Globasearch.com

Globasearch.com – A Fake Search Engine Associated with Malware


Globasearch.com is disguised as a legitimate search engine. However, all this website does is display the same results as the Google search engine, but including a large number of advertisements and malicious content interspersed within the text. So, one may think, why would anyone use Globasearch.com when they can instead use Google or any of the other reliable search engines on the market? The fact is that most of the people that visit Globasearch.com or use Globasearch.com's search engine are not doing so because they want to, but because they are forced to do so. Globasearch.com is a browser hijacker. Browser hijackers take control of an Internet browser and force it to visit specific web pages, display pop-up windows and relay private information to a third party. There are a variety of browser hijackers that are associated with Globasearch.com. According to ESG PC security researchers, not all browser hijackers are the same; a browser hijacker may take the form of a fairly innocuous toolbar to a full-fledged rootkit infection.

Browser Hijackers and the Fake Search Engine Globasearch.com


Globasearch.com is associated with several different kinds of browser hijackers. The most well-known of these is the Google Redirect Virus, a browser hijacker that is also closely linked to the TDSS Rootkit. The Google Redirect Virus is not a proper virus (because it does not replicate itself or spread on its own) but is more correctly considered as a Trojan. The Google Redirect Virus receives its name because it changes the results on any searches carried out on the Google search engine. While the results displayed will be the same, the links for each result will have been changed so that they will link to malicious websites, such as Globasearch.com. Other browser hijackers may simply take you to websites like Globasearch.com directly, whenever you click on a link or type an address into the navigation bar in your Internet browser. Browser hijackers associated with Globasearch.com may also change plain text on any web pages displayed into hyperlinks leading to malicious websites like Globasearch.com. If your Internet browser is forcing you to visit the fake search engine Globasearch.com, this is a sign of a severe malware infection. ESG security researchers recommend scanning your computer system in search for any browser hijackers that may be lying in wait. You should not ignore any redirects to the Globasearch.com website; this is a sure way of infecting your computer system with other, even more dangerous malware problems.

Type: Browser Hijackers

Infected with Globasearch.com? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect Globasearch.com

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Globasearch.com has typically the following processes in memory:

uacinit.dll
VOIDmainqt.dll
_VOID.sys
_VOID.dll
wdmaud.sys
UAC.sys
4DW4R3c.dll
C:\Windows\System32\Drivers\etc\Hosts\malicious host of Globasearch.com
UAC.dll
4DW4R3.sys
4DW4R3.dll

Globasearch.com creates the following files in the system:

_VOID.dat
UAC.db
4DW4R3sv.dat
%Temp%\tmp[RANDOM NUMBERS].tmp
UAC.dat
UAC.tmp
%System%\UAC[RANDOM CHARACTERS].dat
uactmp.db
_VOID.tmp

Globasearch.com creates the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UACd.sys
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\CustomizeSearch=[site address]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\_VOID[RANDOM CHARACTERS]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SearchAssistant=[site address]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\_VOIDd.sys
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CD_Proxy
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 7 + 3 ?