NEW BLOG POST: Upgrading to Windows 10 not only means decreased risk; it also means multi-layered defense against ransomware and other advanced attacks. Read the post
Alert level: Severe Detected with Windows Defender Antivirus
Also detected as: TR/Midhos (Avira) Trojan.Win32.Midhos (Kaspersky) Win32/Medfos (ESET) Medfos (McAfee) Trojan/Win32.Midhos (AhnLab) Trojan.Win32.Medfos (Ikarus)
Microsoft security software detects and removes this family of threats.
These threats install malicious Internet browser extensions and redirect your search results. This means that if you search using Google, Bing, or Yahoo, for example, the site returns normal search results. However, if you click on any of the results, instead of going to the correct website, you might be redirected to a different website.
These threats can also be used for click-fraud.
Variants of Win32/Medfos can be installed by other malware, including variants of the Trojan:Win32/Necurs family.