Threat Database Browser Hijackers

By ESGI Advisor in Browser Hijackers

Do Not Trust the Fake Search Engine Website

The website belongs to a class of websites associated with known browser hijackers. Other websites belonging to's family of rogue websites include and All of these websites are the same; they feature a fake search engine that, instead of returning legitimate results, simply displays websites from a list, regardless of the terms that were searched. The results returned by the fake search engine are usually associated with websites selling rogue security programs, illegal online pharmacies, shady online dating and pornographic websites and other fake search engines. ESG security researchers have added the website to a long list of dangerous rogue websites. Staying away from websites such as is a good idea; however, most computer users do not have a choice in the matter. This is because they usually arrive at the website because of a browser hijacker infection.

What are Websites like Used For?

Websites like exist for only one purpose: to make a profit for criminals and hackers. Most of the revenue that is generated on the Internet comes from advertisements, page views and links. One sub-category of this kind of revenue is created by affiliate marketing, depending on the number of people that click on a link, are referred to a particular website or purchase a particular product, due to their own advertisement. Hackers and criminals use browser hijackers to force your Internet browser to visit dangerous websites like against your will. This, in turn, creates artificial traffic to their websites and generates money for them through advertisement revenue and affiliate marketing links. Hackers can also profit from websites like by using them to promote or sell certain other malicious products, such as rogue security programs. Rogue security programs are often sold directly or indirectly through websites like These kinds of fake anti-virus applications are designed to create problems on a computer system and then to extort the victim in order to fix these problems.

Protecting Yourself from the Website

If your computer is directing you constantly or once in a while to the website, this is a sure sign that your computer system is infected with a browser hijacker. These malware threats usually are contained within a Trojan, although they may consist of less severe malware infections. In either case, scanning your computer system with a legitimate anti-malware program should root out the cause of any redirects. Removing the Trojan or malware problem on your computer should end all redirects to the website.

File System Details may create the following file(s):
# File Name Detections
1. %Windows%\system32\consrv.dll
2. %Windows%\system32\DRIVERS\mrxsmb.sys

Registry Details may create the following registry entry or registry entries:
SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4


Most Viewed