Threat Database Browser Hijackers Default-Search.net

Default-Search.net

By GoldSparrow in Browser Hijackers

Threat Scorecard

Ranking: 982
Threat Level: 50 % (Medium)
Infected Computers: 263,974
First Seen: May 2, 2014
Last Seen: March 23, 2024
OS(es) Affected: Windows

Default-Search.net is a low-grade search engine that has been correlated with Potentially Unwanted Program infections. Default-Search.net is linked to Web browser redirects, changes to affected Web browser settings and a large number of other threat-like behaviors on affected computers. If your computer is presenting symptoms associated with Default-Search.net, security researchers strongly advise the removal of any PUPs installed on your computer. PUPs associated with Default-Search.net are usually bundled with low quality freeware. Because of this, you can prevent the installation of PUPs associated with Default-Search.net by guarding the installation process of any new software carefully. In most cases, choosing custom installation and only selecting necessary components to be installed can prevent the installation of these types of unwanted components.

Common Issues Associated with Default-Search.net

There have been observed a wide number of issues related to Default-Search.net and its associated PUPs. If your Web browser is presenting any of the following symptoms, this may indicate that a PUP associated with Default-Search.net has been installed on your computer:

  • PUPs associated with Default-Search.net may change the affected Web browser's homepage, default search engine and default new tab or window website to Default-Search.net.
  • PUPs linked to Default-Search.net may display pop-up windows and other types of pop-up advertisements associated with Default-Search.net. These pop-ups may appear quite frequently, seriously interfering with computer users' activities on affected Web browsers. Default-Search.net has also been linked to banner advertisements, in-text marketing advertisements and other forms of intrusive advertising.
  • PUPs associated with Default-Search.net may take over the affected Web browser, forcing it to visit Default-Search.net repeatedly. Default-Search.net redirects may be quite disruptive, interrupting affected computer users' activities frequently.

Aliases

4 security vendors flagged this file as malicious.

Anti-Virus Software Detection
McAfee Artemis!A392180ACD34
McAfee Artemis!6C0E99A88F43
AVG Toolbar.SearchSuite
Fortinet Riskware/Toolbar_SearchSuite

SpyHunter Detects & Remove Default-Search.net

File System Details

Default-Search.net may create the following file(s):
# File Name MD5 Detections
1. smdmfmgrc3.cfg 5ed27a4dcb65a9beb1da5248e5b1e50d 4,743
2. smdmfmgrc3.cfg 20de9b74ea81432e44f4e9c9b4af8fc7 3,847
3. smdmfmgrc3.cfg 83588a9fa80e4fadbc2bee4d22d812f7 3,643
4. smdmfmgrc3.cfg 3ea74fc218ea88ca70f07ed0285c0fc7 3,438
5. smdmfmgrc3.cfg c29d46407e15f1c7aca8bb619d1a2671 3,237
6. smdmfmgrc3.cfg a0011b8b83c69924dc078254143876cd 3,137
7. smdmfmgrc3.cfg 66fedd973873d5da33d1a58f38f32586 3,110
8. smdmfmgrc3.cfg.vir 5f4e2340edce27b6eaca191509f20f67 3,105
9. smdmfmgrc3.cfg ebb50c7c631827d3f672b304261b65a5 2,918
10. smdmfmgrc3.cfg 3281c9367d7443d520bf1410c2f3ae4f 1,958
11. smdmfmgrc2.cfg fcfa71676ec4e05cb997e55ca31e5ddf 1,744
12. smdmfmgrc3.cfg 22ddfa6ef3fcd91e475786736d7ef385 1,551
13. smdmfmgrc3.cfg dba29a1901addfc020dc38c99ad230c0 1,472
14. smdmfmgrc3.cfg e40c3eaf3851e44f22c7485abb7ce9ea 1,421
15. smdmfmgrc3.cfg 9e0b37b2a8862fd6f7bfa45b9faa06e7 1,036
16. smdmfmgrc3.cfg a9f348403170fece9f72def38d3522f4 1,028
17. smdmfmgrc2.cfg 3f0312e1d2fdfd5859b3aa2d7464a7f6 862
18. smdmfmgrc2.cfg b75edc95360c589af120948cf3599371 575
19. smdmfmgrc2.cfg a2766a4e4edc956743707f3299e5662c 496
20. smdmfmgrc2.cfg 8785c4f8906217b3110f59c724466908 134
21. smdmfmgrc2.cfg 863adcdb3ac38611ad5d0471d0f156d7 84
22. smdmfmgrc2.cfg ae98dd053d3d8d12db2022cfb81d452b 73
23. smdmfmgrc2.cfg 32468def2b37c6988dd0662d95f3e47f 69
More files

Registry Details

Default-Search.net may create the following registry entry or registry entries:
CLSID
{54739D49-AC03-4C57-9264-C5195596B3A1}
{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B}
{AA760BA8-5862-4BC5-9263-4452CBC0B264}
{E1842850-FB16-4471-B327-7343FBAED55C}
File name without path
http_www.default-search.net_0.localstorage
http_www.default-search.net_0.localstorage-journal
Regexp file mask
%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Browse and Search the Internet.lnk
%PROGRAMFILES%\Mozilla Firefox\browser\searchplugins\default-search.xml
%ProgramFiles(x86)%\Mozilla Firefox\browser\searchplugins\default-search.xml
SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard
SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard.1
Software\Microsoft\Internet Explorer\Approved Extensions\{54739D49-AC03-4C57-9264-C5195596B3A1}
Software\Microsoft\Internet Explorer\DOMStorage\www.default-search.net
SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2492}
Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2496}
Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}
Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2516}
Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2520}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
SOFTWARE\SmdmF
Software\SystemK
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2492}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2496}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2498}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2516}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2520}
SOFTWARE\Wow6432Node\SmdmF
SOFTWARE\Wow6432Node\SystemK
SYSTEM\ControlSet001\services\SmdmFService
SYSTEM\ControlSet001\services\SystemkService
SYSTEM\ControlSet002\services\SmdmFService
SYSTEM\ControlSet002\services\SystemkService
SYSTEM\CurrentControlSet\services\SmdmFService
SYSTEM\CurrentControlSet\services\SystemkService

Directories

Default-Search.net may create the following directory or directories:

%ALLUSERSPROFILE%\Application Data\smdmf
%ALLUSERSPROFILE%\Application Data\systemk
%ALLUSERSPROFILE%\smdmf
%ALLUSERSPROFILE%\systemk
%AppData%\FirefoxToolbar\Settings Manager\smdmf
%PROGRAMFILES%\Assets Manager\smdmf
%PROGRAMFILES%\Settings Manager\smdmf
%PROGRAMFILES%\Settings Manager\systemk
%PROGRAMFILES(x86)%\Settings Manager\systemk

URLs

Default-Search.net may call the following URLs:

default-search.net
https://www.default-search.net/search?p=

Trending

Most Viewed

Loading...