Search.newtab-mediasearch.com

If your browser’s homepage was changed to Search.newtab-mediasearch.com, then we want to inform you that your homepage was hijacked by a browser hijacker. We have classified it as such because of the way its owners distribute it and if it has infected your PC, we advise that you remove it. Furthermore, once it has hijacked your browser’s homepage, you may be compelled to use it for searching the web, but the problem is that its search results can feature shady promotional links that can redirect to websites that can jeopardize your computer’s security.

Let us begin our analysis with this browser hijacker’s distribution methods and its origins. We have found that Search.newtab-mediasearch.com is nearly identical to Search.socialnewpagessearch.com, Search.funtvtabplussearch.com, Funkytvtabssearch.com and many others. This and other browser hijackers were all set up by a company known as Imali Media Ltd. This company has a website at Imali.media and this website states that the company is in the web monetization business, but fails to mention the methods used to advertise. However, we know how it advertises its content and this web monetization campaign is far from legitimate and safe.

As far as this hijacker’s distribution tactics are concerned, we want to inform you that it is distributed using both legitimate and illegitimate methods. Our research has revealed that Search.newtab-mediasearch.com comes with a browser add-on named Newtab-Media for Google Chrome and Media-Newtab Extension. This extension is featured on a dedicated distribution method at Newtab-media.com. This website features this extension only and claims that it will allow you to watch TV through. However, this is untrue as it will only feature links to TV channel websites but will not give you access to exclusive content. In short, this hijacker’s developers use dishonest advertising tactics to compel you to install Media-Newtab/Newtab-Media extension voluntarily. However, our biggest concern is the fact that Search.newtab-mediasearch.com and its browser add-on are also dishonestly distributed via malicious bundled installers. These installers are said to be featured on illegitimate software distributing websites. The information we have received suggests that the installers are configured to install this hijacker on your computer without your knowledge or authorization.

Once Media-Newtab Extension/Newtab-Media is installed on a computer, it will automatically replace your browser’s homepage address and possibly the new tab page address if you use Chrome. The purpose for doing this is to make you use this hijacker for searching the Internet. However, Search.newtab-mediasearch.com is designed to feature shady promotional links in its search results and these links can redirect you to websites that feature malicious content such as malware downloads that may include ransomware and spyware. Other times the links might redirect you to fake online shopping websites that extract money or trick you into disclosing online banking credentials. In other words, as a result of using this hijacker as a search engine, you will open yourself to a broad range of malicious content.

Now, in regards to privacy, we want to point your attention to the fact that this browser hijacker, with the help of its browser add-on, collect information about you and use it to show you customized promotional links that correspond to your personal interests, demographic information and so on. We have found that Imali Media can collect personal and non-personally identifiable and personally identifiable information. However, personal information is collected on a voluntary basis only. Non-personal information, however, is collected automatically that can include your IP address, approximate geographical location, browsing history, entered search queries, and so on. We suggest that you do not allow this hijacker to gather such information about you by deleting it from your PC entirely.

There is no doubt that Search.newtab-mediasearch.com is a browser hijacker. Our analysis has shown that it can be distributed in a dishonest, malicious manner and get on your browser without your authorization. Its search results are bound to feature links to questionable websites and it can collect information about you to customize the advertising campaign and make more money as a result, because this hijacker was created for this purpose only. Please follow the instructions featured below to remove this hijacker.

Remove the browser extension

Google Chrome

1. Hold down Alt+F.
2. Open More tools.
3. Select Extensions.
4. Find Newtab-Media.
5. Click the Remove button.

Mozilla Firefox

1. Hold down Ctrl+Shift+A.
2. Open Extensions.
3. Find Media-Newtab Extension.
4. Click the Remove button.

Replace the homepage address

Mozilla Firefox

1. Hold down Hold down Windows+E keys.
2. Enter C:\Users\{User name}\AppData\Roaming\Mozilla\Firefox\Profiles
3. Enter uniquely named Mozilla’s ID folder.
4. Find prefs.js, Open it with Notepad.
5. Remove http://search.newtab-mediasearch.com in user_pref("browser.startup.homepage", " http://search.newtab-mediasearch.com");
6. Save and Close.

Google Chrome

1. Hold down Windows+E keys.
2. Enter C:\Users\{User name}\AppData\Local\Google\Chrome\User Data\Default
3. Delete Preferences, Secure Preferences and Web Data files or open them with Notepad.
4. Replace http://search.newtab-mediasearch.com in all strings to your desired homepage address.
5. Save and Close.