Click on screenshot to zoom
Danger level 7
Type: Browser Hijackers
Common infection symptoms:
  • Hijacks homepage
  • Changes default search engine is a useless and potentially unreliable search page with a fake toolbar. This malware infection appears in your major browsers after a browser hijacker is installed on your system. As a matter of fact, this infection is no news for us since it is just a new clone in a huge family of browser hijackers, including,, and to mention a few among the latest newborns. This hijacker can modify your home page settings in your Mozilla Firefox, Google Chrome, and Internet Explorer browsers and thus expose you to its potentially unsafe third-party content. This infection most likely enters your computer with a company of other malicious software installers, which clearly means multiple vulnerabilities for your system security. If you want to restore the safety of your virtual world, you should not hesitate to remove from your system.

This browser hijacker follows suit and is mainly spreading via corrupt third-party ads in freeware bundles. It is more likely that such an infection is distributed bundled with other malware infections but we cannot claim that it is not possible that by clicking on unreliable third-party content you cannot simply install this infection directly. When your system is infected with malware programs, such as adware applications and browser hijackers, it is always risky for you to go online because browsing can become a real nightmare for you. Adware programs can flood your screen with all kinds of annoying and dangerous third-party ads that can drop infections directly or in bundles. But browser hijackers can also present you with unreliable ads and search results that can have the same effect when clicked on.

But you can also end up on shady websites accidentally and click on corrupt content there. For example, you may want to download a free program or a crack and you run a web search. Even if you are using a reputable search engine, such as Google and Yahoo, you can find yourself on a search results page that is filled with links leading to fake and malicious websites promising you your targeted file and infecting you with malware. You should close such pages right away, although you might infect your computer the moment you load such a page if you are unlucky enough. In any case, we suggest that you delete as soon as possible and then, scan your computer with a trustworthy malware scanner to detect all other threats.

This browser hijacker is an identical clone of its predecessors and has the same fake toolbar at the top. This toolbar hosts the usual search box on the left and a number of easy-access buttons on its right, including a local weather widget, and, in this case, links to several classified ads-related pages (e.g., and The local weather widget page is known to contain several potentially unreliable third-party banners and the promoted classified ads pages could also be harmful if you engage with their advertisements.

Unfortunately, it is also not advisable to use the search engine either as it could just as well put your system security at risk. This questionable search engine forwards all your queries to a possibly manipulated page, which could contain promoted third-party ads and links. While most of these may be reliable and legitimate, it is also possible that some may well be corrupt and lead to malicious websites operated by cyber criminals. Since it is rather risky to even land on malicious pages as you could infect your machine with dangerous malware threats or get scammed by crooks and lose money, we advise you to remove as soon as possible.

We have found that you may get rid of this annoying browser hijacker by simply restoring your home page settings in your browsers. If you feel able to eliminate this threat manually, you can use our instructions below as a reference. Do not forget about the possibility that there may be other malware threats on your system right now endangering the normal operations of your computer. If you do not want to hunt down these infections one by one manually, we advise you to employ a reputable anti-malware program as soon as possible. Such a security tool can automatically defend your system from all known malware threats.

Remove from browsers

Mozilla Firefox

  1. Press Win+E.
  2. Find the “%AppData%\Mozilla\Firefox\Profiles\{Unique Mozilla user ID}” folder.
  3. Edit the prefs.js file.
  4. Find user_pref("browser.startup.homepage", "") string and replace the malicious URL with a home page URL of your choice.

Google Chrome

  1. Pres Win+E.
  2. Locate your “%LocalAppData%\Google\Chrome\User Data\Default” folder.
  3. Delete Preferences, Secure Preferences, and Web Data files.

Internet Explorer

  1. Press Win+R and type regedit. Click OK.
  2. Replace value data “” in these registry keys:
    HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\Start Page (64-bit)
    HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page
    HKCU\Software\Microsoft\Internet Explorer\Main\Start Page
  3. Locate “HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}” registry key and change the following value data for these value names:
    FaviconURL (“”)
    FaviconURLFallback (“”)
    TopResultURL (“”)
    URL (“”)
  4. Close the registry editor.
Download Spyware Removal Tool to Remove*
  • Quick & tested solution for removal.
  • 100% Free Scan for Windows

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.