playMusic New Tab

The playMusic New Tab browser extension appears to be published by Playzonenow.com, and it can be found on Chrome.google.com/webstore/detail/playmusic-new-tab/ianfjikclimlehpjgjpcmaopbkpbnjic. Web surfers are lead to believe that the playMusic New Tab offers a convenient Web search that includes a new tab with music-related features. Installing the playMusic New Tab allows the extension to change your default tab settings to 'playMusic New Tab|chrome-extension://ianfjikclimlehpjgjpcmaopbkpbnjic/index.html' and receive the following rights:

• Read and change all your data on the websites you visit.
• Replace the page you see when opening a new tab.
• Read and change your browsing history.
• Display notifications.

The playMusic New Tab from Playzonenow.com adds links to music clips published on YouTube and a search bar powered by Music.eanswers.com, which leads users to search results on Yahoo. The Music.eanswers.com subdomain is associated with many ad-supported extensions on the Chrome Web Store which we have mentioned before and include tools like the Music Center Search from Playmediacenter.com, the MusicBox Search from Supperappbox.com and the OnlineMusic Search from Bettersearchtools.com. Computer security researchers report that playMusic New Tab is a clone of the applications mentioned before. The playMusic New Tab is used to redirect Web traffic to ads on Yahoo and sponsored search results. After installing the playMusic New Tab, users are shown a new tab loaded with:

h[tt]p://movie.ienjoyapps[.]com/wim/lp/offer/lp/7/?t=gomusix&ref=unknown&extname=iTheatre%20Search%20Plus&extid=dmfdjkfpljiniadicampijngdedfppfh&yid=tidp&vertical=movie&hub=ienjoyapps.com&step=1&next=offer&tid=156&landingp=7&&ct=ye10ofr7156

You may be lead to believe that installing the iTheatre Search Plus extension from Ienjoyapps.com and Chrome.google.com/webstore/detail/itheatre-search-plus/dmfdjkfpljiniadicampijngdedfppfh is the second step in adding the playMusic New Tab to Google Chrome. However, you are not required to add iTheatre Search Plus to finish the installation of playMusic New Tab. If you chose to proceed with installing iTheatre Search Plus, your default search engine would be changed to Movix.searchalgo.com that (again) redirects you to Yahoo. Completing the installation of iTheatre Search Plus triggers the loading of another new tab with

h[tt]p://private.mysuperappbox[.]com/wim/lp/offer/lp/7/?t=gomusix&ref=unknown&&ost=offer&extname=Safe%20Search%20Plus&extid=cdbcbpkdfgfcemelleckgidcpajggamj&yid=28pr&vertical=private&hub=mysuperappbox.com&fgts=1&frns=rate_share&step=2&next=ty&tid=157&landingp=7&&ct=ye10ofr7157

The third product promoted to users is called Safe Search Plus from Mysuperappbox.com and Chrome.google.com/webstore/detail/safe-search-plus/cdbcbpkdfgfcemelleckgidcpajggamj, which performs a second change of the primary default engine to h[tt]ps://www.myprivatesearch.com/search?q=[search terms]. However, it is a clone of the Browsing Guard Extension by Playzonenow.com, which is known to have twenty clones published on the Chrome Web Store. Seemingly, independent software developers publish all three extensions mentioned so far, but that is not entirely true. Third-party actors are using subdomains of Eanswers.com, Searchalgo.com, and many proxy sites to lead Web surfers to targeted promotional materials on Yahoo. Many users may not appreciate the misleading installation prompts encountered during the installation of playMusic New Tab, iTheatre Search Plus, and Safe Search Plus, as well as forcing users to load Yahoo. PC users might wish to remove the playMusic New Tab and related extensions with the help of a reputable anti-malware solution.