Threat Database Adware SearchOffModule Ads

SearchOffModule Ads

By GoldSparrow in Adware

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 180
First Seen: November 30, 2015
Last Seen: March 17, 2023
OS(es) Affected: Windows

The SearchOffModule browser add-on is related to the Adware.E404!ct and may be promoted to you as a search optimizer that you are not advised to install. The SearchOffModule add-on is developed by Goobzo Ltd. that is known for creating adware like BrowserAir and ConverterPro. Needless, to say, you should not expect to notice useful features in the modus operandi of SearchOffModule. Security experts speculate that the SearchOffModule add-on is the version two of the Search Module Plus adware that Goobzo released earlier. We can mention a few notable differences between the applications mentioned before, which include new DLL libraries, self-signed security certificate and an updater module. The SearchOffModule add-on is classified as adware because it may display pop-up windows, banners, and ad-boxes when users visit online stores like Amazon, eBay and Kmart. The only search optimization it applies is to change your default search engine to a customized version of Yahoo that is designed to show sponsored search results and invite users to shop on less-reputable e-commerce platforms.

Moreover, The SearchOffModule adware may place its files in the Common Files folder under the Program Files directory of Windows to hide its main components and obstruct users from removing it. The SearchOffModule adware may use runtime DLLs to alter the behavior of Google Chrome, Internet Explorer and Mozilla Firefox. Samples of the SearchOffModule adware feature appear to have the XPI, CRX and BHO file extension. Some versions of the SearchOffModule adware may appear as a browser extension and a Browser Helper Object. The updater module of the SearchOffModule adware may run as a startup service when you log on Windows and check for patches regularly. The SearchOffModule adware may add two tasks named 'SMWUpd' and 'Smp' to your Windows Task Scheduler and enable automatic updates. Security experts alert that the SearchOffModule adware may decrease your computer performance, and you should eradicate it using a credible anti-spyware application.

File System Details

SearchOffModule Ads may create the following file(s):
# File Name MD5 Detections
1. C:\Program Files\common files\goobzo\gbupdate\smw.sys bfa7e63ff5e61f26e5b4126fad2da897
2. smci32.dll
3. sma.exe
4. smu.exe
5. rlz_id.dll
6. SBIEBrowserHelperObject.dll
7. smi32.exe
8. smp.exe
9. C:\Program Files\Common Files\Goobzo\GBUpdate\smUninstall.exe

Trending

Most Viewed

Loading...