MultSearch Browser Hijacker

MultSearch is a browser hijacker that infiltrates systems through deceptive means, altering browser settings to promote the fake search engine, oesrchrdr.com. Once installed, it changes your homepage, new tab page, and default search engine, redirecting your searches to unwanted destinations. This not only disrupts your browsing experience but also poses significant privacy risks by tracking your online activities.​

---

Threat Overview

MultSearch operates as a browser hijacker, redirecting users to oesrchrdr.com, which further redirects to legitimate search engines like Yahoo. However, this intermediary step allows the hijacker to collect data and potentially expose users to malicious content. The primary goal is to generate revenue through forced redirects and data collection.​

---

Threat Summary

Attribute	Details
Threat Type	Browser Hijacker, Redirect, Search Hijacker, Toolbar, Unwanted New Tab
Associated Domain	oesrchrdr.com
Detection Names	Not available on VirusTotal
Symptoms of Infection	Altered homepage, new tab, and default search engine settings; forced redirects to oesrchrdr.com; increased pop-up ads; sluggish browser performance
Damage & Distribution	Tracks browsing data; displays unwanted ads; redirects to dubious websites; distributed via deceptive pop-ups, bundled software, fake installers
Danger Level	Moderate
Removal Tool	SpyHunter

---

In-Depth Analysis

How Did I Get Infected?

MultSearch typically infiltrates systems through:​

• Software Bundling: Included with free software downloads, especially when using “Express” or “Default” installation settings.
• Deceptive Advertisements: Pop-up ads or banners that prompt users to install updates or tools.
• Fake Installers: Impersonating legitimate software like Flash Player to trick users into installation.​

What Does It Do?

Once installed, MultSearch:

• Modifies Browser Settings: Changes your homepage, new tab page, and default search engine to oesrchrdr.com.
• Redirects Searches: Forces your search queries through oesrchrdr.com, which may lead to unreliable or malicious websites.
• Tracks User Data: Collects browsing history, search queries, IP addresses, and potentially sensitive information like login credentials.
• Displays Unwanted Ads: Increases the number of pop-up ads and banners, leading to a cluttered browsing experience.​

Should You Be Worried?

Yes. While MultSearch may seem like a minor annoyance, it poses several risks:​

• Privacy Invasion: By tracking your online activities, it compromises your personal information.
• Security Threats: Redirects can lead to phishing sites or malware-laden pages, increasing the risk of further infections.
• System Performance: The additional load from unwanted ads and redirects can slow down your browser and overall system performance.​

---

Manual Removal Guide for Browser Hijackers

Step 1: Uninstall Suspicious Programs (Windows & Mac)

Before resetting your browser, remove any software that may have installed the hijacker.

Windows (10, 11, 8, 7)

1. Press Win + R, type appwiz.cpl, and hit Enter.
2. Find Unwanted Applications
   • Look for recently installed programs that seem suspicious (e.g., “EasySearch,” “QuickFind,” “Search Manager”).
3. Uninstall
   • Click on the suspicious program > Select Uninstall > Follow on-screen instructions.

Mac (macOS Ventura, Monterey, Big Sur, Catalina, Mojave, etc.)

1. Open Finder and go to Applications.
2. Look for unknown or unwanted programs.
3. Drag any suspicious apps to the Trash and empty the Trash.

---

Step 2: Remove Browser Hijacker from Web Browsers

Google Chrome

1. Reset Chrome to Default Settings
   • Open Chrome > Click ⋮ Menu (top-right corner) > Settings.
   • Scroll down and select Reset settings > Click Restore settings to original defaults > Confirm.
2. Remove Suspicious Extensions
   • Open chrome://extensions/ and remove unknown extensions.
3. Change Default Search Engine & Homepage
   • Go to Settings > Search engine > Select Google or another trusted search engine.
   • Under On Startup, remove any unwanted URLs.

Mozilla Firefox

1. Reset Firefox
   • Click the Menu (☰) > Select Help > Click More Troubleshooting Information > Refresh Firefox.
2. Remove Unknown Extensions
   • Open Add-ons Manager (Ctrl + Shift + A) > Remove any suspicious extensions.
3. Change Search Engine & Homepage
   • Open Settings > Search > Choose Google or another safe search engine.

Microsoft Edge

1. Reset Edge
   • Click ⋮ Menu > Settings > Reset settings > Restore to default values.
2. Remove Unwanted Extensions
   • Open edge://extensions/ and remove any unfamiliar extensions.

Safari (Mac Only)

1. Reset Safari & Clear Data
   • Open Safari > Click Safari (top-left menu) > Select Clear History.
   • Go to Preferences > Privacy > Click Manage Website Data > Remove All.
2. Delete Suspicious Extensions
   • Open Safari > Preferences > Extensions > Remove anything unfamiliar.
3. Change Homepage & Search Engine
   • Open Preferences > General > Change your homepage to a trusted site.
   • In Search, set your search engine to Google or a preferred option.

---

Step 3: Check for Unauthorized System Changes

Windows – Check the Hosts File

1. Open Notepad as Administrator (Win + S, type Notepad, right-click, Run as Administrator).
2. Click File > Open and navigate to:makefileCopyEditC:\Windows\System32\drivers\etc\hosts
3. If you see unknown IPs or URLs at the bottom, remove them.
4. Save changes and restart your computer.

Mac – Check the Hosts File

1. Open Terminal (Command + Space, type Terminal).
2. Type:bashCopyEditsudo nano /etc/hosts
3. Look for suspicious entries and delete them.
4. Press Ctrl + X, then Y, then Enter to save.

---

Automatic Removal Using SpyHunter (Windows & Mac)

For those who prefer a quick, hassle-free removal process, using SpyHunter is highly recommended.

Step 1: Download SpyHunter

Click here to download SpyHunter: Download SpyHunter

Step 2: Install & Run SpyHunter

1. Follow the instructions on the SpyHunter Download Page to install the software.
2. Open SpyHunter and run a full system scan.

Step 3: Remove Browser Hijackers

1. SpyHunter will detect all malware and potentially unwanted programs.
2. Click Fix Threats to remove the detected hijacker.
3. Restart your device to complete the cleanup process.

Step 4: Reset Browser Settings (If Necessary)

Even after SpyHunter removes the hijacker, you may need to reset your browser settings manually (refer to browser-specific instructions above).

---

Preventing Future Browser Hijacker Infections

• Be cautious when installing free software – opt for Custom Installation to avoid bundled malware.
• Avoid clicking on suspicious ads or pop-ups – they often distribute browser hijackers.
• Keep your operating system and software updated – outdated programs are more vulnerable to infections.
• Use a trusted anti-malware tool like SpyHunter to provide real-time protection against threats.

Conclusion

MultSearch is more than just a nuisance; it’s a threat to your online security and privacy. Its ability to alter browser settings, track user data, and expose users to potentially harmful content makes it imperative to remove it promptly.Utilizing a reliable removal tool like SpyHunter can effectively eliminate this hijacker and restore your browser to its original state.​

---