Do you often experience your browser tripping / hanging?

Then you might be a victim of annoying browser adwares/ homepage & search engine stealing scripts and clickjacking malware.

These threats normally take over your browser and impede normal browsing. They are most known for displaying unnecessary advertisements, pop ups, and stealing information from you by hijacking keystrokes during typing. It is also common for these threats to take over your search engine and prevent normal use of your search engine of choice.

Have you come across; mystartsearch/ omega plus/ fast start among others while browsing? Then your machine is infected and you need urgent help.

Clickjacking explained

Clickjacking, also known as a “UI redress attack”, is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the top level page. Thus, the attacker is “hijacking” clicks meant for their page and routing them to another page, most likely owned by another application, domain, or both.

Using a similar technique, keystrokes can also be hijacked. With a carefully crafted combination of stylesheets, iframes, and text boxes, a user can be led to believe they are typing in the password to their email or bank account, but are instead typing into an invisible frame controlled by the attacker.

How to deal with common homepage & search engine threats

1. Go to your file browser or alternatively use third party search engine applications e.g. Ava find or Everything
2. For purposes of this explanation we will use the mystartsearch homepage grabber.  Search for mystartsearch, Several of its files will appear.
3.Open on the first link C:\Users\bunifu\AppData\Roaming\mystartsearch
4.Click the uninstall manager to uninstall “mystartsearch” setup.
5. Click ok, then proceed  to delete all the files in that directory
6. Go back to your search results and delete all files with “mystartsearch” name in its description.
7. Open Regedit (Registry editor) on your computer. Search for all registry keys and files with mystartsearch anywhere in its description. Then delete all of them
8.Restore browser settings to default. Then check if normal browsing has been restored.
9. If these persist re-install your browser.

How to avoid clickjacking

1. Avoid any malware associated with this, these include Abby Finereader, shopperpro.exe  among others.
2. Don’t click on anonymous pop-up windows while browsing. This would make your machine vulnerable to malicious links.
3. Don’t install anonymous executable files while browsing this would install potentially harmful extensions and plugins to your browser. Some of this PUA (Potentially unwanted Applications) may not target your browser but manifest themselves elsewhere in your PC.
4. Make sure you have a properly working Antimalware / AV software in your machine.
For more info on this feel free to talk to us; suppport@bunifusniper.com / info@bunifu.co.ke