By GoldSparrow in Browser Hijackers

Expandsearchanswers.com Image

The year 2011 has seen a marked rise in the number of fake search engines linked to browser hijackers. According to ESG malware researchers, up to the year 2011 the main trend within the malware industry involved the sale of rogue anti-virussecurity programs and scareware in general. However, fake search engines such as Expandsearchanswers.com have steadily started to increase their online presence since the summer of 2011. Expandsearchanswers.com is a fake search engine, linked to the Google Redirect Virus and other search engine hijackers. Expandsearchanswers.com is made up of a white and red interface over a minimalist black background, with genuine-looking links set up on the upper-right corner. Like most rogue search engines, Expandsearchanswers.com is associated with a browser hijacker. Its victims have reported entering their normal address or query into the Internet browser, only to be taken to the Expandsearchanswers.com website. If you have visited Expandsearchanswers.com for any reason, ESG PC security researchers strongly recommend scanning and disinfecting your computer system with a legitimate anti-malware tool. Expandsearchanswers.com is closely linked to various malware infections.

How a Legitimate Search Engine Can Take You to Expandsearchanswers.com

Because Expandsearchanswers.com is linked to search engine hijackers, the first sign of infection will usually come after carrying out a search on a legitimate search engine. Browser hijackers, such as the Google Redirect Virus, specialize in altering the results on legitimate search engines (mainly on Google, but may also affect other search engines such as Yahoo or Bing.) The victim will perform a search on a legitimate search engine and will receive results that appear to be normal at first glance. However, the Google Redirect Virus is a Trojan that is designed to alter the links contained in the search results. This means that, once the victim clicks on a search result, instead of being directed to the website corresponding to that result, they are directed to the Expandsearchanswers.com website. There, many inexperienced computer users may be fooled into thinking that they can simply try their search again on the Expandsearchanswers.com fake search engine. ESG PC security researchers recommend against doing this. Any searches performed on Expandsearchanswers.com will not yield legitimate results. Rather, they will return a variety of spam and malicious websites that have payed for Expandsearchanswers.com's services. Do not fall for the Expandsearchanswers.com scam, use a reliable anti-malware application to destroy any browser hijackers lurking on your computer system.

File System Details

Expandsearchanswers.com may create the following file(s):
# File Name Detections
1. %Documents and Settings%\All Users\Application Data\mazuki.dll
2. %WINDOWS%\system32\sstray.exe
3. %Documents and Settings%\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
4. %Documents and Settings%\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
5. %WINDOWS%\system\BCBSMP35.BPL

Registry Details

Expandsearchanswers.com may create the following registry entry or registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"

1 Comment

patrick l kelley Reply

How can I remove my own virises from clicking im not good with computor send step by step Im 75 not computor smart


Most Viewed