Search.searchtrmypa.com Removal Guide

Do you know what Search.searchtrmypa.com is?

Our old foes from SaferBrowser have decided to release a new browser hijacker called Search.searchtrmypa.com that fits nicely with the rest of its fleet of hijackers that aim to replace your web browser’s homepage and search provider. Needless to say, you have to remove it from your computer because it is an infection. This means that it does not ask you permission to become your browser’s homepage, but replaces it without authorization. Furthermore, if you use it, then you will be subjected to additional questionable promotional links that can jeopardize your computer’s security.

So, the purpose of this browser hijacker is to replace your web browser’s homepage and search provider settings to make Search.searchtrmypa.com your primary search engine. Of course, you can remove it at any time, but if you do not then, be warned that it has various “flaws” that have been built into it intentionally. Of course, we are talking about its ability to inject customized promotional links in its search results. However, we want to note that it redirects the search queries to Yahoo.com, but its search results are not the same as they would if you entered them to Yahoo.com directly. Search.searchtrmypa.com’s search results are bound to feature promotional links, and we fear that some of them may redirect you to shady websites that can get your computer infected with malware. Therefore, you should want to get rid of this hijacker.Search.searchtrmypa.com Removal GuideSearch.searchtrmypa.com screenshot
Scroll down for full removal instructions

Furthermore, we want to inform you that its developers have set it to collect information that is used to customize the advertisements and make them more relevant to a unique user. Thus, the developers make more money, but let us take a look at what information it officially collects to achieve this. Its privacy policy states that it does not collect information. Nevertheless, in some cases, this information is obtained. For example, in the event you contact the developers and disclose your name, address, and other personal information, they will store it and use it for customizing the ads. This information may be supplemented with non-personal information that is collected as a result of using Search.searchtrmypa.com. This information includes search queries entered, browsing history, IP address, geographical location, and so on. Non-personal information is also collected by legitimate search engines, but it may be misused when it is in the hands of malware developers. On that note, let us take a look at this hijacker’s origins.

As mentioned in the introduction, Search.searchtrmypa.com comes from a browser hijacker family that distinguishes itself from all other browser hijackers because it is labeled with the “by SaferBrowser” label. This hijacker family consists of hundreds of hijackers, but the more recently released ones include Search2.searchlson.com, Search.yourrecipescenter.com, Search.searchwag.com, and Search.searchlcl.com. So there is no question that this particular browser hijacker is part of a web monetization campaign that aims to make money for its developers.

As far as this hijacker’s distribution methods are concerned, we have found that it is distributed with the help of malicious installers configured to install several applications at once. However, with them comes Search.searchtrmypa.com and our research has revealed that it is injected into the web browser automatically. Therefore, you cannot prevent the installation of this hijacker unless you have an anti-malware application on your PC.

In closing, it is evident that Search.searchtrmypa.com is a malicious search engine that is set to become your browser’s homepage without your authorization and subject you to promotional links of unreliable nature. Also, it is configured to collect personal and non-personal information about you, so the sooner you remove it, the less chance that your computer’s security will become compromised. We have composed a guide that will help you delete its files and fix particular settings, but you can also use an anti-malware tool to get rid of it as well.

Removal Guide

Internet Explorer

  1. Press Windows+R keys and type regedit in the box.
  2. Click OK.
  3. Go to HKCU\Software\Microsoft\Internet Explorer\Main
  4. Find the Start Page string, right-click it and click Modify.
  5. In the Value data line, enter a new search engine address.
  6. Then go to HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  7. Locate the following strings.
    • FaviconURL REG_SZ
    • FaviconURLFallback REG_SZ
    • TopResultURL REG_SZ
    • URL REG_SZ
  8. Right-click on them and replace their Value data with your preferred search engine address.

Mozilla Firefox

  1. Press Windows+E keys.
  2. Enter %AppData%\Mozilla\Firefox\Profiles\{Mozilla ID numer} in the address bar.
  3. Find and open prefs.js with Notepad.
  4. Modify the user_pref("browser.startup.homepage", "http://search.searchtrmypa.com"); string by replacing the http://search.searchtrmypa.com with your preferred search engine address.

Google Chrome

  1. Press Windows+E keys.
  2. In the address bar, enter %LocalAppData%\Google\Chrome\User Data\Default
  3. Find Preferences, Secure Preferences and Web Data.
  4. Delete them or open them with Notepad and replace all strings with http://search.searchtrmypa.com to your preferred search engine address.

In non-techie terms:

The analysis presented in the article above has revealed that Search.searchtrmypa.com is not a real search engine. In reality it is a browser hijacker that is set to enter your PC using dishonest distribution methods, software bundling. It is set to change your web browser’s homepage and subject you to questionable promotional links that can subject you to malicious content. Use the removal guide above or an antimalware application to eradicate this hijacker.