Home Malware Programs Adware RocketTab

RocketTab

Posted: December 19, 2013

Threat Metric

Ranking: 5,800
Threat Level: 2/10
Infected PCs: 61,307
First Seen: December 20, 2013
Last Seen: October 11, 2023
OS(es) Affected: Windows

RocketTab Screenshot 1RocketTab is a 'search enhancer' add-on that provides accessible search fields to prevent you from needing to visit popular search engine sites individually. Its functions also include additional advertisements that are injected into a search engine page, which makes it necessary to classify RocketTab as an adware program. RocketTab doesn't need to be considered a high-level threat to your PC's safety, but malware researchers usually do recommend uninstalling adware as a basic part of maintaining an optimized PC. Reliable security products should be trusted to delete RocketTab with no mischances that could leave your browser open to any extra advertisements leftover from RocketTab's stay.

RocketTab: an Add-On that's Keeping Tabs on Your Searches

RocketTab is a Web search-themed add-on, but unlike many similar PUPs, doesn't try to hijack your Web browser or force it to use one particular search engine. Instead of redirecting your traffic, RocketTab simply offers basic links to search engines embedded in its interface, but also uses your searches as an opportunity to launch advertisements. Based on malware researchers' latest reports, RocketTab's advertisements appear to be limited to injected 'sponsored' search results above the natural results of any search engine you may be using. RocketTab's advertisements are labeled and are confined to text, but don't have any guarantees of perfect accuracy to your queries.

Although RocketTab certainly is a classier style of adware product than the majority of those examined by malware experts and doesn't have an apparent cause to be classified as a clone of previously existing software, RocketTab still has few advantages for your Web browser. RocketTab advertisements may not appear to be a major issue, and are unlikely to cause any noticeable performance problems, but still may be sources of attacks against your PC. Fraudulent software updates concealing PC threats often are distributed through the same advertisement networks that are used by adware products.

Lastly, RocketTab also uses cookies and permits its third party advertising partners to use them, as well. Although cookies can't collect sensitive confidential data, they may monitor your basic browsing habits. Some PC users feel that cookies are invasions of their personal privacy, and you usually will not want to keep RocketTab or other adware on your computer if you're interested in keeping your personal habits strictly personal.

Sending RocketTab Blasting Off of Your Browser

Due to all of the issues with even the most user-friendly of adware products, removing RocketTab generally should be considered for a default reaction to RocketTab, unless, of course, you have a reasoned motive for keeping RocketTab on your browser. Although RocketTab may be somewhat responsible to normal uninstallation methods, malware researchers consider it best to use anti-malware tools to remove any Potentially Unwanted Program that modifies your Web browser. Other ways of removing RocketTab may be more or less workable, but often will not delete the browser changes that are causing your browser to load advertisements.

RocketTab is marketed by itself but may use other installation methods, from time to time. The most common of these alternative methods usually are free software bundles that install RocketTab when you're trying to install an unrelated program. Since malware experts find most of these bundles have been distributed through sites with a historical tendency to promote adware, avoiding these obviously

