Wizesearch.com (Info and Removal)
Wizesearch.com is a browser hijacker
|
| If your browser is redirected to Wizesearch.com, then your computer is infected with a browser hijacker. You should immediately check your PC using an antivirus or antispyware software. |
Name: Wizesearch.com
Type: Adware/Browser Hijacker
Danger Level: Low/Medium
Symptoms: browser opens wizesearch.com, redirects to random websites, a lot of asnnoying ads
Distribution Method: Wizesearch.com browser hijacker is integrated into the installation package of various free programs
HijackThis may show infection:
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://wizesearch.com/{param}
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://wizesearch.com/{param}
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://wizesearch.com/{param}
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://wizesearch.com/{param}
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://wizesearch.com/{param}
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://wizesearch.com/{param}
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://wizesearch.com/{param}
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://wizesearch.com/{param}
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://wizesearch.com/{param}
O4 – HKCU\..\Run: [xxx] explorer.exe http://wizesearch.com/{param}
FRST may show infection:
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://wizesearch.com/{param}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://wizesearch.com/{param}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://wizesearch.com/{param}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://wizesearch.com/{param}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = http://wizesearch.com/{param}
HKU\{clsid}\Software\Microsoft\Internet Explorer\Main,Start Page = http://wizesearch.com/{param}
SearchScopes: HKU\{clsid} -> {clsid} URL = http://wizesearch.com/{param}
StartMenuInternet: IEXPLORE.EXE – C:\Program Files\Internet Explorer\iexplore.exe http://wizesearch.com/{param}
CHR HomePage: Default -> wizesearch.com/{param}
CHR DefaultSearchURL: Default -> http://wizesearch.com/{param}
CHR DefaultSearchKeyword: Default -> wizesearch.com
CHR DefaultSuggestURL: Default -> http://wizesearch.com/{param}
Detection and removal: To remove Wizesearch.com browser hijacker use a free software such as AdwCleaner and Malwarebytes Anti-malware.