Search.us.com

Search.us.com Description

ScreenshotSearch.us.com is a low-quality search engine that ESG security researchers have associated with browser hijacker malware. Browser hijackers take over the victim's web browser, modifying its settings without the computer user's authorization. Among these changes, the most important is replacing the web browser's homepage with the Search.us.com website as well as adding a toolbar which directs computer users to use Search.us.com for their online searches. There are several versions of the Search.us.com website, with various web pages hosted on this same domain. However, due to Search.us.com's connection with browser hijackers, ESG security researchers strongly advise computer users to avoid carrying out their searches on this low-quality, unsafe online search engine. In fact, contact with the Search.us.com website should be followed by a thorough scan of your computer and constant redirects to the Search.us.com web page should be treated as symptoms of a malware infection.

Criminals and unscrupulous online marketers will often sneak malware associated with Search.us.com onto the victim's computer without the computer user's knowledge. This is commonly done by bundling these kinds of malicious toolbars or web browser add-ons and extensions along with other, usually freeware applications. When computer users download a specific freeware program from a third party website, it will have been bundled with unsafe web browser add-ons that are also installed discreetly on the victim's computer. This is especially common when it comes to media players. When wanting to view a movie online, the victim will be greeted with an error message claiming that a specific media player or video codec is required to view that movie. This message will also 'helpfully' direct the computer users to a website where that media player or codec can be downloaded, or initiate the download directly. Unfortunately, installing a freeware program this way will often result in a malware infection.

Computer users will seldom notice that their computer has been compromised until their homepage is changed to Search.us.com. Unfortunately, removing the downloaded freeware program will do nothing to remove malware associated with Search.us.com. It will be necessary to take extra steps to isolate malicious browser add-ons associated with Search.us.com and delete them manually. ESG malware researchers advise using a reliable anti-spyware or anti-malware program to delete any malware or potentially unwanted programs that may be causing redirects to Search.us.com.

Infected with Search.us.com? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect Search.us.com

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of Search.us.com outbreaks and other threats from global to local level.

File System Details

Search.us.com creates the following file(s):
# File Name Detection Count
1 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\oafgiofgeennpcokipjganbklfgajgfm 94
2 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\bkpkdkcbjnmfpgcgnbcelkldnnkapgjl 93
3 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\ajddgoknkimjjefmncbjbiaonllmimba 92
4 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\kmpnlhommpchmgmfekncjpioldabfamj 91
5 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\oociobpdgomdlfhikobndjchicnfifih 82
6 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\kjloililbcdmgjodpcbbnafgedgnfkij 80
7 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\kfjghcjfaannijmeanfcnehaijfjinlf 61
8 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\fonogdmokhdlkjgjngmleecneemikcgc 40
9 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\pakpomnopclhcehpalfkcngdalfbkhcl 27
10 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\lbpginjpofaamceieccnpmjiiacigcmi 26
11 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\cbacbdanfecdkjdjfoojfgeefpnogdaa 21
12 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\ppeofeodaljfbamplgpdfhgedbognmic 10
13 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\egopmgbefdlpfafcphiejkipladlaefn 6
14 %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\acgihnoalpephlbnebgakkopakehchhc 5
15 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\acgihnoalpephlbnebgakkopakehchhc 4

