FastSearch.cc is a website search engine organized into a wide variety of categories and groups. It based upon and links to another search engine called myfastsearch.net. It takes over as your start page or default search engine in Internet Explorer. It appears to be a variant of the CoolWebSearch homepage hijacker as well.
The interesting thing about FastSearch.cc is how fast that it sets your default homepage and search pages to a site called in.webcounter.cc that redirects you to your final location of FastSearch. It appears redirection is just to count how many homepages have been hijacked and keep a tally. You'll see the following URLs as your homepage and search pages if your system has been hijacked this way.
HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://in.webcounter.cc/--/?ydtfs
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://in.webcounter.cc/---/?ydtfs
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://in.webcounter.cc/--/?ydtfs
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://in.webcounter.cc/-/?ydtfs about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://in.webcounter.cc/-/?ydtfs
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://in.webcounter.cc/--/?ydtfs
HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://in.webcounter.cc/---/?ydtfs
HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://in.webcounter.cc/--/?ydtfs
HKCU\Software\Microsoft\Internet Explorer,Search = http://in.webcounter.cc/--/?ydtfs
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://in.webcounter.cc/-/?ydtfs
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://in.webcounter.cc/--/?ydtfs
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://in.webcounter.cc/--/?ydtfs
HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://in.webcounter.cc/--/?ydtfs
HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://in.webcounter.cc/---/?ydtfs
HKLM\Software\Microsoft\Internet Explorer,Search = http://in.webcounter.cc/--/?ydtfs
How to Remove FastSearch.cc
Since FastSearch.cc appears to be a variant of CoolWebSearch, the easiest way to regain control of your system would be to download and run a program called CWShredder
Page url:
http://www.tje.net/PCSupport/index.html?fastsearch_cc.htm
Page content was last updated: 10/6/2008
|
|