Do you know what TheSearch.net is?
We have received complaints from many users who claimed that TheSearch.net replaced their browsers’ homepages after installing a software bundle. Our security analysts have looked into this allegation and have concluded that this search engine is indeed a browser hijacker that is distributed with the help of malicious software bundles. Therefore, you should remove it, but if hijacking your homepage is not enough, consider the security vulnerabilities that it can create. This shady search engine uses a custom search algorithm that enables it to present all kinds of promotional links. Hence, it can promote unreliable and malicious content as many browser hijackers tend to do. Make no mistake, this hijacker’s main objective is to generate income for its developers, so do not expect it to provide you with a reliable online search service.
We have received reports that this shady search engine is being distributed with the help of malicious software bundles. It seems that this hijacker is being bundled with installers that were configured to hide additional content, including this browser hijacker. As a result, when you install the bundle it also secretly installs TheSearch.net and any other additional software it might contain. This is a deceptive distribution tactic, and this tactic alone is the main reason our malware analysts have classified this search engine as a browser hijacker.
TheSearch.net screenshot
Scroll down for full removal instructions
Furthermore, its origins are unknown since its legal documents have nothing to say about the company that produced it. This is a clear indication that the developers/owners want to stay in the shadows but reap all the benefits. Nevertheless, our malware analysts have found that it is similar to a browser hijacker named MyBeeSearch.com which is part of the Spigot browser hijacker family. This family does not have many releases, but we think that we will see more of them in the near future.
So when you install a software bundle that contains this hijacker, it will inject it automatically to Microsoft Internet Explorer, Microsoft Edge, Mozilla Firefox, and Google Chrome, so it is compatible with most popular web browsers, and it will change their homepage addresses. Furthermore, it appears that TheSearch.net does not come with a browser extension but is rather injected into the browser by the software installer that features the code dedicated to doing just that.
Our researchers have concluded that this browser hijacker hijacks you browser’s homepage to force you to use it for processing the search queries. It must be said, however, that it works rather well and you can get relevant search results from it, but it just cannot compete with heavyweights such as Google, Bing, Yandex, and so on. Most of these search engine feature promotional links as well, but they are guaranteed to be safe while TheSearch.net’s search results can include some dangerous links. It EULA states that “We will not be liable to you for any damages resulting from your access to or use of the site or services, or any reference site or third party service providers or vendors.” So the owners try to shed all responsibility that they might have to take for their insecure advertising campaign. Our researchers say that this search engine can feature links to shady websites that can contain malicious software downloads, or the site may be malicious altogether and be used for illegal activities such as phishing.
Therefore, in order to keep your computer out of harm’s way, we recommend that you remove TheSearch.net as soon as possible. Take note that the uninstaller found in Control Panel does not work, so you have to remove it manually. Alternatively, a powerful antimalware tool can get rid of this hijacker for you. We suggest SpyHunter since testing has shown that it can deal with TheSearch.net and eradicate it completely.
How to get rid of this hijacker
Microsoft Edge
- Hold down Alt+X keys.
- Click Advanced settings.
- Type a new homepage address in the address bar.
- Choose or enter a new search engine in Search in the address bar with section.
Microsoft Internet Explorer
- Hold down Windows+R keys and enter regedit in the box.
- Go to HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
- Find the Start page string and double-click it.
- Type a new homepage address in the Value data line.
- Then, open Internet Explorer and hold down Alt+T keys.
- Select Internet Options and click the Advanced tab.
- Click Reset and check the checkbox and click Reset again.
Mozilla Firefox
- Open the browser and hold down Alt+H keys.
- Click Troubleshooting Information and click Refresh Firefox.
- In the dialog box, click Refresh Firefox again.
- Finish.
Google Chrome
- Hold down Windows+E keys.
- Go to C:\Users\{user name}\AppData\Local\Google\Chrome\User Data\Default
- Find Preferences, Secure Preferences and Web Data files.
- Select and Delete them.
- Open the browser and hold down Alt+F, and then open Settings.
- Select Show advanced settings and click Reset settings.
- Click Reset again in the box.
In non-techie terms:
Our malware analysts have determined that TheSearch.net is a browser hijacker due to its illicit distribution method. It is set to hijack your browser’s homepage when you install a malicious software bundle. It hijacks it to force you to use its search engine and its search results are bound to contain shady links and, as our researchers point out, they can be malicious and pose a danger to your computer’s security, so we advise that you remove it manually or using an antimalware program.