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\Search Extensions\Client.exe File name: Client.exe
Size: 1.43 MB (1437696 bytes)
MD5: 81d31bc0c00d7fdecbd8fda7b80235f5
Detection count: 1,007
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Search Extensions
Group: Malware file
Last Updated: December 10, 2020
%PROGRAMFILES(x86)%\Search Extensions\Client.exe File name: Client.exe
Size: 5.8 MB (5808128 bytes)
MD5: 3c763449eff860da5f586e14556972d4
Detection count: 815
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Search Extensions
Group: Malware file
Last Updated: December 12, 2019
%PROGRAMFILES%\Search Extensions\uninstall.exe File name: uninstall.exe
Size: 6.88 MB (6887936 bytes)
MD5: 73c32fe4aac5dc6f1056401edd9034d9
Detection count: 731
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Search Extensions
Group: Malware file
Last Updated: November 30, 2019
C:\System Volume Information\_restore{8EACE45B-C48E-4A37-A55C-C32F4F7B3227}\RP16\A0010334.exe File name: A0010334.exe
Size: 4.45 MB (4458496 bytes)
MD5: 118700722c5921a62a4610521efbb0f2
Detection count: 710
File type: Executable File
Mime Type: unknown/exe
Path: C:\System Volume Information\_restore{8EACE45B-C48E-4A37-A55C-C32F4F7B3227}\RP16\A0010334.exe
Group: Malware file
Last Updated: November 27, 2020
%PROGRAMFILES%\Search Extensions\uninstall.exe File name: uninstall.exe
Size: 6.81 MB (6813184 bytes)
MD5: 119af71d24567f52192b5e16c7a9ee1e
Detection count: 637
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Search Extensions
Group: Malware file
Last Updated: January 16, 2019
%PROGRAMFILES(x86)%\Search Extensions\Client.exe File name: Client.exe
Size: 5.81 MB (5812224 bytes)
MD5: 72604bedd39af58e59e31c1ee99ad6bf
Detection count: 611
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Search Extensions
Group: Malware file
Last Updated: August 19, 2018
%LOCALAPPDATA%\Search Extensions\Client.exe File name: Client.exe
Size: 5.81 MB (5812224 bytes)
MD5: 8f2d4acdb16f4cb261861bf112393e51
Detection count: 578
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Search Extensions
Group: Malware file
Last Updated: July 23, 2018
%LOCALAPPDATA%\Search Extensions\Client.exe File name: Client.exe
Size: 5.75 MB (5751528 bytes)
MD5: ca32ef870e2e198421ab767915a415b4
Detection count: 534
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Search Extensions
Group: Malware file
Last Updated: June 22, 2020
%PROGRAMFILES(x86)%\Search Extensions\Client.exe File name: Client.exe
Size: 5.81 MB (5812224 bytes)
MD5: 9088636ec0ae79b89c0e525c3a0c2fbb
Detection count: 534
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Search Extensions
Group: Malware file
Last Updated: April 16, 2020
%PROGRAMFILES%\Search Extensions\Client.exe File name: Client.exe
Size: 5.81 MB (5812224 bytes)
MD5: baded6aacf19a150bc336d2c706bc73a
Detection count: 494
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Search Extensions
Group: Malware file
Last Updated: July 22, 2018
%PROGRAMFILES(x86)%\Search Extensions\Client.exe File name: Client.exe
Size: 2.64 MB (2647552 bytes)
MD5: 7cee867f453c566c7ba04652ebdeb616
Detection count: 457
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Search Extensions
Group: Malware file
Last Updated: January 16, 2019
%PROGRAMFILES%\Search Extensions\Client.exe File name: Client.exe
Size: 5.81 MB (5812224 bytes)
MD5: 503ec5820ea124c9c96ef5241c7056b7
Detection count: 452
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Search Extensions
Group: Malware file
Last Updated: December 18, 2018
%PROGRAMFILES%\Search Extensions\uninstall.exe File name: uninstall.exe
Size: 5.95 MB (5958144 bytes)
MD5: 1be4534311a6701babbed12fabab1865
Detection count: 422
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Search Extensions
Group: Malware file
Last Updated: April 15, 2023
C:\Program Files\Search Extensions\uninstall.exe File name: uninstall.exe
Size: 6.51 MB (6513664 bytes)
MD5: 1d56572e5de94732396d474d2c410d47
Detection count: 419
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\Search Extensions\uninstall.exe
Group: Malware file
Last Updated: July 23, 2022
C:\Users\<username>\AppData\Local\Temp\rtVCVkI7bC.exe File name: rtVCVkI7bC.exe
Size: 6.57 MB (6579712 bytes)
MD5: 02b66add0cc97fff39260bb8f850b471
Detection count: 386
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\rtVCVkI7bC.exe
Group: Malware file
Last Updated: September 8, 2022
%PROGRAMFILES%\Search Extensions\uninstall.exe File name: uninstall.exe
Size: 6.56 MB (6569984 bytes)
MD5: ed8fc04266e111f6c9b74ae9180e8a47
Detection count: 368
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Search Extensions
Group: Malware file
Last Updated: December 18, 2018
%PROGRAMFILES(x86)%\Search Extensions\uninstall.exe File name: uninstall.exe
Size: 6.5 MB (6508544 bytes)
MD5: aa0df0b11b7ed5a65cf0407caaa582d3
Detection count: 251
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Search Extensions
Group: Malware file
Last Updated: December 22, 2014
%PROGRAMFILES(x86)%\Search Extensions\Client.exe File name: Client.exe
Size: 2.02 MB (2020352 bytes)
MD5: 918ddae7653f7286831242fc6560e38e
Detection count: 194
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Search Extensions
Group: Malware file
Last Updated: January 6, 2020
%LOCALAPPDATA%\Search Extensions\Client.exe File name: Client.exe
Size: 5.81 MB (5812224 bytes)
MD5: b595a9b10c5ae02dc93d4ffd3ba0be8b
Detection count: 180
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Search Extensions
Group: Malware file
Last Updated: December 22, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{B3791C53-EE85-4A60-8134-3FEE81687D5C}SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RocketTabSOFTWARE\Microsoft\Tracing\gb-installer-core_RASAPI32SOFTWARE\Microsoft\Tracing\gb-installer-core_RASMANCSSOFTWARE\Microsoft\Tracing\rt-installer-gg_RASAPI32SOFTWARE\Microsoft\Tracing\rt-installer-gg_RASMANCSSOFTWARE\Microsoft\Tracing\rt-installer_RASAPI32SOFTWARE\Microsoft\Tracing\rt-installer_RASMANCSSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RocketTabSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RocketTab Update TaskSoftware\RocketTabSoftware\RocketTabInstalledSoftware\Search Extensions\RocketTabSOFTWARE\Wow6432Node\Microsoft\Tracing\gb-installer-core_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\gb-installer-core_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\rt-installer-core_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\rt-installer-core_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\rt-installer-gg_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\rt-installer-gg_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\rt-installer_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\rt-installer_RASMANCSSOFTWARE\Wow6432Node\RocketTabHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}RocketTab

Additional Information

The following directories were created:
%APPDATA%\Microsoft\Installer\{2C8EBA8C-51A3-44A6-8532-05DFBECFCB3B}%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\eegbcllkjnijlnjahbfcgogkomnnbncf%LOCALAPPDATA%\Search Extensions%PROGRAMFILES%\Search Extensions%PROGRAMFILES(x86)%\Search Extensions%ProgramFiles%\RocketTab%ProgramFiles(x86)%\RocketTab
The following URL's were detected:
RocketTab

Related Posts

Loading...