2 ms·
That's a strong accusation. Can you provide any more information (URLs) to investigate?
by fjsolwmv 8y ago
That's a strong accusation. Can you provide any more information (URLs) to investigate?
- ocdtrekkie 8y agoThe URL is pretty self-explanatory: https://www.google.com/search?q=mapquest https://www.google.com/search?q=mapquest Specifically, in every test I've ever run, Google puts http://www.mapsanddrivingdirection.com/Maps http://www.mapsanddrivingdirection.com/Maps as the ad run above the official MapQuest link. It's a company out of Cyprus that repackages OpenStreetMap data with a big giant "Download to Continue" button when you try to get directions. I can tell you the download requests admin privileges on your machine to install (aka, is not just an extension alone), and overrides your New Tab page and changes your search provider. I will admit I didn't have the courage to actually install it anywhere to confirm the extent of it's behavior, but placing the registry key that disables Chrome auto-updates is pretty par for the course on these type of infections. Here's a screenshot I took on July 18th: https://twitter.com/ocdtrekkie/status/1019593753227681793 https://twitter.com/ocdtrekkie/status/1019593753227681793