Yoursearching.com

By GoldSparrow in Browser Hijackers

Threat Scorecard

Ranking: 2,941
Threat Level: 50 % (Medium)
Infected Computers: 21,036
First Seen: November 16, 2015
Last Seen: September 20, 2023
OS(es) Affected: Windows

Yoursearching.com is associated with a browser hijacker that is promoted to users as a search helper and may be accompanied by badware like Accelimize and Bellaphant in freeware packages. The Yoursearching.com browser hijacker may be compatible with all modern Web browsers and might change your new tab settings, default search engine, and homepage to divert some of your Internet activities to sponsored services that may include shopping, online banking and searching. Security researchers add that the Yoursearching.com browsers utilize the services of the advertising tracking technology associated with Clpremdo.com. The Yoursearching.com browser hijacker might use session and HTML cookies from Clpremdo.com to recognize your favorite online resources and show related promotional materials on pop-up windows and banners.

Moreover, users that are affected by the Yoursearching.com browser hijacker may notice that sponsored search results by Clpremdo.com may appear right after they start typing in the search bar of their Web browser and visit Google and Bing. The 184.173.140.171 IP address of Yoursearching.com is related to several cyber threats like Nemucod and Wangbrax, and it may not be safe to search on the website. The Yoursearching.com website is designed to look as closely as possible to Google and is not a real search engine. The search field at its center is simply a redirect function that leads users to the results page on the legitimate Google site. The browser hijacker linked to Yoursearching.com may disable your anti-phishing protection and provide you with unsafe content from untrusted Web pages. Also, the Yoursearching.com browser hijacker may edit security policies in Internet Explorer to enable loading arbitrary code on pages. Computer users should install a trustworthy anti-malware application to deal with the browser hijacker linked to Yoursearching.com.

SpyHunter Detects & Remove Yoursearching.com

File System Details

Yoursearching.com may create the following file(s):
# File Name MD5 Detections
1. itr_yoursearching.exe 36e1a18d7fbc2a2ffb6cee2c0ce4f4f8 15
2. ws10A5FC18.dat 1359989b08d8b88065733f92cf376791 4
3. component.exe 91e6642d4341fae0d952b142e925d104 3
4. brd_yoursearching.exe fa6819b291844a2de008661d78d7209e 3
5. itr_yoursearching.exe cbb5bf759f9f4952fba1e10134ea3c21 3
6. itr_yoursearching.exe 2cfcb20f9838fe52decce5bbc231ce29 2
7. itr_yoursearching.exe 03b0132a971610af6c49af7e1558994c 1
8. smt_yoursearching.exe 412d81c74c8917ac13de1593a3dfd21c 1
9. 5278_corna_yoursearching.exe c17860c2d8c12301a68d3704dfbe78da 1
10. itr_yoursearching.exe 0da17ad4d130747e2d87e92ec9f0aab7 1
11. smt_yoursearching.exe d84cf32ad2fddd03f751549e3b831402 1
12. smt_yoursearching.exe a490ac61d8818661adbec60d468bd210 1
13. itr_yoursearching.exe 12d9c32d14325a1662959420142c37a4 1
14. itr1_yoursearching.exe ac2978900962d8ff1fd749c8c0c6009e 1
15. itr_yoursearching.exe 3b06f40ad10df5f45a78f13557a7087d 1
16. itr2_yoursearching.exe fa1f3b11396c1d3af55e05efe2051b62 1
17. itr_yoursearching.exe eb406cf3dc536ee84ff2b213884f748d 1
18. itr_yoursearching.exe e88671b4a12f173077f9f1207ef490e4 1
19. itr_yoursearching.exe 3b1d661bf139519d35f7f5ddd28bd341 1
20. itr_yoursearching.exe 829ac07fad1d63d8bf0f502760c84aab 1
21. itr_yoursearching.exe 3f6fc15ec562b0ce6ca727ee68f0cb72 1
22. itr_yoursearching.exe b96840afc54be44d9533465d7f6d42ff 1
23. itr_yoursearching.exe 5651492a0a217afd807c9e92a465ea56 1
24. itr2_yoursearching.exe cd32def025fe7297b93d14ca5f49e75e 1
25. itr1_yoursearching.exe 938b6eb724723e39016472b7091e9d47 1
More files

Registry Details

Yoursearching.com may create the following registry entry or registry entries:
File name without path
http_www.yoursearching.com_0.localstorage
http_www.yoursearching.com_0.localstorage-journal
www.yoursearching[1].xml
Regexp file mask
%HOMEDRIVE%\yoursearching.xml
Software\Microsoft\Internet Explorer\DOMStorage\yoursearching.com
SOFTWARE\Wow6432Node\yoursearchingSoftware
SOFTWARE\yoursearchingSoftware

Directories

Yoursearching.com may create the following directory or directories:

%AppData%\yoursearching

URLs

Yoursearching.com may call the following URLs:

http://yoursearching.com/

1 Comment

Odmir Dias de Souza Reply

Unfortunately I am not able to locate and remove the link/website below that just gives me a headache:
http://www.yoursearching.com/ type = sc = 14517 & TS ...?
It would be possible to help me?
Thank you!!!
Odmir

or
Infelizmente não estou conseguindo localizar e remover o link/site abaixo que só me dá dor de cabeça:
http://www.yoursearching.com/?type=sc&ts=14517...
Seria possível me ajudar?
Obrigado!!!
Odmir

Trending

Most Viewed

Loading...