Home Malware Programs Browser Hijackers Somesearchsystem.com

Somesearchsystem.com

Posted: October 20, 2011

Somesearchsystem.com is a fake search engine website that pretends to offer search-related functions as a bait-and-switch game that leaves you subjected to advertisements. Although this is annoying enough by itself, SpywareRemove.com malware researchers also warn against contact with Somesearchsystem.com due to its known tendency to traffic in malicious software (such as ZeroAccess rootkits and browser-hijackers). Somesearchsystem.com-related infections can redirect your browser to Somesearchsystem.com or other CC Search sites whenever you try to use another search engine and should be considered extreme PC security risks. If you've had contact with Somesearchsystem.com or a related site and believe that your computer might be infected by a Somesearchsystem.com browser hijacker, quick usage of a competent anti-malware scanner can help to save your PC and your searches from Somesearchsystem.com's annoying redirects.

Somesearchsystem.com: A Front for Risky Links without Value

Although Somesearchsystem.com starts off looking like a regular search engine with relevant links, once you try to interact with Somesearchsystem.com's content and features, you'll find that Somesearchsystem.com only has an eye on redirecting you to advertisement and e-commerce sites. This behavior is also found on Somesearchsystem.com's brother websites, which include:

Due to their poor content and the fact that SpywareRemove.com malware experts have rated them as probably traffickers in malicious software, it's strongly encouraged for you to avoid these sites, including Somesearchsystem.com and other CC Search websites. Unfortunately, contact with Somesearchsystem.com or its relatives can also lead to infect by browser hijackers that take the choice away from you.

How to Get Freedom of Choice Back from a Somesearchsystem.com-Corrupted Search

Somesearchsystem.com and other CC Search sites are particularly well-known for their affiliations with malicious software (including the ZeroAccess rootkit) that can be installed without consent. ZeroAccess rootkits can be sources to a range of different attacks, but SpywareRemove.com malware experts have noted their most likely risks as follows:

  • Redirects to Somesearchsystem.com when you click on a search engine link. This redirect may take you straight to Somesearchsystem.com, or it may only use Somesearchsystem.com as a go-between to take you to irrelevant sites. In most cases, there will be a slight delay after you click the link that allows you to see Somesearchsystem.com's loading bar.
  • Browser settings that are locked to undesirable values.
  • Browser settings that change after a reboot.
  • Security vulnerabilities that are caused by ZeroAccess rootkits, including changes to your firewall or network ports.
  • Problems using anti-virus and PC security programs due to unusual crashes or error messages.

Although Somesearchsystem.com browser hijackers and ZeroAccess rootkits are high-level threats to your computer's safety, competent and up-to-date anti-malware programs can remove them during system scans. If you're unable to access the relevant program, rebooting into Safe Mode from the advanced startup options menu will provide you with a secure environment that can shut down unnecessary processes, potentially including Somesearchsystem.com-related software.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%Windows%\system32\consrv.dll File name: %Windows%\system32\consrv.dll
File type: Dynamic link library
Mime Type: unknown/dll
%Windows%\system32\DRIVERS\mrxsmb.sys File name: %Windows%\system32\DRIVERS\mrxsmb.sys
File type: System file
Mime Type: unknown/sys

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4
Loading...