersky Anti-Virus and enable PUP detection in it, if it is not enabled.
Settings - advanced - settings for threats and exclusions - detect other programs, run the database update and restart the computer when it is finished; run a full virus scan.
If the problem persists, refer to the " Fighting viruses " section of the official Kaspersky Lab forum, where you can attach the logs required by the rules .

Answer 6

See hosts, dns (and on the router too).
Kill the left services, all sorts of stuff from autorun.
See if the paths to the exe's of the browsers are spelled out correctly, and if there is a replacement for the Latin alphabet with the Cyrillic alphabet (for this, the easiest way is to rewrite the paths by hand). Proskantes avz, and not what is advised here.