Google Search hijacked only when not being observed. With Fiddler Capture normal results are returned.

[Derek]

 It looks like something is using the FiddlerRoot certificate as a means to hijack google.  I posted about it on superuser at the below link.  I'd really like to not have to reinstall Windows.  

http://superuser.com/questions/1034394/google-search-hijacked-only-when-not-being-observed-attaching-a-debugger-return?noredirect=1#comment1443610_1034394

 

[Derek]

http://superuser.com/questions/1034394/google-search-hijacked-only-when-not-being-observed-attaching-a-debugger-return

Don't see how to edit the above post.  Here's a clickable link. 

[Tsviatko Yovtchev]

Hello,

Could you, please, confirm that you are getting HTTPS traffic signed by DO_NOT_TRUST_FiddlerRoot derived  certificate when Fiddler is not running?

Regards,
Tsviatko Yovtchev
Telerik

[EricLaw]

Various pieces of adware/malware have been coded such that when you start Fiddler (or another debugger) the malware detects the debugger stops its malicious behavior in an attempt to avoid detection. You should run a proper antivirus/antimalware program to clean your machine.