PremiumSearch
PremiumSearch installs a malicious Browser Helper Object (BHO) on the user's computer. The infection starts when it installs a fake 'Google' toolbar (which does not come from Google but has been created by a third party) and redirects to the PremiumSearch search engine. PremiumSearch also modifies the HOSTS file, which maps domain names that include Google.com, MSN.com, and Yahoo.com to an IP address hosting spoofed versions of those search engines. Users are redirected from other pages containing pirated software or pornography.
File System Modifications
- The following files were created in the system:
# File Name 1 45dd6cc479.exe 2 actsie4.exe 3 antispywaresoft.url 4 avir.ico 5 b1dc153079.exe 6 cheapviagra.url 7 cialis.ico 8 emailspamfilter.url 9 freedating.ico 10 freeonlinecasino.url 11 freereal-timedatingservice.url 12 gamb.ico 13 nospam.ico 14 usbhdctl.exe 15 utipwfubknk.dll
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.