Home Rogue Websites Therelatedsearch.com


Posted: September 7, 2011

Therelatedsearch.com is a minimalist search engine website that offers potentially hazardous or advertisement-based results. Although you may stumble over Therelatedsearch.com by accident, in most cases, your exposure to Therelatedsearch.com will be through an affiliated Google Redirect Virus that redirects your searches to Therelatedsearch.com. Because exposure to Therelatedsearch.com or to websites that it offers links to may result in an infection by Trojans or other forms of harm to your PC, you should be careful to avoid any contact with Therelatedsearch.com. If you've been infected by a web browser hijacker that redirects you to Therelatedsearch.com, SpywareRemove.com malware analysts recommend the same solution that has been proven to work against similar browser hijackers – applying an anti-malware application for a full system scan, ideally in Safe Mode.

Why Therelatedsearch.com Isn't Likely to Be Related to Anything That You'd Want to See

Therelatedsearch.com uses the same overall strategy as other fraudulent search engine sites like webplains.net, licosearch.com, Qooqlle.com, icityfind.com, find-answers-fast.com and findgala.com. Although Therelatedsearch.com pretends to offer useful search results, as well as 'free games' and useful social networking links, Therelatedsearch.com has a confirmed history of linking to malicious and affiliate revenue-based sites. These irrelevant search results will, at best, waste your time, while outright hostile websites may attempt to phish for private information or install harmful programs by way of embedded scripts.

To protect yourself from incidental Therelatedsearch.com attacks, keep your browser and anti-malware programs completely up-to-date, disable scripts for websites that you distrust and exercise caution around suspicious file sources. All of these precautions together will work to minimize the vulnerabilities that Therelatedsearch.com can use to infect your PC.

Severing the Chains Between Your Searches and Therelatedsearch.com

However, despite the above defensive measures, no defense can absolutely protect your computer from a potential browser exploit-based attack, and being aware of how to deal with a Therelatedsearch.com browser hijacker can work to reduce severe harm to your PC. Typical signs of a Therelatedsearch.com browser redirect infection, as noted by SpywareRemove.com malware research team, can include:

  • Being redirected to Therelatedsearch.com after you try to use another search engine or a completely unrelated website. This redirect may occur when you first try to navigate to the search site's URL, when you try to use the search engine or when you click on a search result.
  • The inexplicable appearance of unwanted and rather obnoxious advertisements, including pop-ups and sound files.
  • Slightly altered content on the websites that you can access, such as links that appear in text content that doesn't normally have links.
  • Error screens that try to block you from visiting security-related websites, particularly fake 'unsafe website' warnings.

Because most browser hijackers such as Therelatedsearch.com infections will alter your baseline system settings to cause these attacks, making changes to your browser will not stop the above symptoms from happening. SpywareRemove.com malware researchers recommend that you uproot the source of the problem and remove the Therelatedsearch.com browser hijacker with a security or anti-malware product of good repute.

Technical Details

File System Modifications

The following files were created in the system:

%Windows%\system32\DRIVERS\mrxsmb.sys File name: %Windows%\system32\DRIVERS\mrxsmb.sys
File type: System file
Mime Type: unknown/sys
%Windows%\system32\consrv.dll File name: %Windows%\system32\consrv.dll
File type: Dynamic link library
Mime Type: unknown/dll

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4

One Comment

  • Howard says:

    Thank you sooo much…..u saved me the trouble and time of taking my pc to best buy geek squad. they wanted to charge me $80 to fix this problem from the malware website. somehow my internet access stopped working because of it and I just booted into safe mode to do a malware scan and then remove it. They key is guys, use SAFE MODE by press F8 when booting. Good luck!