Home Malware Programs Malware Fake WebCrawler

Fake WebCrawler

Posted: August 18, 2011

Fake WebCrawler is a website that imitates the real WebCrawler metasearch engine, but lacks all of Webcrawler's positive attributes. Instead of providing genuine and safe links, Fake WebCrawler will provide links that are inaccurate, irrelevant or even potentially harmful to your PC. Because of this and the fact that our malware researchers have noticed Fake WebCrawler using browser hijacker infections to force traffic to itself, it's recommended that you avoid contact with the Fake WebCrawler website at all costs. If there is a possibility that your machine has been infected with a Fake WebCrawler browser hijacker, you should use appropriate software to remove the Fake WebCrawler infection, preferably with all browser windows closed.
 

The Slimy Trail That Fake WebCrawler Leaves Behind While It Crawls Through Your PC

As a rather poor imitation of the real thing, Fake WebCrawler is recognizable by the many symptoms that correspond to ways in which Fake WebCrawler tries to attack your PC or convert you into a source of revenue, all of which are common to other fake search engines like Resulturl, Findxplorer, Coupon Alert Toolbar and Qooqlle.com. SpywareRemove.com malware researchers have observed the following risks involved with Fake WebCrawler even if you don't think that you're infected with its corresponding browser hijacker:

  • A risk of infection by drive-by-download scripts, many fake search engine websites like Fake WebCrawler will embed hijackers in their sites, so a single visit is all it takes to be forced back on a repeated basis. Similar scripts may also be used on any result websites that Fake WebCrawler provides and are capable of installing any type of threat, although Trojans like Backdoor.Win32.Bredolab.obk, Trojan.Win32.Starter.yy, Trojan-Downloader.Win32.Bancos and Backdoor.Win32.Agent.bimu are particularly likely to be installed.
  • Fake infection warnings that are used to mislead you about your computer's current health and security. These warnings are often coupled with entire imitation system scans.
  • Exposure to scamware websites that Fake WebCrawler-affiliated criminals can use to steal your credit card number or other personal information. This includes phishing websites that spoof legitimate companies as well as rogue software websites that try to sell you fake applications.

Recognizing a Fake WebCrawler Hijacker by Its Symptoms

Fake WebCrawler browser hijackers can be installed through any number of (usually stealthy) methods but will reveal themselves through issues like the ones listed here:

  • Fake WebCrawler hijackers may change your homepage to the Fake WebCrawler website. Any attempts to revert this setting change will fail.
  • Fake WebCrawler hijackers will redirect you to Fake WebCrawler whenever you try to use unrelated websites. Particularly common triggers for such attacks include using a search engine or clicking a link, but these redirect attacks, like lightning, can strike at any time.
  • Even if you use a real search engine successfully, Fake WebCrawler hijackers may switch out the official results for malicious Fake WebCrawler result listings.
  • Additional links, pop-ups and other forms of undesirable ads and ways to redirect you to Fake WebCrawler may appear regardless of which website you're browsing.

You can remove Fake WebCrawler with a properly-advanced anti-malware program, although Safe Mode and avoiding browser usage during a Fake WebCrawler scan are both advisable precautions.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAM_FILES%\WebCrawler File name: %PROGRAM_FILES%\WebCrawler
C:\Documents and Settings\<username>\WebCrawler File name: C:\Documents and Settings\<username>\WebCrawler
C:\Documents and Settings\<username>\Start Menu\WebCrawler ultrabar.dll File name: C:\Documents and Settings\<username>\Start Menu\WebCrawler ultrabar.dll
File type: Dynamic link library
Mime Type: unknown/dll

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\WebCrawlerHKEY_LOCAL_MACHINE\software\classes\clsid\{9677f3f1-e994-451f-805f-7148cc8ae040}HKEY_CLASSES_ROOT\clsid\{9677f3f1-e994-451f-805f-7148cc8ae040}HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{9677f3f1-e994-451f-805f-7148cc8ae040}
Loading...