Home Malware Programs Browser Hijackers Search.hfreeforms.co

Search.hfreeforms.co

Posted: August 16, 2017

Threat Metric

Ranking: 8,636
Threat Level: 5/10
Infected PCs: 9,582
First Seen: August 16, 2017
Last Seen: March 2, 2025
OS(es) Affected: Windows


Search.hfreeforms.co is a page associated with the SearchFormsOnline browser extension. This utility is meant to help users find tax forms and similar documents quickly and easily. However, what users might not notice is that by installing SearchFormsOnline, they permit the program to modify their default new tab page. This results in having the user's new tab page set to Search.hfreeforms.co – a search engine that provides results from the Yahoo Search. In addition to this, Search.hfreeforms.co also appears to link users to online services and pages, which host the documents and forms that the tool is meant to make easier to find.

The SearchFormsOnline is marked as a Potentially Unwanted Program (PUP) by researchers, and the websites linked to it are not considered to be harmful. If you encounter them on your computer, then you should remember that you don't need to be worried about your online security. However, keep in mind that if you wish to recover your new tab page, you will need to start by uninstalling the SearchFormsOnline extension. This should remove Search.hfreeforms.co from your new tab settings automatically, and recover your previous new tab.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Free Forms

Additional Information

The following directories were created:
%LOCALAPPDATA%\Free Forms
The following URL's were detected:
hformshere.comhfreeforms.cosearch.hfreeforms.co
Loading...