Home Malware Programs Potentially Unwanted Programs (PUPs) Ikasutmi


Posted: August 8, 2017

Threat Metric

Ranking: 17,396
Threat Level: 1/10
Infected PCs: 642
First Seen: August 8, 2017
Last Seen: August 27, 2023
OS(es) Affected: Windows

Ikasutmi is an extension that is only compatible with Google Chrome. Ikasutmi is associated with a series of websites, which trick users into installing unwanted extensions by displaying a prompt that states 'Add Extension to Leave.' Users who come across the website hosting the Ikasutmi may end up installing it while unaware of the changes it may make to their Web browser completely. The good news is that Ikasutmi is not unsafe at all, and users might not notice instantly the minor changes its installation will bring to their Web browser. Some other examples of add-ons promoted via the shady 'Add Extension to Leave' pop-ups are:

  • "Uis Speedometer" Extension By Pro.speedometerx.top
  • "Pixel Sorter" Extension by Pro.pixelsorter.top
  • "MenaCel" Extension by Acmenel.pro
  • "Vannevar" Extension by Asusfix.win
  • "Player X" Extension by Teskden.pro
  • "Dentesk" Extension by Teskden.pro
  • "Cyra devtools" Extension by Asusfix.win
  • "3D Triforce" Extension by Pro.3dtriforce.top
  • "Coefficient of Variation" Extension by Pro.variation.top
  • "Chat Noir" Extension by Pro.chatxnoir.top
  • "Tiny Mix Tapes" Extension by Siva.stream
  • "The Wild Honey Pie" Extension by Dago.stream
  • "Chrome Notes" Extension by Chromenotes.info
  • "The Coupon – Store" Extension by Thecouponstore.co
  • "Picture Gallery Plus" Extension by Ponteron.club

Ikasutmi acts as a browser hijacker, which means that may modify the Chrome's settings to benefit the author's extension. In this case, the change involves the default search aggregator. After Ikasutmi is installed and enabled, all searches performed through Chrome's address bar will refer users to http://supesearches.com/ikus.html before taking them to a search results page hosted on Nova.rambler.ru, a reputable Russian search engine. It is likely that these actions are performed to boost the Supersearches.com's traffic, as well as expose the user to paid ads hosted on Nova.rambler.ru.

We advise our readers never to install browser extensions or other software that was offered to them by unknown websites. If you think that Ikasutmi might have been installed on your computer, then the recommendation is to remove it either manually, or by using a reputable computer security utility.