Findamo.com

By Domesticus in Browser Hijackers

Threat Scorecard

Ranking: 7,171
Threat Level: 50 % (Medium)
Infected Computers: 3,499
First Seen: September 2, 2014
Last Seen: September 19, 2023
OS(es) Affected: Windows

Findamo.com Image

Despite its appearance, Findamo.com is not a reliable search engine. This is because Findamo.com has been set up with the main purpose of delivering advertisements and directing computer users towards websites that make heavy use of pay-per-click marketing techniques. However, the main danger associated with Findamo.com is the promotion of this low-level search engine by the criminals using a dangerous browser hijacker. In fact, the bulk of Findamo.com's traffic comes from computer users that have become infected with these kinds of malware threats. The main browser hijacker associated with Findamo.com is commonly referred to as the 'Google Redirect Virus.' This browser hijacker, that normally is a Trojan, is often a component in the ZeroAccess or Sirefef rootkit. ESG security researchers warn that computer users experiencing constant redirects to websites similar to Findamo.com should scan their computer systems; these kinds of redirects are a definite symptom of a severe malware infestation.

How Criminals Force You to Visit Findamo.com Repeatedly

While Findamo.com itself is not too dangerous, the rootkit that is used to force computer users to visit Findamo.com poses a severe security risk for an infected computer. The infamous ZeroAccess rootkit can take over the victim's entire operating system and, by making dangerous modifications to the system's settings, this rootkit can fundamentally change how the infected computer connects to websites. In this way, criminals can force victims to visit Findamo.com against their will. The browser redirect will usually occur after carrying out an online search using popular search websites like Bing, Yahoo and Google. Malware associated with Findamo.com can alter the links in the search results in order to make them link to Findamo.com instead of directing the computer user to that link's corresponding website.

How to Stop Redirects to the Findamo.com Search Engine

Many security programs have trouble dealing with rootkit infections like ZeroAccess. This is because this malware threat resides in areas of your hard drive that are inaccessible for many anti-virus programs. Because of this, ESG security researchers recommend the use of a specialized anti-rootkit application or the use of a strong anti-malware program with anti-rootkit technology. Once the actual rootkit component of Findamo.com-related malware is removed, removing the other components of these kinds of infections is usually no problem for most competent anti-malware applications. To avoid becoming infected again, ESG security analysts recommend a combination of safe browsing, being careful with any online downloads, and keeping all security software up to date and running at all times.

File System Details

Findamo.com may create the following file(s):
# File Name Detections
1. %AllUsersProfile%\{RANDOM CHARACTERS}\*.lnk

Registry Details

Findamo.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current\Winlogon\"Shell" = "{RANDOM CHARACTERS}.exe"
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\{RANDOM CHARACTERS}

URLs

Findamo.com may call the following URLs:

http://www.findamo.com/search.html?

Trending

Most Viewed

Loading...