Ooxxsearch.com

We want to inform you about a recently released browser hijacker called Ooxxsearch.com. It poses as a search engine, but make no mistake; it is considered an infection so you ought to remove it as soon as possible. After testing this infection, we found that its search results can include potentially dangerous links that may compromise your computer’s security and infect it with malware. On top of that, it can keep tabs on your browsing habits and customize the ads accordingly. Ooxxsearch.com is a real threat to your computer, so the sooner you get rid of it, the better. However, if you are not convinced, please read this short description as it contains the most relevant information presented in simple terms.

Before we move on to this hijacker’s functionality, it is necessary to have some background information. We have found that it was created by a developer known as ELEX. Not much is known about this entity, but it is clear as day that its products are of questionable reliability. However, the developer name is not mentioned in Ooxxsearch.com’s License Agreement. This is a common practice malware developers use to avoid getting into trouble with their promoted content of malicious activities, but they can only stay in the shadows for so long. We also have found that this browser hijacker is hosted on the same server as Yessearches.com, Universalsearches.com, Didisearch.com, and Search2000s.com. The Internet Protocol (IP) address is 104.25.216.18.

Since it is a relatively new infection, we have yet to identify all of its distribution methods. Nevertheless, we have found that Ooxxsearch.com can be bundled with programs, such as Picexa and FVP Image Viewer, but it is not limited to these two programs. We are of the opinion that it may be bundled with malicious installers. Such malicious installers are set to inject this browser hijacker into the browser without your consent which is one of the reasons why you should delete it.

However, the main reason we recommend that you get rid of this browser hijacker is its ability to display advertisements in its search results. Take note that Ooxxsearch.com redirects its search queries to another legitimate search engine which is usually Google.com, but before redirecting to another search engine, its the queries go past a server that injects commercial advertisements that may be seen at the very top or the right side of the search results window. Here is another note-worthy quote from this hijacker’s License Agreement which states that its developers “have not reviewed, and cannot review, all of the material, including computer software, made available through the websites and WebPages to which Ooxxsearch links, and that link to Ooxxsearch.” So it seems that even the developers do not always know what they are promoting which is bad news for the rest of us who try to avoid bad content.

Another reason for removing Ooxxsearch.com is its ability to collect information about you. This is standard practice for browser hijackers since certain information is needed to make the advertising campaign as effective as possible. According to its Privacy Policy, this hijacker is set to collect your IP address only. However, your IP address also reveals your approximate geographical location which determines your current locale. Furthermore, its developers will store information such as your browsing and search history. All of this information is not personally identifiable, but we believe that using it for advertising and marketing purposes is wrong, because it is certainly not used to provide a better product.

All in all, Ooxxsearch.com is just a browser hijacker that is distributed using deceptive methods. It is injected into your computer without your consent and changes your browser’s homepage, again, without your authorization. It may subject you to unreliable content such as malicious software and scam websites, so we recommend that you remove it as soon as possible.

How to remove this browser hijacker

Miscrosoft Internet Explorer

1. Simultaneously press the Windows+R keys.
2. In the resulting dialog box, type regedit and click OK.
3. Go to HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer \Main
4. Find Start Page on the right side of the window and double-click on it.
5. Replace the Value data with the address of your desired search engine.

Mozilla Firefox

1. Simultaneously press the Windows+E keys.
2. In the resulting Explorer window’s address box, enter C:\Users\{user name}\AppData\Roaming\Mozilla\Firefox\Profiles\{Unique Mozilla user ID}
3. Locate the file named prefs.js and open it using Notepad.
4. Find and Remove user_pref("browser.startup.homepage", "http://Ooxxsearch.com/");

Google Chrome

1. Simultaneously press the Windows+E keys.
2. In the resulting Explorer window’s address box, enter C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default
3. Locate and Delete Preferences, Secure Preferences and Web Data files.