Hey you,
BE IN THE KNOW!

35,000 ransomware infections per month and you still believe you are protected?

Sign up to receive:

  • alerts
  • news
  • free how-to-remove guides

of the newest online threats - directly to your inbox:


Footybase.com Redirect Removal

stf-footybase-com-footy-base-climbontop-redirect-browser-hijacker-main-landing-page

Footybase.com is the domain of a browser hijacker, which can be generated by the Climbon.top/search.php redirect. Settings which this hijacker can alter are the homepage, search engine and new tab of nearly every browser you use. All search queries you make will be filtered and be sent to servers connected to the hijacker. You will experience advertising and redirect links while you browse. To remove this browser hijacker, you should read the article to the end.

Threat Summary

Name Footybase.com
Type Browser Hijacker, PUP
Short Description Browser programs on your computer device could be affected. The hijacker redirects you and displays sponsored advertising content.
Symptoms The start page, search engine and new tab setting will be altered. You will get redirected from the search results every time you do a search or open a new tab window.
Distribution Method Freeware Installations, Bundled Packages
Detection Tool See If Your System Has Been Affected by Footybase.com

Download

Malware Removal Tool

User Experience Join Our Forum to Discuss Footybase.com.

Footybase.com – Distribution Methods

Footybase.com can be distributed in various methods. One of them is through third-party installer setups of bundled applications or freeware. These setups could have been set to put additional content on your PC, by default. Without you knowing, the hijacker can alter settings on browsers before you notice it. Preventing such setups from installing undesirable application can be done if you find Custom or Advanced options. There, you should be able to deselect the additional content.

Another distribution methods might utilize an add-on of some sort, and place it in your browser applications. Banners, pop-unders, pop-ups and more advertisement types can spread the hijacker redirect and be a viable distribution method. The redirect is distributed with multiple redirect links of other websites, such as Climbon.top/search.php. Such websites are either run by the same owners or partnered up with Footybase.com. The following browsers could be affected: Google Chrome, Internet Explorer, Safari and Mozilla Firefox.

Footybase.com – More About It

Footybase.com is the primary landing page for a hijacker redirect and search engine. The page Footybase.com/search.php will be put as your default home page, new tab window and search engine. You can view that page from the picture shown down below:

stf-footybase-com-footy-base-climbontop-redirect-browser-hijacker-main-landing-page

The Footybase.com search page is made of a pure white background, a search bar with a logo and a banner space for advertisements under it. You can see the scam from the name of the new tab that says “Google Search” and that the logo is made to look like the one of Google. That page will change your default homepage, search engine, and new tab setting of any browser programs you are running on your computer device. The design of the page looks exactly like the MyLucky123.com hijacker.

The hijacker could change entries in the Windows registry to make the redirect appear on each start of the Google Chrome browser:

→HKLM\SOFTWARE\Wow6432Node\Policies\Google\Chrome\HomepageLocation

and

→HKLM\SOFTWARE\Wow6432Node\Policies\Google\Chrome\RestoreOnStartupURLs\1

In the screenshot underneath the paragraph, you can see how a search results page of Footybase.com looks. You get redirected to Google’s Custom Search results. That is made to trick people into trusting the hijacker redirect, as though it is a legitimate Google service or Google affiliate. Advertisements and sponsored contents show inside the search results as shown in the picture below.

stf-footybase-com-footy-base-climbontop-redirect-browser-hijacker-frank-sinatra-search-results-ads

You know you are trying to get scammed when you are offered tickets to a “Live” show of a dead artist. That’s just not right.

Your search queries will be filtered by the Footybase.com search engine. Before redirecting you to the Google service, every piece of information you provide from the search bar will be sent directly to servers of the hijacker. That information is going to be stored there for an unknown period. Be on alert if you are still using that search – it will intrude your privacy space and track browsing activity.

Be very careful with what information you give out to this service. Refrain from providing any account data, credential details, banking or personal information. In-text and redirect links can be generated when you are surfing the Internet. Information could also be gathered from the website when you use cookies. Read further to see what the Footybase.com website does to gather information from you.

The Privacy Policy of the Footybase.com is nowhere to be found. Instead, there are browser cookies which can accumulate data obtained from your searches and interaction with the website and redirects.

You can see how many cookies are injected to your PC, in the image below:

stf-footybase-com-footy-base-climbontop-redirect-browser-hijacker-cookies

Usually, by only visiting such websites, browser cookies are placed on your computer system and begin obtaining statistical data. Like, how much time you stay on the page, what time you have accessed the page, what your hardware and software are, what is your preferred language, what is the browser in use, etc. Cookies can also gather personal details about you from your searches and interactions with advertisements and text links. So, be wary and do not use such shady services.

If you do not approve of how your privacy is being intruded, then you should remove the browser hijacker redirect and all of its related components from your computer device.

Remove Footybase.com Completely

To remove Footybase.com manually from your computer, follow the step-by-step removal instructions provided below. In case the manual removal does not get rid of the hijacker and its redirects completely, you should search for and remove any leftovers with an advanced anti-malware tool. Such a program can keep your computer secure in the future.

Manually delete Footybase.com from Windows and your browser

Note! Substantial notification about the Footybase.com threat: Manual removal of Footybase.com requires interference with system files and registries. Thus, it can cause damage to your PC. Even if your computer skills are not at a professional level, don’t worry. You can do the removal yourself just in 5 minutes, using a malware removal tool.

1. Remove or Uninstall Footybase.com in Windows
2. Remove Footybase.com from Your Browser and Your Registry Editor

Automatically remove Footybase.com by downloading an advanced anti-malware program

1. Remove Footybase.com with SpyHunter Anti-Malware Tool and back up your data
Optional: Using Alternative Anti-Malware Tools

Berta Bilbao

Berta is the Editor-in-Chief of SensorsTechForum. She is a dedicated malware researcher, dreaming for a more secure cyber space.

More Posts - Website

Please wait...

Subscribe to our newsletter

Want to be notified when our article is published? Enter your email address and name below to be the first to know.