Creepy Adware Uses Custom Firefox Profile to Hijack Your Browser
Security Update : Security firm Malwarebytes has discovered a new browser hijacker called GsearchFinder that takes over many of your browser settings and redirects your search queries via services like YesSearches and HohoSearch.
Malwarebytes says it discovered this browser hijacker application bundled with other software such as Amonetize, SoftPulse, Somoto, and OutBrowse.
Researchers say that there are versions that target Google Chrome and Firefox, but the Firefox version uses a non-standard trick to hijack the browser’s settings.
While many browser hijackers work by altering Firefox’s settings associated with the current profile, GsearchFinder creates a new profile where it makes all its changes.
The technique is weird, because it allows any users infected with GsearchFinder to easily remove it. The simplest way to do this is by going through the following steps, read more)