Windows 10: Search-fine.com - Very Persistent Malware

WillTaylor7 · Apr 10, 2022

Whoever you may be, I hope you are having a good day. A few days ago, my computer was infected with a browser hijacker which redirects all my searches to a website www.search-fine.com, and then onto any random search engine Google, Bing, Ask Jeeves and Yahoo are all used. The problem was initially with Google Chrome, but has now infected all browsers on my computer, including one I've never used before Edge. I've been trying to remove it, without success. Here is what I have tried so far:Removing extentions But as it infects all browsers, I don't think this is the issueReinstalling

:)

radioraheem · Apr 10, 2022

Best way to remove problem Malware

Hi There,

I am trying to remove a bundle of Malware without success.

There is a bundle of listed programs which I try to uninstall through the typical Control Panel effort, but they remain listed there:

Buenosearch Toolbar
MyPC Backup
PC Performer
Speed Test 127
UnknownFile

I was looking at this weblink which provides a 5 step process for Buenosearch alone:
Remove Bueno Search (Removal Guide)

Not sure how much certain guides can be trusted. One of the first things I read was to download Revo Uninstaller, and I've not heard of it so I'm not sure if it's trustworthy..........

hurricane51 · Apr 10, 2022

Edge Search Does Not Permit Change of Region

I got these suggestions from the Microsoft Community forum.No. 1 worked for me:

Thank you for posting the query on Microsoft Community. I am glad to assist you on this.
We have reproduce the issue here and we are able to access non-regional search for google using Microsoft Edge.
I would suggest you to try the below steps and check if it helps.
Step 1:
Clear browsing data option of Microsoft Edge and check if you face the issue. To do so perform the steps below.

Click on the More actions icon next to the feedback icon present on top right corner of the Project Spartan homepage.

Select Settings and click on Choose what to clear.

Check the boxes Browsing history, Cookies and saved website data and Cached data and files and click on Clear.

Step 2:
I suggest you to create a new user account and check if the issue occurs.

Go to Settings.

Choose Accounts and then select Family and other users.

Select add someone else on this PC.

Enter a user name and hit next.

Click on Finish.

Sign out from the current Account and Log into the new account.

Step 3:
It could also happen because of network issue. I suggest you to try with different network connection and check if it helps.

Brink · Apr 10, 2022

New malware persistence method leveraging Windows 10 UWP apps

A security researcher from Norway has discovered a new trick that can allow malware to persist on infected systems after reboots.

In infosec circles, the term for this is "persistence" and refers to a malware strain's ability to start right back up after a system reboot.

There are various ways in which malware authors obtain boot persistence, such as by modifying boot sectors, hijacking the Windows COM system, or by hijacking DLLs and shortcut files.

But, by far, the most popular method remains using the Windows Registry to add registry keys that call the malware's process on boot-up.

Oddvar Moe, a Norwegian blogger and Windows security specialist, has recently discovered a new and somewhat clever way of abusing the Windows Registry to trick Windows into running a malware's process after a boot-up.

Moe's new method only works on Windows 10, and only with apps developed for the Universal Windows Platform, a new Windows runtime system that Microsoft launched back in 2015.

In an interview with ZDNet, Moe said the technique should work with any UWP apps, but it is only useful when used with UWP apps that Windows 10 runs automatically after boot-up --such as Cortana and the People app.

"If an attacker targets other apps, the user needs to run that app mnually for it to run the planted binary," Moe told ZDNet regarding using the technique with non-startup UWP apps...
Click to expand...

Read more:

Researcher finds new malware persistence method leveraging Microsoft UWP apps | ZDNet

Persistence using Universal Windows Platform apps (APPX) s Blog

Windows 10: Search-fine.com - Very Persistent Malware

Search-fine.com - Very Persistent Malware

Search-fine.com - Very Persistent Malware

Search-fine.com - Very Persistent Malware

Search-fine.com - Very Persistent Malware - Similar Threads - Search fine com

PC Infected with Persistent Malware Downloading Files Hourly

Windows Persistence: COM Hijacking (MITRE: T1546.015)

Microsoft Edge Malware version persistent versions 4x.xx.

very persistent malware, search-fine.com is making me want to explode.

Persistent malware

Persistent malware

Persistent malware

File explorer/search very very very slow

Persistent immovable popups, adware, malware etc