Hohosearch.com

By CagedTech in Browser Hijackers

Threat Scorecard

Ranking: 6,610
Threat Level: 50 % (Medium)
Infected Computers: 13,676
First Seen: March 16, 2016
Last Seen: September 5, 2023
OS(es) Affected: Windows

The Hohosearch.com search provider is operated by Hohosearch LLC that is not registered as an Internet service provider correctly, and users should avoid the Hohosearch.com site. The Hohosearch.com search provider may be promoted as a customized search engine that is best suited to Web surfers in Asia. It may be deemed as strange by some users because the Hohosearch.com page does not have versions for Web surfers from Russia, China, Japan and India and supports only an English version. In reality, the Hohosearch.com search engine is not patented by Hohosearch LLC and is a twisted version of Google that is crafted to show numerous advertisements and is not likely to be helpful in any way. The Hohosearch.com site is associated with a browser hijacker that may arrive on your computer bundled with free applications like Downware and FourFinders and cause browser crashes on a regular basis. The browser hijacker at hand may appear in your Plug-ins Manager with the name HohoSearch Enhancer and HohoSearch Toolbar.

The Hohosearch plug-in may install its files in the hidden AppData folder and work in your system background continuously. Computer users that use Google.com as their start page may not notice significant differences with Hohosearch.com because the Hohosearch.com site is made to resemble Google closely. Also, the Hohosearch.com browser hijacker may redirect users to videos, text and images found with Bing and Yahoo as well. For example, a video search on Hohosearch.com might lead users to the results page of Yahoo and an image search would lead you to Bing.com. The code of the Hohosearch.com page suggests that it functions as a redirect-gateway that may redirect users to phishing pages and harmful domains. Security investigators report that the Hohosearch.com browser hijacker is related to the Chroomium Browser that is an ad-supported clone of Google Chrome and lacks essential security features. Computer users should not install HohoSearch plug-in to avoid being exposed to Man-in-the-Middle attacks and malvertising. You should consider employing the services of a reliable anti-malware shield to protect your Windows PC and make sure browser hijackers and badware are not running on your machine.

SpyHunter Detects & Remove Hohosearch.com

File System Details

Hohosearch.com may create the following file(s):
# File Name MD5 Detections
1. Drvcoretsk.exe 79ea00725e9e522050c99bdd10e25e36 981
2. Drvcoresrv.exe.vir 761362671a52bc96fe6d6cd236664366 870
3. Drvcoresrv.exe f9e641fa29146f804b5fb41f26324474 282
4. Drvcoretsk.exe 6b186143e451fcd2bc856820204f8993 101
5. Drvcoresrv.exe 4391b003bc203712fa359dc1e7271fe7 18
6. Drvcoretsk.exe e6b075237077a7d259a73d8b235004ea 9
7. Drvcoretsk.exe ff37137c933f4b2671781d156f353232 8
8. Drvcoresrv.exe 657edb0725beb721d6dfdf7765354e1f 7
9. Drvcoretsk.exe 37e1b96c94901f79a27da66ffe57fb80 6
10. Drvcoretsk.exe 65c91e728939e32f3e50a8ea3b61e577 4
11. Drvcoresrv.exe d44b7c3ae931aff48b4ad6392a93a062 2
12. Drvcoretsk.exe e43645c65045e3f59f6bd2e8385a7432 2
13. Drvcoresrv.exe 00c260b00bd02470e717b9b2229b8116 2
14. Drvcoresrv.exe 53f621a859cfdc598d972a5f690c09c8 2
15. Drvcoretsk.exe 0cc857d6a62de30d6faaa96a5b88707c 2
16. Drvcoretsk.exe 20fb9077cff0d9efe8b07c60d1f15874 1
17. Drvcoresrv.exe a24ba486be8322064cab697fbd6afcdd 1
18. Drvcoresrv.exe 98c9187dd980e274c5ea01574be1ddef 1

Registry Details

Hohosearch.com may create the following registry entry or registry entries:
File name without path
http_www.hohosearch.com_0.localstorage
http_www.hohosearch.com_0.localstorage-journal
Regexp file mask
%WinDir%\System32\Tasks\Arahick Controls
%WinDir%\System32\Tasks\Chaekgrewege Verfier
%WinDir%\System32\Tasks\Pituward Debuger
SOFTWARE\hohosearchSoftware
Software\Microsoft\Internet Explorer\DOMStorage\hohosearch.com
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Arahick Controls
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Chaekgrewege Verfier
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Pituward Debuger
SOFTWARE\Wow6432Node\hohosearchSoftware

