Do you know what iglobalsearch.com is?
iglobalsearch.com is a browser hijacker that you can get accidentally by installing software bundles. Furthermore, it is difficult to remove, but our researchers have found a solution, and you can use the instructions at the bottom of the page to get rid of it. As a browser hijacker, iglobalsearch.com is dedicated to replacing your web browser’s homepage, new tab page, and search provider. However, this particular hijacker works with Chrome only because it is distributed with an extension compatible only with this browser. In this article, we will overview all of the information our malware researchers have managed to obtain. So, without further ado, let us begin.
We will start with its distribution methods first. Our security experts have managed to obtain a sample of this hijacker, and they found that it comes with a browser extension called iGlobal which works on Google Chrome only. Nevertheless, it has a substantial user base, and research has shown that this browser hijacker has infected many computers in the UK which make up the bulk of all visits with 55.7 % followed by Canada with 37 % and the US with 7.5 %. This extension is malicious, so it is not featured on the Chrome Web Store which is a good development indeed since many similar applications stay on there for a long time before they are taken down.
iglobalsearch.com screenshot
Scroll down for full removal instructions
Researchers say that this browser extension is included in malicious software bundles that install it without the user’s knowledge or consent. They say that the installer does not give you the opportunity to skip the installation of iGlobal and, by extension, iglobalsearch.com. Therefore, this extension and search engine has been rightly categorized as malicious and anti-malware applications such as SpyHunter are set to halt their installation and delete them if necessary. Now let us move on to how this hijacker and its extension work.
When you install iGlobal, it creates a folder named gsearch in %LOCALAPPDATA%. This folder stores .json script files that render commercial advertisements. Of course, these the nature of these advertisements make them undesirable, and we must add that they might be unsafe and jeopardize your computer’s security. There is no telling that this extension might promote as there is no information regarding its developer.
Furthermore, when iglobalsearch.com is set as your browser’s homepage, new tab page, and search provider, it will show you additional advertisements in the form of search results. Indeed, this malicious search engine has a custom algorithm that injects promotional links into the search results. These links change constantly, so we believe that at some point they may include links to websites that feature malicious content.
Its developers have implemented some protective measures to ensure that iglobalsearch.com stays as your browser’s search engine. First, this hijacker is also set to hijack Chrome's shortcut. It appends the Target line with --load-extension=C:\Users\{user name}\AppData\Local\gsearch http://iglobalsearch.com. This means that when you replace the homepage address from the browser settings, the inserted command will override your modification and reset iglobalsearch.com as the homepage. Furthermore, it has a non-functional uninstaller in Control Panel, but it does not delete the files when run, so this hijacker and its browser extension does not go anywhere.
Therefore, if you want to keep your computer out of harm’s way, you have to get rid of this hijacker. Our malware researchers have concluded that iglobalsearch.com is a malicious search engine that is set to enter your computer in a covert manner, and its developers are determined to keep you using it for as long as possible. However, with the right know-how you can eradicate all traces of it. All you have to do is remove the .json script files and the extension’s files from the browser’s location, and then fix the Target line.
Removal Instructions
- Hold down Windows+E keys.
- In the File Explorer enter %LOCALAPPDATA%\gsearch
- Delete all .json files.
- Then, enter C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions
- Locate and delete cfgnanaojckjbggalbgofagbpbdcekja
Fix the Target line
- Right-click on the web browser’s shortcut.
- Select Properties and open the Shortcut tab.
- Erase --load-extension=C:\Users\{user name}\AppData\Local\gsearch http://iglobalsearch.com from the Target line.
- Click Apply and OK.
Set new search engine
- Launch Google Chrome
- Hold down the Alt+F keys.
- Select Settings.
- In the Search section, select a new search engine.
- In the On startup section, select Open the New Tab page or click Set pages.
- In the Search section, add a new page or select one from the list above.
- Done.
In non-techie terms:
Our researchers say that iglobalsearch.com is a browser hijacker whose objective is to subject you to commercial advertisements and promotions, To do that it hijacks your web browser’s homepage, new tab page, and search provider address. It also hijacks the target line to prevent you from replacing the search settings. However, you can remove it with our guide or our recommended antimalware application because it might but your computer’s security at risk.