Home Malware Programs Adware GsearchFinder

GsearchFinder

Posted: February 25, 2016

Threat Metric

Threat Level: 1/10
Infected PCs: 981
First Seen: February 25, 2016
Last Seen: June 6, 2023
OS(es) Affected: Windows

GsearchFinder is a Web extension that you should not install. GsearchFinder is typical adware that may deteriorate the performance of Google Chrome, Mozilla Firefox and Internet Explorer. GsearchFinder may make various changes in the configuration of your browser to redirect you to its partner sites. The suspicious tool may inject many online ads in the browser windows. Part of the artificially included marketing materials may have the slogan 'Powered by GsearchFinder' or something similar. The commercials may take a variety of shapes. You may be distracted by eye-catching pop-ups, banners or embedded videos. Your mouse cursor may activate hidden in-text ads accidentally. As you leave one page and open the next one, your browser may display interstitial or transitional ads. These marketing elements may be especially annoying, and also may hamper the smooth operation of the Web clients.

GsearchFinder may lead to unpleasant performance issues like freezes, crashes or glitches. This adware also may manipulate your search results. Instead of seeing the best-matching results, you may encounter various sponsored links that lead to third-party affiliated domains. The questionable extension may replace your homepage automatically. You may be unable to set a site of your choice as the starting point for your surfing sessions. The developers of GsearchFinder may promote various sites for referral commissions. Although some of the sponsored pages may be safe, others may be a threat to the stability of your PC. For example, some platforms may be associated with fake software updates that may be fake. GsearchFinder is not an extension that the users download willingly. This adware doesn't even have an official product page. GsearchFinder travels combined with third-party applications with a free license. You should consider deleting GsearchFinder with a dedicated security solution to fix your Web clients and prevent more serious issues.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\Users\<username>\Desktop\Downloads\3.0.0.33_ppcsetup.exe File name: 3.0.0.33_ppcsetup.exe
Size: 7.39 MB (7392728 bytes)
MD5: 6e9edf3a8581f9899856736b33282722
Detection count: 141
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\Desktop\Downloads\3.0.0.33_ppcsetup.exe
Group: Malware file
Last Updated: May 25, 2023
%SYSTEMDRIVE%\Users\<username>\Desktop\Downloads\1.0.0.0_ppcsetup.exe File name: 1.0.0.0_ppcsetup.exe
Size: 4.99 MB (4996672 bytes)
MD5: 1a60f73782e87ab504ebe25232640c79
Detection count: 47
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\Desktop\Downloads\1.0.0.0_ppcsetup.exe
Group: Malware file
Last Updated: May 25, 2023
%PROGRAMFILES%\power pc care 2018 for shadow\ptcr.exe File name: ptcr.exe
Size: 2.7 MB (2709320 bytes)
MD5: 4dd4a32bff1d07942292292360b0a3bd
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\power pc care 2018 for shadow
Group: Malware file
Last Updated: May 25, 2023
C:\Users\<username>\Downloads\ppcsetup (1).exe File name: ppcsetup (1).exe
Size: 7.75 MB (7752288 bytes)
MD5: 84560cff1098e67333f9eba6273b2a29
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Downloads\ppcsetup (1).exe
Group: Malware file
Last Updated: August 12, 2022
ppcsetup (3.0.0.26).exe File name: ppcsetup (3.0.0.26).exe
Size: 5.25 MB (5255216 bytes)
MD5: 82d81da6e3372a06d75f3d2097d1bed9
Detection count: 20
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

File name without pathbuy power pc care 2018.lnkPower PC Care 2018.lnkuninstall power pc care 2018.lnkRegexp file mask%WINDIR%\System32\Tasks\Power[RANDOM CHARACTERS]PC[RANDOM CHARACTERS] care 2018_Logon
Loading...