More files

Registry Details

Search.us.com creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
Software\Microsoft\Internet Explorer\SearchScopes\{A2A01D5F-6EDB-47E8-8B9C-D507AB773B98}
SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchUS-TB10511_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchUS-TB10511_RASMANCS
Software\Microsoft\Windows\CurrentVersion\Uninstall\{90BF8ED5-5FA9-4A0D-8D59-3DA91894DC26}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{F249A95D-D33F-4FCF-B638-99D75A25F8FD}
Software\Microsoft\Internet Explorer\SearchScopes\{B1A51A6F-7924-4CA4-A8FA-5B1FCFA5493A}
Software\Microsoft\Internet Explorer\SearchScopes\{19D6F58D-6A94-40A5-A064-DC3C2F527C8B}
Software\Microsoft\Internet Explorer\SearchScopes\{764D31C5-8A25-4C11-B9B0-D2F602373BBB}
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9AE98664-94A0-4420-BA2D-1B07B4B7E4B0}
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9D5E02F9-A3A8-4052-A024-9B8F297286A9}
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC885BEE-FA4C-40FB-8F01-E879B581E89B}
Software\Microsoft\Internet Explorer\SearchScopes\{16B1B41B-7DE9-4B41-9A25-EE3DB2D7962D}
Software\Microsoft\Internet Explorer\SearchScopes\{9DA1D28D-6EF5-4FDF-805E-9040E7B43C85}
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3456FEA4-3D2E-4964-BC97-C92CE5EA1B6C}
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{627CEE83-7CAC-4C92-82CB-6AA145E9C218}
Software\Microsoft\Internet Explorer\SearchScopes\{80A02AF1-AB1A-4733-8420-1FC9AF76CDC9}
Software\Microsoft\Internet Explorer\SearchScopes\{C22C8C6C-0EFE-4CE8-B35E-4D71DD60E9A0}
Software\Microsoft\Internet Explorer\SearchScopes\{E7753205-C1B8-4B54-96F9-22910D333C2B}
Software\Microsoft\Internet Explorer\SearchScopes\{57074875-9015-4A95-96FC-DAF02F784B81}
Software\Microsoft\Internet Explorer\SearchScopes\{52086D78-6D5C-42A0-AA31-D90E883F0F87}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar, value: {BC8D11AC-7EBB-45EC-9965-A7ED9EE47FF3}
SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: {BC8D11AC-7EBB-45EC-9965-A7ED9EE47FF3}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{072743C4-0534-42CA-BB97-D9B75D812B19}
Software\Microsoft\Internet Explorer\SearchScopes\{EB7FF01A-090C-4486-8A21-1910396D79AE}
Software\Microsoft\Internet Explorer\Approved Extensions, value: {BC8D11AC-7EBB-45EC-9965-A7ED9EE47FF3}
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
{0EE9FBD8-1FBB-4BA8-BA6A-97AB0D37683F}
{3AADDD9E-83FA-494C-A873-44DD416F1881}
{F249A95D-D33F-4FCF-B638-99D75A25F8FD}
{90BF8ED5-5FA9-4A0D-8D59-3DA91894DC26}
{93D81821-4D06-4C6F-9E13-1E80DCAC127E}
{3AC4DC61-1F64-4B48-9C2E-777B30434C28}
{3B1E2202-AFBF-487A-9963-B4B558472F83}
{9AE98664-94A0-4420-BA2D-1B07B4B7E4B0}
{9D5E02F9-A3A8-4052-A024-9B8F297286A9}
{4B14F8F6-91F6-4026-896C-3236E89C2031}
{7CEEDC7D-FEF6-4A0E-BE59-2E68974F1F3F}
{AC885BEE-FA4C-40FB-8F01-E879B581E89B}
{A48C2030-588E-464A-9283-F0894860E883}
{B4CFEB0F-DDCF-4500-BF13-8060A73F86C6}
{3456FEA4-3D2E-4964-BC97-C92CE5EA1B6C}
{2950647B-2B96-4204-AFDC-BC17621F5B4E}
{B8072C1C-CA68-4C78-AA11-F57EF46D99A1}
{8428EE0B-91F4-4C9C-B86C-17FA82EF7FEF}
{A74DE60B-628C-42AE-9EF9-D7ACC02D9F2B}
{A8743CD2-C46F-406F-B677-FD222738C23C}
{DEE56552-1A9A-4671-A725-B5B22E55C2F0}
{BA19AEE8-442A-4496-A8EB-8BC9BE4DBA70}
{F80D0961-250B-4BAE-B41B-AD0673E9F73C}
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{19D6F58D-6A94-40A5-A064-DC3C2F527C8B}
{23FAAF37-5E6C-447F-A83F-87E04B07EA95}
{721BC79B-42D0-4000-B0F0-D20C7255769F}
{90BF8ED5-5FA9-4A0D-8D59-3DA91894DC26}
{9DA1D28D-6EF5-4FDF-805E-9040E7B43C85}
{B4CFEB0F-DDCF-4500-BF13-8060A73F86C6}
{E7E61E39-AB0A-4BF1-A65C-C949FA0992C4}

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 3 + 5 ?