[Security] Google Chrome look-alike malware



Nova Scotia

Nova Scotia

Online Casinos in Nova Scotia 2026: What to Check Before You Join Online casinos in Nova Scotia split into two ...
Newfoundland and Labrador

Newfoundland and Labrador

Best Online Casinos in Newfoundland and Labrador 2026: Legal Play, Bonuses & Withdrawals Online casinos in Newfoundland and Labrador fall ...
New Brunswick

New Brunswick

Best Online Casinos in New Brunswick: Compare Legal Sites in 2026 Online casinos in New Brunswick split into two camps ...
Manitoba

Manitoba

Top Online Casinos in Manitoba: Legal Guide and Reviews 2026 Online casinos in Manitoba reach players through two separate channels, ...
British Columbia

British Columbia

Online Casinos in British Columbia: Legality and Trusted Options in 2026 Online casinos in British Columbia reach players through two ...
Alberta

Alberta

Online Casinos in Alberta 2026: Regulated Online Gambling Sites and Top Offshore Options Online casinos in Alberta now sit on ...
Yukon

Yukon

Best Online Casinos in Yukon 2026: Bonuses, Legal Status and Interac Payments Online casinos in Yukon all operate offshore. The ...
Low Wagering

Low Wagering

Low Wagering Casino Bonus in Canada A low wagering casino bonus in Canada has a 25x or less playthrough. The ...
Responsible Gambling

Responsible Gambling

Responsible Gambling in Canada: Safer Play Tools, Warning Signs and Support Resources Responsible gambling at casinos in Canada means treating ...
Blackjack

Blackjack

Online Blackjack in Canada for 2026: Safe Sites and Best Tables Online blackjack in Canada is one of the few ...
tehƧP@ƦKly�ANK� -Ⅲ�
10-25-2015, 06:29 AM
http://www.pcworld.com/article/2994778/security/tricky-new-malware-replaces-your-entire-browser-with-a-dangerous-chrome-lookalike.html
Related Article: https://blog.malwarebytes.org/online-security/2015/10/efast-browser-hijacks-file-associations/

Apparently, based on PUP (Potentially Unwanted Programs) installations (most likely third-party sites with their own installers),
your Google Chrome can potentially get hijacked by malware.

Easy signs of this happening?
Chrome taking over default file associations.

This one hijacks these file-associations:

gif
htm
html
jpeg
jpg
pdf
png
shtml
webp
xht
xhtml

Naturally, most operating systems have their own picture viewers installed before you install other viewers (XNView, etc).

It can also hijack URL’s.

The same is done for these URL-associations:

ftp
http
https
irc
mailto
mms
news
nntp
sms
smsto
tel
urn
webcal

Why this matters:

As pseudonymous infosec expert SwiftOnSecurity noted, it�s a testament to Chrome�s security against in-browser malware that attackers are now trying to overwrite the program completely. With Windows looking like the weaker link, users will want to be extra careful when using software installers from untrusted sources.

In any case, the browser does clearly identify itself when visiting the About page from the Settings menu (chrome://chrome/).
PCRisk has detailed removal instructions (https://www.pcrisk.com/removal-guides/9480-ads-by-efast-browser#!prettyPhoto).

Just an informational post to warn those who might have fallen victim.
Always trust it when it comes to Malwarebytes!


Scroll to Top