Do you know what Fast Search is?
We would like to inform you that Fast Search is not a safe and reliable application. The fact of the matter is that it is the opposite of that. It is dangerous and unreliable, and you should remove it as soon as you can because it is designed to infect your computer via clandestine methods and show you questionable third-party advertisements promoting content coming from Russia. Our malware researchers say that this program will render pop-ups, coupons, and other forms of browser-based advertising to generate income for its developers. So do not expect this application to provide you with a useful service.
Our malware analysts have found that it is a Russian-made adware that promotes content tailored for Russian-speaking users. Nevertheless, it is distributed around the globe and in a malicious manner too, therefore, it is important that we take a closer look at it. Analysts say that it comes bundled with a program called Messenger Plus! which is a legitimate application in fact. Nevertheless, for some odd reason, it is bundled with this shady ad-supported program. Messenger Plus! is hosted on a dedicated website at Msgplus{.}net/Downloads/Messenger-Plus-Live-Detail-Download and when you install this program, it will also secretly install Fast Search. That is right. The installer does not allow you to deselect its installation, so you will get it unintentionally. At present, this is the only distribution channel we know of, but there might be more that have yet to be identified.
Fast Search screenshot
Scroll down for full removal instructions
Ad-supported software rarely provides something that can improve your browsing experience, and this is the case with Fast Search as well. We want to note that this adware is a browser extension for Google Chrome and Mozilla Firefox. Interestingly, for the purpose of installing on Google, Fast Search is set to use the Chrome ID (pbdpajcdgknpendpmecafmopknefafha) of a legitimate application called Tab Hibernation. Nevertheless, when installed on Chrome, you can find this adware named Fast Search — not Tab Hibernation. So, this adware is typical in its manifestation, but its developers did extra yet unnecessary work to make this malicious extension masquerade as another extension to trick Chrome into accepting it as legitimate.
In any case, once on your computer, this adware will connect to a site at Quick-searcher-v4{.}biz that contains obfuscated Javascript. As a result, it will try to connect to adware servers. You might even see Chrome showing you “This page is trying to load scripts from unauthenticated sources” message at the top-right side of the window. Researchers say that this adware is currently configured to promote sites such as Nova.rambler.ru and Go.mail.ru. Hence, while half of its promoted sites are legitimate, the other half are rather shady. Researchers say that in some cases, the promoted sites may collect information about you, host downloads of malicious software and other content that can jeopardize your computer’s security and your personal privacy.
Evidently, Fast Search has nothing of value that it could offer to you, so there is no reason to keep it. Its distribution channel is designed to infect your PC outright with it in a clandestine manner and, once it is on your computer, show you various promotional links to questionable websites that can jeopardize your computer’s security. If you want to delete it, then please refer to the removal instructions included below this article and we also suggest that you scan your PC with an anti-malware application to make sure that your PC is malware-free.
Removal Guide
Mozilla Firefox
- Simultaneously press Ctrl+Shift+A.
- Select Extensions.
- Find the adware and remove it.
Google Chrome
- Simultaneously press Alt+F.
- Select More tools and click Extensions.
- Find the adware and click Remove.
In non-techie terms:
Fast Search more than a browser extension. It is an adware-type program indented for Russian-speaking users. Indeed, showing links to shady website is all that this application can do. Therefore, we recommend that you remove it from your computer as soon as the opportunity arises. You can use the instructions above to ease the deletion process.