By JubileeX in Browser Hijackers

Webplains.net Image

Why You Should Stay Away from Webplains.net

The website Webplains.net looks superficially harmless; however, this domain is associated with a dangerous browser hijacker. On the surface, the Webplains.net website appears to be a search engine for news items, similar to other well-known news search sites. In fact, the Webplains.net website has no real news-search capabilities. This site will simply list the same links repeatedly, links associated with known malware and other dangerous websites. ESG malware analysts recommend staying away from the Webplains.net website. If you find that you are being directed to this website against your will, your computer is probably infected with the Webplains.net browser hijacker.

Are You Being Repeatedly Forced To Visit the Website Webplains.net Against Your Will?

Computer users that are forced to visit the Webplains.net website repeatedly are usually infected with some form of browser hijacker. The Webplains.net browser hijacker is associated with several other malicious websites as well – such as Utilitiesdiscounts.com. This hijacker usually infects the Internet Explorer browser, although it may also take over the Mozilla Firefox browser. A computer infected with the Webplains.net browser hijacker will show several symptoms:

  1. The Webplains.net browser hijacker is well known for replacing the search results on popular search engines, like Bing or Google. After performing a search, the links in the results will direct an infected user to the Webplains.net website or one of its associated malware sites, instead of linking to the website for the real search result.
  2. The Webplains.net browser hijacker can also direct you to the Webplains.net website after typing a URL directly into the navigation bar.
  3. One particularly misleading aspect of the Webplains.net browser hijacker is that it has been known to replace plain-text content with hyperlinks to malicious websites.

Basically, this malicious browser hijacker does everything in its power to force you to visit Webplains.net and other malicious websites as often as possible. This provides the criminals behind these websites with money from advertising and affiliate marketing, as well as giving them the opportunity to infect your computer with other malware infection. To remove the Webplains.net browser hijacker, it is necessary to start up your computer in Safe Mode. This allows you to bypass the hijacker's self-protective features. Once you've done this, it is simply a matter of using an up-to-date anti-malware program to scan your hard drives and remove any problems. ESG PC security researchers recommend running a scan of your computer even if you have only visited the Webplains.net, without downloading or installing anything.

File System Details

Webplains.net may create the following file(s):
# File Name Detections
1. %Windows%\system32\consrv.dll
2. %Windows%\system32\DRIVERS\mrxsmb.sys

Registry Details

Webplains.net may create the following registry entry or registry entries:
SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4


Most Viewed