Home Malware Programs Browser Hijackers 22find.com

22find.com

Posted: February 25, 2013

Threat Metric

Ranking: 7,886
Threat Level: 5/10
Infected PCs: 14,655
First Seen: February 25, 2013
Last Seen: October 15, 2023
OS(es) Affected: Windows

22find.com is a search engine website that borrows results from Google while profiting from affiliate-sponsored content. Although 22find.com isn't a danger to you or your computer, SpywareRemove.com malware research team has noted many 22find.com-related issues that may lead your web browser to redirect to 22find.com. These browser hijacks usually are caused by the installation of software from untrustworthy websites. Browser-redirecting attacks usually are symptomatic of the presence of potentially unwanted software on your PC, and you should remove any malware affiliated with 22find.com as quickly as possible – and, preferably, with appropriate anti-malware tools.

22find.com: Finding Its Way Onto Your Browser in an Unusual Fashion

22find.com is a harmless Google-clone site that offers links to other popular websites along with various advertisements. Unfortunately, 22find.com's reputation also is tainted with the promotion of browser hijackers, which modify your web-browsing settings to force visitors to 22find.com in a non-consensual fashion. Some of the prominent ways these attacks may occur are noted here, for referential purposes:

  • Locking your homepage onto 22find.com even if your settings designate a different website.
  • Redirecting your online searches to 22find.com either after you try to use a different search engine.
  • Being redirected to 22find.com after you try to navigate to an unrelated site.

Browser hijackers for sites like 22find.com also often cause other side effects, including inserting links into a website's text content, creating pop-ups or, in some cases, even lowering your security settings (with regards to file downloads and other potentially dangerous content). Due to this and other likely side effects, SpywareRemove.com malware experts rank all browser hijackers as potential threats to your PC even when the sites that they promote – like 22find.com – theoretically are safe.

Bringing Your 22find.com Redirects Down to Zero

22find.com browser-redirecting problems usually begin after you've installed untrustworthy, if not necessarily malicious software from a poor-security website. SpywareRemove.com malware researchers have particularly associated Malavida.com with browser redirect problems involving 22find.com, but other sites (especially freeware sites) also are implicated. Pay attention to what you download and be sure to opt out of any suspicious features whenever possible.

On the other hand, if your browser already is being redirected to 22find.com, SpywareRemove.com malware analysts urge you to use a competent anti-malware product to solve the problem. As long as your anti-malware scanner is accurate and updated, deleting browser hijackers related to 22find.com, or other sites shouldn't require the usage of advanced security techniques. Browser redirects to 22find.com aren't tied to any one brand of web browser. Whether you use Firefox, Internet Explorer, Chrome, Safari, Opera or another browser, you should consider your PC potentially in danger of being attacked by 22find.com redirects and other browser hijacker activities.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Users\<username>\AppData\Local\Desk365-1.3.12.4557.exe File name: Desk365-1.3.12.4557.exe
Size: 4.15 MB (4152328 bytes)
MD5: 04ddfe60599fbb31af496ed85d89ef3c
Detection count: 4,291
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Desk365-1.3.12.4557.exe
Group: Malware file
Last Updated: October 15, 2023

Registry Modifications

The following newly produced Registry Values are:

File name without path22find.lnkhttp_www.22find.com_0.localstoragehttp_www.22find.com_0.localstorage-journalRegexp file mask%AppData%\CheckRun22find.exe%homedrive%\User Data\Default\Extensions\novo_price_comparison.crx%PROGRAMFILES%\Mozilla Firefox\searchplugins\22find.xml%PROGRAMFILES(x86)%\Mozilla Firefox\searchplugins\22find.xmlHKEY..\..\..\..{RegistryKeys}SOFTWARE\findSoftwareSoftware\lnkguardSoftware\Microsoft\Internet Explorer\DOMStorage\22find.comSOFTWARE\Wow6432Node\findSoftwareHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}CheckRun22find_uninstaller

Additional Information

The following URL's were detected:
http://22find.com/
Loading...