Is the MBAM team aware of the new "Clickfraudmanager" hijacker?

[drdoug99]

This seems to be pretty new in the past week, and none of the anti-virus/anti-malware programs have caught this.

Firefox Google searches were being intercepted by this garbage, and luckily people who are smarter than me have figured out the answer, on various forums I have been searching.

I don't know if malware bytes or any program is capable of detecting this, as it's a pretty unusual file that is infected.

But this "clickfraudmanager" will redirect your searches, from a "adwarefeed .com" main location, which is being done by the "overlay.xul" file in the "C:\Program Files\Mozilla Firefox\extensions\{0707C62C-A61D-4020-89C4-6311C4B60A26}\chrome\content" directory of the infected computer.

Should I upload this .xul file to the malware bytes team or do you already have a plan of action?

I figured the more people know about this the easier it will be to stop it spreading, so hopefully at least this information is helpful.

To fix the problem, from what I have read you just delete this "overlay.xul" file. I haven't done that yet, I'm still dissecting the file myself.

Here's the websites where I found out the removal information:

http://www.sudhian.com/index.php?/forums/viewthread/105110/

http://support.mozilla.com/tiki-view_forum...parentId=274187

[SpySentinel]

Hi drdoug99, welcome to Malwarebytes'

Clickfraudmanager hijacker is a very nasty hijacker, that is not detected by many tools yet. There is a tool that detects and removes this, so if you are having a problem with this hijacker, post a log in the Malware Removal - HijackThis Logs Forum so we can get you cleaned.

The information is very helpful thank you, it will be passed along.