Home Malware Programs Browser Hijackers Veba Search

Veba Search

Posted: October 23, 2014

Threat Metric

Ranking: 11,637
Threat Level: 2/10
Infected PCs: 9,900
First Seen: October 24, 2014
Last Seen: October 7, 2023
OS(es) Affected: Windows

Veba Search is part of a browser hijacker that is potent enough to manipulate your web browser. Its functionality includes changing your homepage, search settings, and you might find yourself redirected to potentially harmful websites. A browser hijacker might appear as a toolbar, add-on or a browser helper. The continuous use of Veba Search may expose you to cyber attacks. You should think twice whether to keep it or not.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\VebaSearch\ScriptHost64.dll File name: ScriptHost64.dll
Size: 438.27 KB (438272 bytes)
MD5: f0a97d63471cb2202bacb7e4da5dc6ba
Detection count: 2,534
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\VebaSearch
Group: Malware file
Last Updated: August 20, 2021
%PROGRAMFILES(x86)%\VebaSearch\ScriptHost64.dll File name: ScriptHost64.dll
Size: 438.27 KB (438272 bytes)
MD5: 282e5aa16938dbba6754e123a8af13f6
Detection count: 1,082
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\VebaSearch
Group: Malware file
Last Updated: October 24, 2014
%PROGRAMFILES%\VebaSearch\ScriptHost.dll File name: ScriptHost.dll
Size: 452.6 KB (452608 bytes)
MD5: 730fb5a6087947a9ce2c8f8305d272f7
Detection count: 597
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\VebaSearch
Group: Malware file
Last Updated: August 20, 2021
%PROGRAMFILES(x86)%\VebaSearch\ScriptHost64.dll File name: ScriptHost64.dll
Size: 438.27 KB (438272 bytes)
MD5: 913f74683401803665bbe638a8eb2d95
Detection count: 239
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\VebaSearch
Group: Malware file
Last Updated: October 24, 2014
%PROGRAMFILES%\VebaSearch\ScriptHost.dll File name: ScriptHost.dll
Size: 452.6 KB (452608 bytes)
MD5: ca5ea9ebc9312401690b8d624204cc67
Detection count: 21
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\VebaSearch
Group: Malware file
Last Updated: October 24, 2014
%PROGRAMFILES(x86)%\VebaSearch\BackgroundHost64.exe File name: BackgroundHost64.exe
Size: 503.8 KB (503808 bytes)
MD5: f5d88c54ad06120542ad2373044ba4c4
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\VebaSearch
Group: Malware file
Last Updated: October 24, 2014
%PROGRAMFILES%\VebaSearch\BackgroundHost.exe File name: BackgroundHost.exe
Size: 668.16 KB (668160 bytes)
MD5: 2533c6e31658294e4067edf40912c39d
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\VebaSearch
Group: Malware file
Last Updated: October 24, 2014

Registry Modifications

The following newly produced Registry Values are:

CLSID{09CCBF14-F63A-41AF-BC67-8A4DB17ECE8C}{20A364F7-0072-4671-BB45-F0F70FFDBFF4}{2EC89937-61D7-4289-886E-D4B24BA93040}{4E78EAD9-1A55-4001-9191-A4D8CDE4E85C}{8A6933D8-401C-4D92-82A1-9089ACB8812D}{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}{B54236FA-50D6-4DE5-8D7A-34C6B6EE6036}{BBBE01ED-0F1E-44DB-88C1-5CC1AEE3B462}{C76B33BA-136A-40AB-9C4B-6C1BCC7F7AD0}HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}SOFTWARE\Wow6432Node\MozillaPlugins\@getadverts.com/npTBUtilsSOFTWARE\Wow6432Node\VebaSearchHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}VebaSearch

Additional Information

The following directories were created:
%PROGRAMFILES%\VebaSearch%PROGRAMFILES(x86)%\VebaSearch
Loading...