Published Jun 30, 2011|Updated Sep 15, 2017


Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: Win32/Kryptik (ESET) Sefnit (McAfee) W32/Vundo (Norman) Win32.Genome (Kaspersky) Trojan.Alyak (Rising AV) Trojan.Click (Dr.Web) TROJ_TRACUR (Trend Micro)

Windows Defender detects and removes this threat.

This family of threats are malicious JavaScript files that redirect your web searches.  

They do this to earn revenue for the malware authors via online advertisement fraud. The threats hijack search result links from the following search engines, and redirect you to a different webpage:

  • Alltheweb
  • Altavista
  • AOL
  • Ask
  • Bing
  • Gigablast
  • Google
  • Hotbot
  • Lycos
  • Netscape
  • Snap
  • Yahoo
  • Youtube

They can be installed by other malware, including members of the Win32/Tracur description for more information.

Find out ways that malware can get on your PC.  


Latest news