Home Malware Programs Browser Hijackers FindSearchEngineResults.com

FindSearchEngineResults.com

Posted: January 25, 2012

FindSearchEngineResults.com Screenshot 1FindSearchEngineResults.com is a search engine that provides poor functionality and advertisements links instead of the reliable search results that high-quality search engines offer their visitors. If your browser shows any symptoms of being affected by redirects to FindSearchEngineResults.com, it's recommended that you enact a thorough scan of your computer to remove the associated PC threat, since browser hijackers for FindSearchEngineResults.com may also be a source of other security problems, including pop-ups, account hijacks and locked homepages.

FindSearchEngineResults.com – Not Quite What It Promotes Itself to Be

Although FindSearchEngineResults.com's marketing proudly proclaims FindSearchEngineResults.com to be a 'premiere spot' for finding what you're looking for online, FindSearchEngineResults.com offers, at best, shaky search features and sponsored links instead of real links to relevant results. This shouldn't be a surprise to persons who are familiar with FindSearchEngineResults.com's tagline, which indicates that FindSearchEngineResults.com is a flat-out clone of other questionable search sites like Find-fast-answers.com, Expandsearchanswers.com, Quick-search-results.com and Search-fast-results.com. Since FindSearchEngineResults.com's value as a search engine is extremely questionable, it's recommended that you try to avoid significant interaction with FindSearchEngineResults.com, although, so far, FindSearchEngineResults.com hasn't been reported to use drive-by-downloads or other types of direct attacks against visitors' web browsers.

Because FindSearchEngineResults.com has been associated with spam, you may find links to FindSearchEngineResults.com in mass-mailed e-mail messages or other forms of spam (such as generic comments to posts with links for FindSearchEngineResults.com). As always, SpywareRemove.com malware researchers recommend that you avoid clicking on links from unusual sources or links that are presented in a manner that's typical for spam, such as alongside generic or misleading text messages.

Why Browser Hijackers for FindSearchEngineResults.com May Have Brought Friends Along for the Ride

FindSearchEngineResults.com is promoted by browser hijackers that redirect your web browser to FindSearchEngineResults.com regardless of which site you're attempting to load, although the most common form of redirects are initiated after attempts to load an unrelated search engine. Because browser hijackers that promote FindSearchEngineResults.com have also been noted to promote fake anti-virus programs and other types of scamware, SpywareRemove.com malware researchers caution you to be wary of fake online scanners and fake infection warnings, which are often used to install rogue anti-malware products.

Since browser hijackers for FindSearchEngineResults.com may attack any type of web browser due to baseline changes to your Windows Registry settings, you should combat redirects to FindSearchEngineResults.com by scanning your PC with reputable anti-malware products. Other risks that may also be incurred due to the presence of a browser hijacker are pop-ups, blocked websites, frozen browser settings or stolen information (such as passwords and other forms of data that are often saved in caches).

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%Temp%[trojan name]toolbar-manifest.xml File name: %Temp%[trojan name]toolbar-manifest.xml
Mime Type: unknown/xml
%AppData%[trojan name]toolbarversion.xml File name: %AppData%[trojan name]toolbarversion.xml
Mime Type: unknown/xml
%AppData%[trojan name]toolbarcouponsmerchants2.xml File name: %AppData%[trojan name]toolbarcouponsmerchants2.xml
Mime Type: unknown/xml
%AppData%[trojan name]toolbardtx.ini File name: %AppData%[trojan name]toolbardtx.ini
Mime Type: unknown/ini
%AppData%[trojan name]toolbarcouponscategories.xml File name: %AppData%[trojan name]toolbarcouponscategories.xml
Mime Type: unknown/xml
%AppData%[trojan name]toolbarcouponsmerchants.xml File name: %AppData%[trojan name]toolbarcouponsmerchants.xml
Mime Type: unknown/xml
%AppData%[trojan name]toolbarpreferences.dat File name: %AppData%[trojan name]toolbarpreferences.dat
File type: Data file
Mime Type: unknown/dat
%AppData%[trojan name]toolbarstat.log File name: %AppData%[trojan name]toolbarstat.log
Mime Type: unknown/log
%AppData%[trojan name]toolbarguid.dat File name: %AppData%[trojan name]toolbarguid.dat
File type: Data file
Mime Type: unknown/dat
%AppData%[trojan name]toolbarstats.dat File name: %AppData%[trojan name]toolbarstats.dat
File type: Data file
Mime Type: unknown/dat
%AppData%[trojan name]toolbaruninstallIE.dat File name: %AppData%[trojan name]toolbaruninstallIE.dat
File type: Data file
Mime Type: unknown/dat
%AppData%[trojan name]toolbaruninstallStatIE.dat File name: %AppData%[trojan name]toolbaruninstallStatIE.dat
File type: Data file
Mime Type: unknown/dat
%AppData%[trojan name]toolbarlog.txt File name: %AppData%[trojan name]toolbarlog.txt
Mime Type: unknown/txt

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}ProgID "[trojan name]IEHelper.UrlHelper.1"HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{99079a25-328f-4bd4-be04-00955acaa0a7} "[trojan name] Toolbar"HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{99079a25-328f-4bd4-be04-00955acaa0a7}InprocServer32 "C:PROGRA~1WINDOW~4ToolBar[trojan name]dtx.dll"HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}VersionIndependentProgID "[trojan name]IEHelper.UrlHelper"HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115} "UrlHelper Class"HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuard.1HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar "[trojan name] Toolbar"HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{99079a25-328f-4bd4-be04-00955acaa0a7} "[trojan name] Toolbar"HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuardCurVerHKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuardCLSIDHKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuard
Loading...