Globasearch.com

By JubileeX in Browser Hijackers

Threat Scorecard

Ranking: 5,628
Threat Level: 50 % (Medium)
Infected Computers: 8,925
First Seen: August 10, 2015
Last Seen: September 18, 2023
OS(es) Affected: Windows

Globasearch.com – A Fake Search Engine Associated with Malware

Globasearch.com is disguised as a legitimate search engine. However, all this website does is display the same results as the Google search engine, but including a large number of advertisements and malicious content interspersed within the text. So, one may think, why would anyone use Globasearch.com when they can instead use Google or any of the other reliable search engines on the market? The fact is that most of the people that visit Globasearch.com or use Globasearch.com's search engine are not doing so because they want to, but because they are forced to do so. Globasearch.com is a browser hijacker. Browser hijackers take control of an Internet browser and force it to visit specific web pages, display pop-up windows and relay private information to a third party. There are a variety of browser hijackers that are associated with Globasearch.com. According to ESG PC security researchers, not all browser hijackers are the same; a browser hijacker may take the form of a fairly innocuous toolbar to a full-fledged rootkit infection.

Browser Hijackers and the Fake Search Engine Globasearch.com

Globasearch.com is associated with several different kinds of browser hijackers. The most well-known of these is the Google Redirect Virus, a browser hijacker that is also closely linked to the TDSS Rootkit. The Google Redirect Virus is not a proper virus (because it does not replicate itself or spread on its own) but is more correctly considered as a Trojan. The Google Redirect Virus receives its name because it changes the results on any searches carried out on the Google search engine. While the results displayed will be the same, the links for each result will have been changed so that they will link to malicious websites, such as Globasearch.com. Other browser hijackers may simply take you to websites like Globasearch.com directly, whenever you click on a link or type an address into the navigation bar in your Internet browser. Browser hijackers associated with Globasearch.com may also change plain text on any web pages displayed into hyperlinks leading to malicious websites like Globasearch.com. If your Internet browser is forcing you to visit the fake search engine Globasearch.com, this is a sign of a severe malware infection. ESG security researchers recommend scanning your computer system in search for any browser hijackers that may be lying in wait. You should not ignore any redirects to the Globasearch.com website; this is a sure way of infecting your computer system with other, even more dangerous malware problems.

File System Details

Globasearch.com may create the following file(s):
# File Name Detections
1. uacinit.dll
2. VOIDmainqt.dll
3. _VOID.sys
4. _VOID.dll
5. wdmaud.sys
6. UAC.sys
7. 4DW4R3c.dll
8. C:\Windows\System32\Drivers\etc\Hosts\malicious host of Globasearch.com
9. UAC.dll
10. 4DW4R3.sys
11. 4DW4R3.dll
12. _VOID.dat
13. UAC.db
14. 4DW4R3sv.dat
15. %Temp%\tmp[RANDOM NUMBERS].tmp
16. UAC.dat
17. UAC.tmp
18. %System%\UAC[RANDOM CHARACTERS].dat
19. uactmp.db
20. _VOID.tmp

Registry Details

Globasearch.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UACd.sys
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\CustomizeSearch=[site address]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\_VOID[RANDOM CHARACTERS]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SearchAssistant=[site address]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\_VOIDd.sys
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CD_Proxy
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]

URLs

Globasearch.com may call the following URLs:

globasearch.com

Trending

Most Viewed

Loading...