Browser hijacker
Encyclopedia
A browser hijacker is a form of malware
Malware
Malware, short for malicious software, consists of programming that is designed to disrupt or deny operation, gather information that leads to loss of privacy or exploitation, or gain unauthorized access to system resources, or that otherwise exhibits abusive behavior...

 or spyware
Spyware
Spyware is a type of malware that can be installed on computers, and which collects small pieces of information about users without their knowledge. The presence of spyware is typically hidden from the user, and can be difficult to detect. Typically, spyware is secretly installed on the user's...

 that replaces the existing internet browser home page, error page, or search page with its own. These are generally used to force hits to a particular website.

Morwill Search

Morwill Search is a browser hijacker. It never
redirects homepages to its website and begins to collect information on the computer.

CoolWebSearch

CoolWebSearch
CoolWebSearch
CoolWebSearch is a well-known spyware program that installs itself on Microsoft Windows based computers. It first appeared in May 2003.- Effects :...

 (CWS) was one of the first browser hijackers. It redirected the existing home page to the rogue CWS search engine, with its results as sponsored links. With most antivirus and antispyware programs unable to properly remove this particular hijacker, a man named Merijn Bellekom developed a special tool called CWShredder
CWShredder
CWShredder is a program that runs on Microsoft Windows for removing the CoolWebSearch family of spyware. Originally created by Merijn Bellekom, it was bought by InterMute on October 19, 2004 until June 2005 when InterMute itself was acquired by Trend Micro....

 specifically to remove this hijacker. Cool websearch is a popular browser hijacker and is owned by fun web products.

Search-daily.com

Search-daily.com is a hijacker that may be downloaded by the Zlob trojan. It redirects the user's searches to pornography
Pornography
Pornography or porn is the explicit portrayal of sexual subject matter for the purposes of sexual arousal and erotic satisfaction.Pornography may use any of a variety of media, ranging from books, magazines, postcards, photos, sculpture, drawing, painting, animation, sound recording, film, video,...

 sites. It also is known to slow down computer performance.

Profit

Many people believe that browser hijackers were designed for simple annoyance. Most hijackers redirect a page to force hits to their websites which contain ads. This then drives up the advertising cost for that website, thus profiting the site's webmaster.
Malware and many trojans have many marketing uses. This malicious software can hijack your browser even adding exceptions to your browsers security settings and pop up blockers. Most malware software is picked up with something so simple as opening an email or clicking a link. Be aware of ALL links and the content of the URL that you click. Many of us still will click a link without even looking at the URL its destined for. Awareness is your first line of defense when browsing the web.

However in some cases the hijack is being done without the knowledge of the website. The webmaster sets up an account on an advertising platform (where they pay for traffic to be directed to their site via legitimate means—just like Google adWords) and a hijacker starts forcing traffic to that page so the website owners have to pay money each time a user arrives at the page. In this case the hijacker is making money, however the website the user is being forced toward is actually losing a lot of money.

Removal

Most new hijackers will not allow a user to change back to their home page through Internet Properties. Modern hijackers' settings will most likely return upon reboot, however, well-updated antispyware software will likely remove the hijacker. Some spyware scanners have a browser page restore function to set your page back to normal or alert you when your browser page has been changed.

Rogue security software

Some rogue security software will also hijack the start page generally displaying a message such as "WARNING! Your computer is infected with spyware!" to lead to an anti-spyware vendor's page. The start page will return to normal settings once the user buys their software. Programs such as WinFixer
WinFixer
WinFixerAlso known under various other names including: WinAntiVirusPro, ErrorSafe, SystemDoctor, WinAntiSpyware, AVSystemCare, WinAntiSpy, Windows Police Pro, Performance Optimizer, StorageProtector, PrivacyProtector, WinReanimator, DriveCleaner, WinspywareProtect, PCTurboPro, FreePCSecure,...

 are known to hijack the user's start page and redirect it to the website.

Earthlink

In 2006, Earthlink
EarthLink
EarthLink , is an Internet service provider headquartered in Atlanta, Georgia, USA. It claims 1.94 million subscribers.- Business :EarthLink provides a variety of Internet connection types, including dial-up, DSL, satellite, and cable. Both dial-up and high speed Internet access are available...

started redirecting mistyped domain names over to a search page. This was done by interpreting the error code NXDOMAIN at the server level. The announcement led to much negative feedback, and Earthlink offered services without this feature.

External links

The source of this article is wikipedia, the free encyclopedia.  The text of this article is licensed under the GFDL.
 
x
OK