Home Malware Programs Browser Hijackers Perez

Perez

Posted: March 28, 2006

Perez is a browser hijacker that changes Internet Explorer default start and search pages, modifies related settings, sends a web browser to predefined web sites. The spyware functions as an additional Internet Explorer toolbar. It doesn't spread and must be manually installed.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 iesearchtoolbar.dll
    2 iesearchtoolbar_uninstall.exe
    3 toolbar.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainSearchBar=[siteaddress]HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStartPage=[siteaddress]HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainUseCustomSearchURL=1HKEY_LOCAL_MACHINESOFTWAREPerezzzSoftwareIESearchToolbar
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}69753829-779C-45e7-9D8C-C79CE0989246EB381422-F797-4A98-A266-9DC4908219072C5175A2-ADF3-4F57-AB70-BA90FD60A383
Loading...