Home Articles Spyware Research Support Scan Now Purchase F.A.Q.

ffinder.com

Alias: ffinder.com

Description: Ffinder.com is a malware application that installs Internet Explorer toolbar, hijacks search keywords and displays pop-up advertisements (even if computer is offline). Ffinder.com replaces hyperlinks at search pages and webpages from other sites with its own marketing related hyperlinks that redirect traffic to ffinder.com. Ffinder.com is a computer hijacker that results from a Zlob Trojan infection. Zlob Trojan automatically downloads and installs ffinder.com malware application. If your computer is infected by Trojan.Zlob and hijacked by the FFinder.com then your computer is in trouble because it does transfer back and forth information from the infected computer which makes it a potential for application/data theft.

Threat type:

Adware - Adware is a software application which displays advertisements on your computer. Advertisements can be displayed through pop-up / pop-under windows, additional bars or toolbars, underlined links or buttons that appear on a computer screen. Adware applications include additional code that delivers the ads. Adware authors earn money when users click on those ads. Occasionally, adware includes code that tracks user's site visits and passes it to third parties without the user's permission or knowledge.

Hijacker - A Hijacker is a software application that takes control of your browser's settings. Usually it changes your home page and redirects it to some unknown site or modifies your search settings. It prevents you from changing back your browser's settings. An infected browser usually operates much slower.

Homepage Hijacker - A Homepage Hijacker is a software application that takes control over your browser's settings. Usually it changes your home page and redirects it to some other site or modifies your search settings. It prevents you to change browser's settings. In such hijacks, your browser may operate normally, but be much slower.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer and / or to protect your privacy.

Detection:
SpyNoMore removes ffinder.com: Yes

Threat risk: Very High Risk

Extremely dangerous malware. Uses stealth installation, randomly named entries and has the capability to self update or resurrect after incomplete removal. Almost impossible to remove manually. Category mostly consists of trojans and spyware.

Symptoms:

User's homepage is changed to http://ffinder.com.

Warning messages such as "Critical System Error", "System Alert", "Your Computer is Infected", "System performance slowed down by 47%", "Internet connetion speed decreased by 39%" and "Security Alert" are displayed.

Popups (including gambling and adult-oriented popups) are generated even when user is not browsing the Internet.

Presence of blinking icons next to computer clock. The icons can generate balloon messages claiming infection. The icons usually looks like a circle with a (?), and (X) or a yellow 'danger' triangle with an exclamation mark inside. See samples below:

Presence of a rogue toolbar called Security Toolbar 7.1, similar to the screenshot below:

ffinder.com Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with ffinder.com, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
N/A

Registered Dll (Dynamic Link Library) Signatures:
N/A

Internet Explorer Integration: Yes

Folder Signatures:
N/A

Registry Signatures:
N/A

SpyNoMore Collected Residual File Signatures:
N/A