Home Malware Programs Adware PremiumSearch

PremiumSearch

Posted: May 1, 2006

PremiumSearch installs a malicious Browser Helper Object (BHO) on the user's computer. The infection starts when it installs a fake 'Google' toolbar (which does not come from Google but has been created by a third party) and redirects to the PremiumSearch search engine. PremiumSearch also modifies the HOSTS file, which maps domain names that include Google.com, MSN.com, and Yahoo.com to an IP address hosting spoofed versions of those search engines. Users are redirected from other pages containing pirated software or pornography.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 45dd6cc479.exe
    2 actsie4.exe
    3 antispywaresoft.url
    4 avir.ico
    5 b1dc153079.exe
    6 cheapviagra.url
    7 cialis.ico
    8 emailspamfilter.url
    9 freedating.ico
    10 freeonlinecasino.url
    11 freereal-timedatingservice.url
    12 gamb.ico
    13 nospam.ico
    14 usbhdctl.exe
    15 utipwfubknk.dll

Related Posts

Loading...