Home Malware Programs Adware Weblookup

Weblookup

Posted: March 28, 2006

Weblookup is an adware spyware designed to serve unsolicited pop-up advertisements. The threat also silently contacts predefined remote web servers in order to update its configuration settings. Weblookup must be manually installed. It works as a browser add-on and therefore runs every time the user launches Internet Explorer.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 weblookup.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareweblookupHKEY_LOCAL_MACHINESOFTWAREClassesRedirect.RedirectPageHKEY_LOCAL_MACHINESOFTWAREClassesRedirect.RedirectPage.1
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}DEDE7333-91F2-4064-8557-0EB2E3D37155D7988033-BDE1-4A36-BBE0-633F658BE770DC8240DF-E60D-4193-B984-5111847DC7E6
Loading...