Home Malware Programs Browser Hijackers Funday24.ru

Funday24.ru

Posted: December 4, 2015

Threat Metric

Ranking: 16,570
Threat Level: 5/10
Infected PCs: 3,078
First Seen: December 4, 2015
Last Seen: January 12, 2025
OS(es) Affected: Windows


Funday24.ru is a Russian site related to a browser hijacker. Funday24.ru was hosted on another domain – smartinf.ru previously. The developers of Funday24.ru may change its IP and URL addresses to evade detection from the cyber security industry. As soon as the platform gets shut down, the people in charge of Funday24.ru simply move it elsewhere. They rely on the mentioned browser hijacker to get visitors. Funday24.ru is a Web extension that may enter inconspicuously and then change the configuration of all present browsers. Funday24.ru may be compatible with Google Chrome, Mozilla Firefox and Internet Explorer. The unwanted add-on may come when you install freeware from unverified sources. Even if the main program is legit, it may attempt to load additional applications with questionable quality. The experts refer to this approach as bundling. If you don't want to be tricked by this method, you should always load new programs via the 'Advanced' guide as opposed to the 'Quick' one. Using these features, you can decide for yourself which of the components to install and which to ignore. As soon as the browser hijacker behind Funday24.ru enters, it may make the suspicious Russian domain your homepage. The site itself is not threatening. However, if you click on the links that it contains, you may reach some harmful third-party page eventually. Funday24.ru contains a search field and hundreds of articles. The search engine may display manipulated results, so you should not use it. Some of the articles may attract your attention because of shocking headlines or eye-catching pictures. If you click on them expecting to read the whole text, you may be transferred towards suspicious sites that are in the partner network. It is not a good move to download any software from them because it may be unsafe. As long as the browser hijacker remains attached to your Web clients, you may encounter Funday24.ru whenever you go online. The experts suggest you use dedicated security software to delete this parasite.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

File name without pathfunday24[1].xmlhttp_funday24.ru_0.localstoragehttp_funday24.ru_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\funday24.ru

Additional Information

The following URL's were detected:
/dugado.ru//opatolo.ru//tutsifi.ru/funday24.ruixlora.ruopatolo.ru
Loading...