|
Nov
10
|
Malware Analysis:
The issue of Search Engine hijacking is among the top subjects of the present-day ongoing cybersecurity process. Beyond doubt, a dominating niche in this context is being occupied by the so-called “cc Search” service. Computer fraudsters have been producing multiple domains that appear to be the targeted URLs representing the above-mentioned scheme. As of now, we are aware of about 30 such domains, each one designed exactly as the rest. All of them have domain names following a certain structural pattern, i.e. the [random adjective]searchsystem.com template. People usually get redirected to those pages from SERPs (Search Engine Results Pages) retrieved via Goodle, Bing or other similar engines. This happens due to the presence of a script that embeds a hidden browser helper object. This means all the links listed get configured to divert you to a certain site that has been hard coded into your system. Anyway, if you are experiencing browser redirects to one of the domains listed below against your will, be sure to detect the lurking infection causing this and get rid of it without fail. Here are the URLs involved with this scam:
- adjectivesearchsystem.com
- admirablesearchsystem.com
- colossalsearchsystem.com
- coolsearchsystem.com
- corkingsearchsystem.com
- crackajacksearchsystem.com
- eminentsearchsystem.com
- eximioussearchsystem.com
- famoussearchsystem.com
- greatsearchsystem.com
- immensesearchsystem.com
- jollysearchsystem.com
- marveloussearchsystem.com
- nailingsearchsystem.com
- neatsearchsystem.com
- noblesearchsystem.com
- raresearchsystem.com
- rattlingsearchsystem.com
- remarkablesearchsystem.com
- signalsearchsystem.com
- somesearchsystem.com
- splendidsearchsystem.com
- strikingsearchsystem.com
- swellsearchsystem.com
- uncommonsearchsystem.com
- unexceptionablesearchsystem.com
- uniquesearchsystem.com
- unusualsearchsystem.com
- wickedsearchsystem.com
- wonderfulsearchsystem.com
- super-dupersearchsystem.com
- gooooodsearchsystem.com
If this or similar problem occurs with your Internet activity, you might try the fix described in our removal section (see below).
Determine if your PC is infected with cc Search virus:
Download cc Search Hijacker Free Scanner with Remover
cc Search Landing Page Screenshot:
How to remove this malware manually:
To perform manual removal of this hijacker, you should do the following:
Delete the following corrupt files:
- %WINDOWS%\System32\consrv.dll
- %WINDOWS%\System32\Drivers\mrxsmb.sys
Remove registry entries related to Us-srch-system.com hijacker:
- SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4
Please, note that manual removal of cc Search redirect malware is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:
 |
Download cc Search Hijacker Removal Tool |  |