Home Malware Programs Adware EnhanceMSearch

EnhanceMSearch

Posted: March 28, 2006

EnhanceMSearch is an adware application that shows relevant commercial advertisements based on user interests. It tracks user activity in the Internet and reads keywords entered into the search fields of several popular Internet search services like Google. The spyware starts automatically along with the Internet Explorer web browser and secretly works in background. Its files are located in the main computer directory .

File System Modifications

  • The following files were created in the system:
    # File Name
    1 del.tmp
    2 helper101.dll
    3 searchen.dat

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowserHelperObjectslastrun
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}017C20C1-F86F-11D8-9B25-000ACD002AE3
Loading...