SOURCE: BitDefender


October 24, 2012 16:54 ET

Yahoo Messenger Malvertising Hijacks the User's Browser Start Page to Vietnamese Portal

Free Tool to Eliminate Hijacker Offered by Bitdefender

BUCHAREST, ROMANIA--(Marketwire - Oct 24, 2012) - A piece of malicious advertisement that leads to a Vietnamese website has been displayed for a couple of hours on all Yahoo Messenger windows in the world. It appears the Yahoo Messenger client has been instructed to display a banner linking to Vietnamese website for four hours.

It is not yet clear whether the banner has reached YIM customers following a legit advertising campaign that was modified by the advertiser later, or if it is an abusive attack that exploits a bug in the Yahoo Ad services. One thing is certain: users who followed the neatly crafted banner (a novel apparition for most YIM users that simply had to be checked out) were directed to, where they were prompted to install an exe file.

When run, the application looks for installed browsers, then hijacks the start page of each one to hxxp:// This would be normal behavior for a browser add-on or toolbar, but there is more to the application than that: it adds itself to the Windows startup entries, so it can start at every system boot. When started, the application hijacks the browser start page over and over again.

If you have already installed the respective exe file, simply changing the browser's start page won't be enough. We offer a free removal tool that eliminates all traces of the hijacker and restores the browser start page to about:blank.

The removal tool can be downloaded for free from the Bitdefender Labs Downloads Area.

About Bitdefender®

Bitdefender is the creator of one of the world's fastest and most effective lines of internationally certified internet security software. Since 2001, the company has been an industry pioneer, introducing and developing award-winning protection. Today, Bitdefender technology secures the digital experience of around 400 million home and corporate users across the globe.

Recently, Bitdefender won a series of important awards and accolades in the global security industry, including "Editor's Choice" by PC Mag for Bitdefender Antivirus Plus 2013 and the "GoldAward" by TopTenREVIEWS that confirmed the software's top spot among 25 tested security products. Bitdefender antivirus technology has also finished top in leading industry tests from both AV Test and AV-Comparatives. More information about Bitdefender's antivirus products is available from the company's security solutions press room. Additionally, Bitdefender publishes the HOTforSecurity blog, a sizzling blend of steamy computer security stories and stimulating visuals that spotlights the seedy underworld of internet fraud, scams, malicious software -- and gossip.

Contact Information