Home Malware Programs Browser Hijackers Weekendflavor.com

Weekendflavor.com

Posted: September 26, 2011

Weekendflavor.com is a fraudulent search engine site that also utilizes browser hijackers to redirect traffic to itself. SpywareRemove.com malware experts have seen Weekendflavor.com browser hijackers striking both during attempted search engine usage and during attempts to navigate directly to specific URLs. Weekendflavor.com (unlike real search engines) doesn't display relevant search results; links that are offered by Weekendflavor.com will deluge you with irrelevant advertisements and may promote fake security programs or attempt to steal private information. If your web browser is displaying symptoms of a Weekendflavor.com attack, don't try to change your web browser's settings – instead, run to the best anti-malware program that you have and use it to scan your PC for all Weekendflavor.com-affiliated infections (while in Safe Mode, if possible).

Why Weekendflavor.com Shouldn't Be Any Online Searcher's Flavor of the Week

Weekendflavor.com is, like other types of fraudulent websites that pretend to provide useful search results (such as noblesearchserver.com, classysearchserver.com, coolsearchserver.com, coolwebsearch.com, 1dayoftheweek.com or 7dayoftheweek.com) uninterested in giving you real links that are relevant to your search query. Instead of performing its ostensibly-sole function, Weekendflavor.com offers links to advertisement-filled and generally-useless websites that have no connection with the search string that you typed.

SpywareRemove.com malware experts have also confirmed that Weekendflavor.com websites are often malicious, along with having no real content. Risks from a Weekendflavor.com website can extend to the following:

  • Weekendflavor.com may redirect you to phishing websites. Phishing sites may look like legitimate websites, but are, in reality, interested in stealing your private information via fake login forms or surveys. The URL of a phishing website is always subtly or drastically different from the URL of an official site.
  • Websites from Weekendflavor.com can also market rogue security programs, such as System Tool, My Shield Security, XP Anti-Spyware, Windows Wise Protection or Windows Health Center. The majority of rogue security products will pretend to be free, but once they've been installed, they'll ask for registration money on a regular basis, as well as create fake infection alerts in lieu of accurate system status messages.
  • Weekendflavor.com sites may also attack your browser by using scripts to install harmful security program without your permission. These scripts can run without any visible indication that they're active and are often embedded in fake system scanners and contest alerts.

Getting That Nasty Weekendflavor.com Out of Your Mouth

Although using a non-Windows operating system or an unusual web browser can let you browse the web without Weekendflavor.com getting in the way, SpywareRemove.com malware experts suggest that you remove Weekendflavor.com as soon as you can do so. Rebooting your computer into Safe Mode by tapping F8 during a reboot sequence will let you access a secure boot menu that can disable Weekendflavor.com browser hijackers and most other types of infections.

Once your PC is in Safe Mode, deleting Weekendflavor.com should prove to be a fairly easy job, as long as you have access to up-to-date and sufficiently-powerful anti-malware program.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%Temp%\.dll of Weekendflavor.com File name: %Temp%\.dll of Weekendflavor.com
File type: Command, executable file
Mime Type: unknown/com
%Windows%\system32\.exe File name: %Windows%\system32\.exe
File type: Executable File
Mime Type: unknown/exe

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{CLSID Path}HKEY_CLASSES_ROOT\CLSID\{4D25FB7A-8902-4291-960E-9ADA051CFBBF}HKEY_CLASSES_ROOT\CLSID\{54ECA872-DB2A-4C6B-BBB2-F3777C6786CC}HKEY_CLASSES_ROOT\CLSID\{786C6F15-0D85-46FB-9A31-0AA0E93C88FF}HKEY_CLASSES_ROOT\CLSID\{8736C681-37A0-40C6-A0F0-4C083409151C}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar={4B3803EA-5230-4DC3-A7FC-33638F3D3542}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\""={4B3803EA-5230-4DC3-A7FC-33638F3D3542}HKEY_CLASSES_ROOT\CLSID\{183643C8-EE67-4574-9A38-927852E34163}HKEY_CLASSES_ROOT\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}HKEY_CLASSES_ROOT\CLSID\{1DDA201E-5B42-4352-933E-21A92B297E3B}HKEY_CLASSES_ROOT\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\CustomizeSearch=[site address]HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SearchAssistant=[site address]
Loading...