Directories

Hohosearch.com may create the following directory or directories:

%PROGRAMFILES%\Anumle
%PROGRAMFILES%\Arikoiedrumition
%PROGRAMFILES%\Arkosshocult
%PROGRAMFILES%\Atatuch
%PROGRAMFILES%\Bleghtatake
%PROGRAMFILES%\Bmotain
%PROGRAMFILES%\Bodekmuocult
%PROGRAMFILES%\Chaekgrewege
%PROGRAMFILES%\Chuqospatureied
%PROGRAMFILES%\Ckavesycwoy
%PROGRAMFILES%\Ckodeingdrenigh
%PROGRAMFILES%\Cluudomclwuse
%PROGRAMFILES%\Clzghthupase
%PROGRAMFILES%\Decoing
%PROGRAMFILES%\Dravsynlether
%PROGRAMFILES%\Gawosnuwose
%PROGRAMFILES%\Gizotionghequle
%PROGRAMFILES%\Hqationqwich
%PROGRAMFILES%\Lattionmesos
%PROGRAMFILES%\Lnspmekiing
%PROGRAMFILES%\Menikwaesh
%PROGRAMFILES%\Nvodrqotain
%PROGRAMFILES%\Phenuther
%PROGRAMFILES%\Phubish
%PROGRAMFILES%\Ploftdrewother
%PROGRAMFILES%\Puntehesy
%PROGRAMFILES%\Pwtyfemuk
%PROGRAMFILES%\Reeoentrveent
%PROGRAMFILES%\Roktainheqes
%PROGRAMFILES%\Rowicultshimash
%PROGRAMFILES%\Shoruyjjsp
%PROGRAMFILES%\Wohegh
%PROGRAMFILES%\hohobnd
%PROGRAMFILES(x86)%\Anumle
%PROGRAMFILES(x86)%\Arikoiedrumition
%PROGRAMFILES(x86)%\Arkosshocult
%PROGRAMFILES(x86)%\Atatuch
%PROGRAMFILES(x86)%\Bleghtatake
%PROGRAMFILES(x86)%\Bmotain
%PROGRAMFILES(x86)%\Bodekmuocult
%PROGRAMFILES(x86)%\Chaekgrewege
%PROGRAMFILES(x86)%\Chuqospatureied
%PROGRAMFILES(x86)%\Ckavesycwoy
%PROGRAMFILES(x86)%\Ckodeingdrenigh
%PROGRAMFILES(x86)%\Cluudomclwuse
%PROGRAMFILES(x86)%\Clzghthupase
%PROGRAMFILES(x86)%\Decoing
%PROGRAMFILES(x86)%\Dravsynlether
%PROGRAMFILES(x86)%\Gawosnuwose
%PROGRAMFILES(x86)%\Gizotionghequle
%PROGRAMFILES(x86)%\Hqationqwich
%PROGRAMFILES(x86)%\Lattionmesos
%PROGRAMFILES(x86)%\Lnspmekiing
%PROGRAMFILES(x86)%\Menikwaesh
%PROGRAMFILES(x86)%\Nvodrqotain
%PROGRAMFILES(x86)%\Phenuther
%PROGRAMFILES(x86)%\Phubish
%PROGRAMFILES(x86)%\Ploftdrewother
%PROGRAMFILES(x86)%\Puntehesy
%PROGRAMFILES(x86)%\Pwtyfemuk
%PROGRAMFILES(x86)%\Reeoentrveent
%PROGRAMFILES(x86)%\Roktainheqes
%PROGRAMFILES(x86)%\Rowicultshimash
%PROGRAMFILES(x86)%\Shoruyjjsp
%PROGRAMFILES(x86)%\Wohegh
%PROGRAMFILES(x86)%\hohobnd
%ProgramFiles(x86)%\Pituward
%ProgramFiles(x86)%\Prajdomreumit
%ProgramFiles(x86)%\Witupygroqoph

URLs

Hohosearch.com may call the following URLs:

, "hohosearch");
hohosearch.com\

Trending

Most Viewed

Loading...