Removing the SearchBlox malware that targets Roblox and Rolimons
Written by Tomas Meskauskas on (updated)
What is SearchBlox?
SearchBlox is a malicious Google Chrome browser extension. There are two variants of this extension, and both promise to allow users to search the Roblox video game platform servers for a specific player. Instead, this piece of malicious software targets data associated with Roblox and Rolimons - the former's trading platform.
SearchBlox has surfaced several times on the Chrome Web Store and has been removed at least once since July 2022. However, it is known that at least two hundred thousand users have already downloaded this malware. There is no concrete evidence on whether this extension has always been intended for this malicious use or had become trojanized at some point.
SearchBlox overview
SearchBlox malware variants request permissions to either access data on Roblox websites or all visited sites in general. This browser extension targets the log-in credentials (usernames/passwords) of Roblox and Rolimons accounts.
In addition to having the accounts stolen, users can also experience a financial loss since Robux (Roblox's in-game currency) and various assets/items have value and are sold for real currency.
Furthermore, the SearchBlox extension may target other sensitive information, e.g., browsing and search engine histories, personally identifiable details, log-in credentials, credit card numbers, etc. The collected data can then be monetized via sale to third-parties or otherwise abused for profit.
To summarize, the presence of software like SearchBlox on devices can result in system infections, serious privacy issues, financial losses, and identity theft.
Therefore, if you have this extension installed on your browser - we strongly recommend removing it without delay. Another recommendation is to clear the browser cookies and change the passwords for all potentially compromised accounts.
| Name | SearchBlox malicious browser extension |
| Threat Type | Malicious Browser Extension, Malware, Spyware |
| Browser Extension(s) | SearchBlox |
| Supposed Functionality | Roblox player searching tool |
| Distribution Methods | Deceptive pop-up ads, free software installers (bundling), fake Flash Player installers. |
| Damage | Stolen Roblox, Rolimons, and potentially other accounts. Browser tracking - privacy issues, possible additional malware infections. |
| Malware Removal (Windows) | To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. |
Malicious browser extension examples
The Internet is rife with deceptive and dangerous content. Malicious browser extensions are a common occurrence; typically, they operate as adware (e.g., Cyber Shield, Watch Movies, etc.) or browser hijackers (e.g., Canvas Tab, Search-Zone, etc.).
However, there are some with additional/different harmful capabilities, such as Cloud 9 JavaScript BotNet and Cookie Stuffing Browser Extensions.
Regardless of how the harmful software operates or if the promised features work - its presence on a browser/system endangers device integrity and user safety. Therefore, all threats must be eliminated immediately upon detection.
How did SearchBlox install on my computer?
SearchBlox has been uploaded and re-uploaded to the Chrome Web Store. While hosting malware and other harmful content on legitimate platforms is a distribution technique that lacks longevity - it does, for a time, create an impression of legitimacy. Due to this, developers of malicious software continue to try and use genuine download channels.
However, it is not unlikely that SearchBlox is spread using other methods. For example, freeware and free file-hosting websites, P2P sharing networks, or other third-party download sources.
"Bundling" - packing regular program installers with unwanted/malicious additions - is another popular technique. Intrusive advertisements proliferate software as well. Once clicked on, some of these ads can execute scripts to perform stealthy downloads/installations.
How to avoid installing software like SearchBlox?
We highly recommend researching software by reading terms and expert/user reviews, checking out necessary permissions, verifying developer legitimacy, etc. It is just as important to be cautious when installing programs. Therefore, we advise reading terms, inspecting possible options, and using the "Custom/Advanced" settings to opt-out of all additional apps, extensions, tools, etc.
Another recommendation is to be vigilant when browsing since fake and malicious content usually appears ordinary and innocuous. For example, intrusive ads may look harmless yet redirect to unreliable/questionable sites (e.g., pornography, gambling, adult-dating, etc.).
In case of encounters with rogue ads/redirects, check the device and immediately remove all suspicious applications and browser extensions/plug-ins. If your computer is already infected with SearchBlox, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate this malware.
Screenshot of the permissions asked by a variant of SearchBlox:
Screenshot of the permissions asked by another variant of SearchBlox:
Instant automatic malware removal:
Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner
By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.
Quick menu:
Remove SearchBlox from Google Chrome:
Video showing how to remove potentially unwanted browser add-ons:
Remove malicious extensions from Google Chrome:
Click the Chrome menu icon 
(at the top right corner of Google Chrome), select "More Tools" and click "Extensions". Locate "SearchBlox" and all other recently-installed suspicious extensions, select these entries and click "Remove".
Optional method:
If you continue to have problems with removal of the searchblox malicious browser extension, reset your Google Chrome browser settings. Click the Chrome menu icon (at the top right corner of Google Chrome) and select Settings. Scroll down to the bottom of the screen. Click the Advanced… link.
After scrolling to the bottom of the screen, click the Reset (Restore settings to their original defaults) button.
In the opened window, confirm that you wish to reset Google Chrome settings to default by clicking the Reset button.
Frequently Asked Questions (FAQ)
What harm can SearchBlox cause?
SearchBlox seeks to obtain the log-in credential of Roblox and Rolimons. Hence, these accounts can get stolen, and users can experience a financial loss since the in-game currency (Robux) and various assets/items have real-world value. Additionally, SearchBlox might be able to acquire other sensitive data (e.g., log-in credentials, credit card numbers, etc.).
In summary, the presence of this software may lead to system infections, serious privacy issues, financial losses, and identity theft.
How did SearchBlox infiltrate my computer?
SearchBlox has been observed being distributed through the Chrome Web Store. However, other distribution methods are likely. Generally, software of this kind is primarily spread via bundled installers, untrustworthy download sources (e.g., unofficial and freeware sites, P2P sharing networks, etc.), online scams, spam browser notifications, and intrusive ads.
Will Combo Cleaner remove SearchBlox malicious extension?
Yes, Combo Cleaner is designed to detect and eliminate threats. It can remove installed browser hijackers, adware, PUAs, and other unwanted software. Combo Cleaner is also capable of detecting and removing practically all known malware infections.
It is noteworthy that manual removal (performed without the aid of security programs) might be ineffective. In some cases, even after the software has been manually removed - various file leftovers remain hidden within the system. Furthermore, the remnants may continue to run and cause problems. Hence, it is crucial to remove software thoroughly.
Outstanding!
▼ Show Discussion