Home Malware Programs Adware MatrixSearch

MatrixSearch

Posted: March 28, 2006

MatrixSearch is an illegal advertising application that shows large amount of undesirable pop-ups in Internet Explorer. The spyware can secretly get into the computer while visiting some malicious web sites.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 mshtmpre.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOTAutoSearch1.BHOsrcHKEY_CLASSES_ROOTAutoSearch1.BHOsrc.1HKEY_CLASSES_ROOTAutoSearch1.SrchHookHKEY_CLASSES_ROOTAutoSearch1.SrchHook.1HKEY_CLASSES_ROOTBho.htmlHKEY_CLASSES_ROOTBho.html.1HKEY_CLASSES_ROOTBho1.htmlHKEY_CLASSES_ROOTBho1.html.1HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionWinTrustTrustProvidersSoftwarePublishingTrustDatabaseHKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerAboutURLshtml_gotoworkHKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerAboutURLshtml_onlyoneHKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerAboutURLshtml_reconfig3HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerAboutURLshtml_reconfig5HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerAboutURLshtml_reconfig9HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerAboutURLshtml_stopengineHKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerAboutURLshtml_unresidentHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunLoadHTML=rundll32.exeC:WindowsSystem32egsvr32.exemshtmpre
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}E9A45914-275E-4866-BB75-5D65CBC3F311B8F9DD56-4FFA-47B0-B9D7-42F45A752F4E5E6895EA-E919-4331-ADBE-827D4D8915ACFC02833E-9FDE-4862-974F-828887716A28722C6699-FDF7-4B4F-BDD0-F84CF5791A8034DCDBDB-60EF-4281-92C6-68C299AAB8E516F6A635-09F8-44E6-953E-81D037647255D879A0F1-2B3B-4409-8879-FAD6E49E1EA99C5B2F29-1F46-4639-A6B4-828942301D3E622CC208-B014-4FE0-801B-874A5E5E403A15651C7C-E812-44a2-A9AC-B467A2233E7D
Loading...