Panda Software, a security company, has recently discovered a new dangerous adware known as PremiumSearch, which specifically targets Google, MSN, and Yahoo with the aim of “stealing” traffic from these websites.
According to the security firm, once PremiumSearch infects and installs itself on a user’s computer, it has the capability to redirect the domains of Google, MSN, or Yahoo to another search page.
In terms of its operating mechanism, PremiumSearch installs a malicious Browser Helper Object (BHO) along with a fake Google toolbar and sets the user’s default homepage to the PremiumSearch site. Ultimately, PremiumSearch executes a “DNS poisoning” trick by rewriting the HOSTS files on the victim’s computer. This allows PremiumSearch to redirect all domains like Google.com, MSN.com, and Yahoo.com to an IP address designated by the software.
Users can easily become infected with this new adware if they inadvertently access or are redirected to websites containing pirated software or unhealthy content. Such websites can install dangerous software like PremiumSearch, WorldAntiSpy, or Smitfraud on the user’s computer.
The security company advises users to be cautious about the new spread of PremiumSearch and to regularly update their anti-virus and anti-spyware programs.
HVD – (InformationWeek)
