Home Malware Programs Hijackers 100k Search Virus

100k Search Virus

Posted: August 23, 2011

100k Search virus, also known as 100k Searches virus, is a web browser hijacker that's linked to the 100ksearches.com website. SpywareRemove.com malware analysts have observed that PCs that are infected by 100k Search virus will show the following symptoms: being redirected to unfamiliar websites (especially after using a search engine), blocked security program installation and launching processes, blocked software updates, online connectivity interference and unusual changes to hard drive displays. Although none of these attacks can cause direct damage to your PC, they make your PC vulnerable to attackers that can cause serious harm, and hence, 100k Search virus should be removed at all costs. Although 100k Search virus is linked to a (secretly malicious) toolbar, 100k Searches virus will resist your attempts to remove 100k Searches virus, and you should be prepared to delete 100k Search virus with the most powerful anti-malware product that you can bring to bear against 100k Search virus.

Why 100k Search Virus is Easy to Get... and Hard to Get Rid Of

As a browser hijacker, 100k Searches virus's main purpose is to redirect you to 100ksearches.com, a malicious website that promotes irrelevant, advertisement-driven and outright hostile search results. Although a 100k Searches virus hijack may happen at any time, SpywareRemove.com malware researchers have found that 100k Search virus is often triggered in particular by attempts to use other search engines, including navigating to their URLs or clicking their links.
100k Searches virus is distributed by dropper and backdoor trojans, especially Backdoor:Win32/Smadow, although other trojans, such as Trojan.Rodecap.A, Generic BackDoor.bfr, Trojan.Win32.Refroso.djjg or Jack Trojan may also be used for this purpose. These trojans are distributed by being bundled with software that's distributed through illicit file-download networks, by installing themselves with drive-by-download scripts from hostile websites (such as 100ksearches.com) and by being included with SSToolbar installations.
SpywareRemove.com malware researchers have noted exceptionally advanced resistance to deletion in the 100k Searches virus, which can, in severe cases, even regenerate from a complete repair or reinstallation of the operating system. This behavior is strongly indicative of rootkit-level functionality and 100k Searches virus should be removed by an appropriate anti-rootkit product that has been equipped with the latest available threat definition updates.

What Else Awaits Your PC from the 100k Searches Virus

Although redirecting your browser to 100ksearches.com and equally malevolent websites is the main purpose of 100k Searches virus, 100k Searches virus may also interfere with your PC in other ways, such as:

  • Running as a background process that uses up continual system resources. 100k Search virus will refuse to be shut off and only a full scan that removes 100k Search virus can make you sure that you can get your computer back to operating without 100k Search virus constantly in the way.
  • 100k Search virus may block a range of websites, especially those that relate to PC security.
  • 100k Search virus may shut down any security-related program or updates for associated programs to prevent you from finding a way to delete 100k Search virus from your hard drive.
  • 100k Search virus may even shut down your Internet connection temporarily, strictly for the purpose of sowing panic.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

C:\Windows\system32\consrv.dll File name: C:\Windows\system32\consrv.dll
File type: Dynamic link library
Mime Type: unknown/dll
C:\Windows\system32\DRIVERS\mrxsmb.sys File name: C:\Windows\system32\DRIVERS\mrxsmb.sys
File type: System file
Mime Type: unknown/sys