Click on screenshot to zoom
Danger level 7
Type: Browser Hijackers
Common infection symptoms:
  • Hijacks homepage
  • Changes default search engine

If your browser loaded instead of your usual homepage, we would advise you to restore previous settings back to normal as soon as possible. This search engine appears to be a browser hijacker and unfortunately, it can not only replace the user’s default homepage but also show him unreliable search results when used to surf the Internet. According to our research, the threat can work on the main browsers, such as Mozilla Firefox, Google Chrome, and Internet Explorer. Moreover, there is a chance the application could slip in without the user noticing it. Provided you wish to find out how could this happen or learn other details about, we recommend you keep reading this text. Below the article users will find deletion instructions for separate browsers; these steps will show you how to get rid of the threat manually.

Our researchers think the search engine might by placed on the system while installing some unreliable applications. It could be done automatically if a bundled installer is used and automatic installation option are chosen. As you realize, it would be best to pick custom or advanced installation settings so you could access more information and be able to control the process. For instance, if the configuration wizard suggests there might be other tools installed automatically like you could cancel the wizard and avoid the installation of applications you do not need. In some cases, the setup wizard allows to deselect additional software suggestions, so in this case, the user could uncheck the suspicious suggestions and install only the main program.

The browser hijacker settles in a bit differently from other applications; it does not create any new data. It would seem the search engine modifies already existing files instead. It's targeted data should belong to the browser it is about to hijack, for example, if it is Google Chrome, the threat may alter data called Preferences, Secure Preferences, and Web Data in the C:\Users\{user name}\AppData\Local\Google\Chrome\User Data\Default directory. This is how the search engine ensures your browser will load as your homepage every time it is launched. Like most of other similar browser hijackers, we believe it might be showing modified search results. Thus, if you decide to enter your query, you may receive suspicious advertising content together with the results matching the used keyword.

We should warn users that such advertisements could come from different third-party partners and we doubt creators take any responsibility for their promoted content. Meaning, there are chances some of the browser hijacker’s ads might be possibly malicious. To answer the question what might go wrong if you ever interact with these unreliable ads, we could give a couple of examples. First of all, they could promote doubtful software similar to this search engine, for example, adware, different browser hijackers, potentially unwanted programs, and even malicious threats, such as Trojans, viruses, etc.

Therefore, if you click ads suggesting such content you might unknowingly infect the system or install potentially dangerous applications. Additionally, we should mention, some of the advertisements could lead the user to web pages asking to participate in fake lotteries or ask to submit private data for freebies. Needless to say, you should be extra cautious on such sites or else you might reveal your sensitive data to scammers. The best way to avoid these potential risks is to get rid of the application that may introduce you to unreliable content.

As promised you will find deletion instructions explaining how to remove manually at the end of this text, although it is important to mention they could look rather confusing to less experienced readers. If that is the case, our researchers recommend using a reliable antimalware tool instead. Users can pick any tool of their choice just make it sure it is reliable. Then install the tool, launch it and click the scanning button to perform a system scan. Wait until the scanning is over and click the deletion button to eliminate all detections at once.


Internet Explorer

  1. Press Win+R.
  2. Insert Regedit and click OK.
  3. Get to the following location: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
  4. Locate a value name known as Start Page.
  5. Right-click it and press Modify.
  6. Instead of insert a link you prefer and press OK.
  7. Close the Registry Editor.

Mozilla Firefox

  1. Tap Win+E.
  2. Navigate to the provided path: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\{Unique Mozilla user ID}
  3. Find a file titled as prefs.js and launch it as a Notepad document.
  4. Look for the following line: user_pref(“browser.startup.homepage”, “”).
  5. Instead of insert a website you trust and press Ctrl+S.
  6. Close the document.

Google Chrome

  1. Launch the Explorer (Win+E).
  2. Find this path in the system: C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default
  3. Locate the mentioned files:
    Secure Preferences
    Web Data
  4. Right-click them one by one and choose Delete.
  5. Close the Explorer.
Download Spyware Removal Tool to Remove*
  • Quick & tested solution for removal.
  • 100% Free Scan for Windows

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.