Home Malware Programs Browser Hijackers Go-search.ru

Go-search.ru

Posted: July 27, 2015

Go-search.ru is a site that uses the format of a search engine to expose its traffic to its harmful content, including links and exploits associated with threats. Malware analysts haven't verified the latest payloads from Go-search.ru. Despite the limited information available, they recommend responding to exposure to Go-search.ru as being equal to exposure to any other hostile website, with anti-malware scans following promptly afterward, regardless of any symptoms. Similarly, any unexpected browser behavior that may redirect you to Go-search.ru routinely should be regarded as a symptom of a possible threat infection that is a high-priority security risk.

Going to Search the Web where You Shouldn't

Although Go-search.ru's Web page represents itself as a search site, Go-search.ru may not offer legitimate, independent search results. Along with a minority of other PC security companies, malware experts recently confirmed Go-search.ru's classification as a threat distribution website, which may disguise its installers and browser-based exploits as search links. They also saw secondary threats promoting Go-search.ru in browser hijacking attacks, which most likely are being used in the place of more traditional threat installers, such as disguised Trojan droppers.

Go-search.ru hijackers may modify the victim's Registry settings to lock their default search engines and homepages to Go-search.ru. Unlike other, less toxic browser hijackers, malware experts have found no connection between the Go-search.ru hijacking campaign and toolbars or other, pseudo-legitimate browser products. Instead, Go-search.ru hijackings may be implemented by Trojans and other threats that may be installed automatically and display no visible components. The global nature of these changes may prevent victims from using their normal browser settings to prevent any exposure to Go-search.ru.

Go-search.ru hijackers also may be associated with other symptoms besides browser redirects, including being unable to access some brands of anti-virus software. However, these additional symptoms aren't necessarily consistent between individual infections, and most frequently are found in the region of Russia.

Getting Go-search.ru to get Gone

Although Go-search.ru hijackers primarily are linked to eastern Eurasia, the distribution models used by these PC threats are yet to be identified, much like Go-search.ru's personal payloads. However, common infection vectors for similar browser hijacking threats tend to include both consensual and non-consensual download links, which may be disguised as harmless files or embedded in browser scripts. Installing appropriate security software, using good security settings for your browser and avoiding untrustworthy links are the most direct methods of putting a stop to would-be installers for a Go-search.ru hijacker.

Go-search.ru hijackers don't specialize in any single brand of browser, and may modify your Web-browsing settings in ways that are undetectable without a close examination of your system's Registry. Most anti-malware programs kept up-to-date should be able to identify and remove these Registry entries along with the actual threat, which may include additional attacks, such as disabling your firewall or installing more threats.

Loading...