Home Malware Programs Browser Hijackers Lasaoren.com

Lasaoren.com

Posted: September 18, 2014

Threat Metric

Ranking: 6,709
Threat Level: 5/10
Infected PCs: 39,895
First Seen: September 16, 2014
Last Seen: October 12, 2023
OS(es) Affected: Windows


Lasaoren.com is a search site that promotes itself through a browser hijacker, increasing its traffic through questionable changes to your browser's settings. Lasaoren.com doesn't include threatening content intentionally. Even so, malware researchers rarely can justify the presence of an add-on that takes control of your Web browser away from you, and this continues to be the case with Lasaoren.com software. Most browser issues should be immediately resolvable for PC users uninstalling Lasaoren.com with anti-adware products.

The Yahoo Search that's More Insistent than Necessary

Lasaoren.com uses the format of a standard search engine but redirects all users to other sites (currently, the Yahoo Search) for any actual results. Other than subjecting this 'free' traffic to additional advertisements disguised as new search results, Lasaoren.com also may be linked to the bundled distribution of a Potentially Unwanted Program. This PUP modifies your browser's default search and homepage settings, forcing you to load Lasaoren.com. The Lasaoren program only has been verified for Firefox and Chrome, although trivial modifications would make Lasaoren compatible with other, equally popular browsers. This range of compatibilities is mildly notable for countering the popular perception of Chrome and Firefox being 'safer' than Internet Explorer, due to not being default Windows applications.

Lasaoren.com's software uses bundles with third-party products for its installation. These bundles may install Lasaoren or may misrepresent Lasaoren's features as benefits to the user. There are no discernible benefits to using Lasaoren relative to using Yahoo Search directly, although malware researchers do recommend that all PC users formulate personalized opinions on the individual viability of any PUP-classified product. While browsing Lasaoren.com search results, you should take time to identify Lasaoren.com's sponsored results and separate them from the Yahoo Search results, which are likely to contain differing content relevance.

Powering Your Online Searches with the Engine of Your Choice

Lasaoren software isn't threatening, and Lasaoren.com doesn't host threatening Web content. Nonetheless, not all links promoted by Lasaoren.com results are necessarily safe for your PC, and the browser hijacking functions of the Lasaoren add-on may prevent you from choosing your Web-browsing settings. As a rule, avoiding needless advertising content and extra software without clear benefits will provide your browser with the best performance and safety.

Regardless of the browser modified by Lasaoren products, normal uninstall techniques typically don't remove the associated side effects. Lasaoren's company recommends resetting your browser to its factory settings, although this procedure also may remove desirable settings data. As a more convenient alternative than Lasaoren's suggested solution, you can use dedicated anti-PUP scanners to delete Lasaoren and the software changes made by Lasaoren.

Common, insecure sources of free software also are the most likely sources of Lasaoren.com bundles. However, any security tool able to remove the Lasaoren software also should be able to identify bundle installers that may include browser hijackers, adware and any other PUPs of note.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 503.08 KB (503087 bytes)
MD5: b7292e43ed3c2070921be11fe75bfe77
Detection count: 122
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.46 KB (502467 bytes)
MD5: 1019df36575447e1f0fe3cdcd13785d1
Detection count: 54
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.48 KB (502481 bytes)
MD5: 4d4e70a9ccfdabc80c9e87212c9abbe1
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.9 KB (502907 bytes)
MD5: 9080c66d901a57f33282416b21e6db1a
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 503.04 KB (503043 bytes)
MD5: 6b425f4682f0ce1afc0c0b98e8f18105
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.37 KB (502377 bytes)
MD5: 7ac814676061f6f15300bca5a0dce1d0
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.66 KB (502669 bytes)
MD5: 519512beaf6cebba8e5d884a94b25ffd
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 492.59 KB (492597 bytes)
MD5: c96e12509f3c4fc0706cb40b2e45e857
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 539.23 KB (539238 bytes)
MD5: a7cac2b537e742b38bcf319ba9d0e640
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.29 KB (502298 bytes)
MD5: 4b9f389c737c4a3b80591633bc71fd9b
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 538.58 KB (538584 bytes)
MD5: 66709fa398966916cf5a7908547da3fe
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.37 KB (502379 bytes)
MD5: 9e315ab0ad240e5a7ed9fb174f1f99db
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 539.68 KB (539686 bytes)
MD5: 4f0c1ce5e29d35897a04d7c454cd6f5e
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.3 KB (502304 bytes)
MD5: ba998dc4ef549ff3cb6161f88e033fd3
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 539.93 KB (539930 bytes)
MD5: d2a1aa9759eda3903b6de150481e925f
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 503.15 KB (503155 bytes)
MD5: 31e2842408547ed571d589263efeff5d
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.37 KB (502378 bytes)
MD5: 6d37d2ea15d2b811e388a6de013c18f0
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.67 KB (502673 bytes)
MD5: 74b07f44c1233897d42887c1a3ac2c36
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.71 KB (502714 bytes)
MD5: 2dc0cf2e028828ea74d69dbc980582aa
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 503.16 KB (503163 bytes)
MD5: a80d93eb8f206d6626b73c6481278cf5
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%SystemDrive%\Users\<username>\AppData\Roaming\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 485.69 KB (485699 bytes)
MD5: 92770afe804cebfd7f6f250e978569ba
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.95 KB (502951 bytes)
MD5: 57851a769b6d95e4381b0f1382c964d7
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 502.57 KB (502572 bytes)
MD5: c1e10923c18f7f3a8ac844524fa6b0f9
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

File name without pathLasaoren.lnkHKEY..\..\..\..{RegistryKeys}Software\BRS\ConfigSoftware\BRS\ReportSOFTWARE\Classes\AppID\{9CE28B1F-CD59-4F6C-B4E8-5B1DA889B0F5}SOFTWARE\Classes\Wow6432Node\AppID\{9CE28B1F-CD59-4F6C-B4E8-5B1DA889B0F5}Software\LasaorenSoftware\Lasaoren BrowserSOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\lasaoren.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WSE_LasaorenSOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\lasaoren.exeSoftware\Microsoft\Windows\CurrentVersion\Run\BRSSoftware\Microsoft\Windows\CurrentVersion\RunOnce\WSE_LasaorenSOFTWARE\RegisteredApplications\Lasaoren.NSJA6BHDA3NCFCFMXW3QSCUYUQSOFTWARE\Wow6432Node\Classes\AppID\{9CE28B1F-CD59-4F6C-B4E8-5B1DA889B0F5}SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\lasaoren.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\lasaoren.exeSOFTWARE\Wow6432Node\RegisteredApplications\Lasaoren.NSJA6BHDA3NCFCFMXW3QSCUYUQSoftware\wse_lasaorenHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}WSE_Lasaoren

Additional Information

The following directories were created:
%APPDATA%\Lasaoren%APPDATA%\Microsoft\Windows\Start Menu\Programs\Lasaoren%APPDATA%\WSE_Lasaoren%LOCALAPPDATA%\Lasaoren%PROGRAMFILES%\WSE_Lasaoren%PROGRAMFILES(x86)%\WSE_Lasaoren
The following URL's were detected:
Lasaoren Searchhttp://lasaoren.com/page/bouncy.php
Loading...