ZHPDiag – Module G0 (GCSP)
The G0 module was created on November 11, 2010, it is linked to the GCSP module (Google Chrome Start Page). It allows you to search the Google Chrome start page.
The G0 module was created on November 11, 2010, it is linked to the GCSP module (Google Chrome Start Page). It allows you to search the Google Chrome start page.This information comes from the user's preferences file. Many adwares use this file to write their address and allow them to display their own site when the browser starts. This can be done with or without the consent of the Internet user. Browser hijackers use this file to redirect navigation to servers specialized in commercial actions.
ZHPDiag Overview
—\\ Google Chrome, Startup, Search, Extensions (G0,G1,G2)
G0 – GCSP: Preference
G0 – GCSP: Preference [User Data\Default] https://www.google.ch
Examples of detection
—\\ Google Chrome, Startup, Search, Extensions (G0,G1,G2)
G0 – GCSP: Preference [User Data\Default][HomePage] https://www.searchnu.com
G0 – GCSP: Preference [User Data\Default] https://www.searchnu.com
G0 – GCSP: Preference [User Data\Default] https://www.cherche.us/
ZHPFix action
G0 -GCSP: Preference [User Data\Default] – {HttpName}
{HttpName}: Name of the site contained in the user's preferences file,
– The tool removes the start page and replaces it with celle of google “https://www.google.fr/”
ZHPFix Report (Example)
G0 – GCSP: Preference [User Data\Default] https://www.cherche.us/
Report of ZHPFix 1.12.3216 by Nicolas Coolman, Update of 09/11/2010
========== Browser Preferences ==========
DELETED: G0 – GCSP: Preference [User Data\Default] http://www.cherche.us
========== Summary ==========
1: Browser preferences
End of the scan
NB: Relaunch the browser to take the changes into account.
