Lasaoren.com

Posted: September 18, 2014

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	7,017
Threat Level:	5/10
Infected PCs:	40,186

First Seen:	September 16, 2014
Last Seen:	March 10, 2025
OS(es) Affected:	Windows

Lasaoren.com is a search site that promotes itself through a browser hijacker, increasing its traffic through questionable changes to your browser's settings. Lasaoren.com doesn't include threatening content intentionally. Even so, malware researchers rarely can justify the presence of an add-on that takes control of your Web browser away from you, and this continues to be the case with Lasaoren.com software. Most browser issues should be immediately resolvable for PC users uninstalling Lasaoren.com with anti-adware products.

The Yahoo Search that's More Insistent than Necessary

Lasaoren.com uses the format of a standard search engine but redirects all users to other sites (currently, the Yahoo Search) for any actual results. Other than subjecting this 'free' traffic to additional advertisements disguised as new search results, Lasaoren.com also may be linked to the bundled distribution of a Potentially Unwanted Program. This PUP modifies your browser's default search and homepage settings, forcing you to load Lasaoren.com. The Lasaoren program only has been verified for Firefox and Chrome, although trivial modifications would make Lasaoren compatible with other, equally popular browsers. This range of compatibilities is mildly notable for countering the popular perception of Chrome and Firefox being 'safer' than Internet Explorer, due to not being default Windows applications.

Lasaoren.com's software uses bundles with third-party products for its installation. These bundles may install Lasaoren or may misrepresent Lasaoren's features as benefits to the user. There are no discernible benefits to using Lasaoren relative to using Yahoo Search directly, although malware researchers do recommend that all PC users formulate personalized opinions on the individual viability of any PUP-classified product. While browsing Lasaoren.com search results, you should take time to identify Lasaoren.com's sponsored results and separate them from the Yahoo Search results, which are likely to contain differing content relevance.

Powering Your Online Searches with the Engine of Your Choice

Lasaoren software isn't threatening, and Lasaoren.com doesn't host threatening Web content. Nonetheless, not all links promoted by Lasaoren.com results are necessarily safe for your PC, and the browser hijacking functions of the Lasaoren add-on may prevent you from choosing your Web-browsing settings. As a rule, avoiding needless advertising content and extra software without clear benefits will provide your browser with the best performance and safety.

Regardless of the browser modified by Lasaoren products, normal uninstall techniques typically don't remove the associated side effects. Lasaoren's company recommends resetting your browser to its factory settings, although this procedure also may remove desirable settings data. As a more convenient alternative than Lasaoren's suggested solution, you can use dedicated anti-PUP scanners to delete Lasaoren and the software changes made by Lasaoren.

Common, insecure sources of free software also are the most likely sources of Lasaoren.com bundles. However, any security tool able to remove the Lasaoren software also should be able to identify bundle installers that may include browser hijackers, adware and any other PUPs of note.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%APPDATA%\WSE_Lasaoren\UpdateProc\bkup.dat

File name: bkup.dat
Size: 16.4 KB (16402 bytes)
MD5: 209ca206b803f1c4e788fea1541867ad
Detection count: 323
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: July 7, 2017

%LOCALAPPDATA%\Lasaoren\Application\lasaoren.exe

File name: lasaoren.exe
Size: 744.96 KB (744960 bytes)
MD5: 1cf60a431ca94bb9ce57244e95f39a0f
Detection count: 183
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Lasaoren\Application
Group: Malware file
Last Updated: November 12, 2014

%PROGRAMFILES(x86)%\WSE_Lasaoren\BRS\brs.exe

File name: brs.exe
Size: 976.87 KB (976872 bytes)
MD5: e6d1051155e6c70b5b2003d91b39d364
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\WSE_Lasaoren\BRS
Group: Malware file
Last Updated: September 16, 2014

%APPDATA%\WSE_Lasaoren\UpdateProc\UpdateTask.exe

File name: UpdateTask.exe
Size: 502.57 KB (502572 bytes)
MD5: c1e10923c18f7f3a8ac844524fa6b0f9
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Lasaoren\UpdateProc
Group: Malware file
Last Updated: March 22, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

File name without pathLasaoren.lnkHKEY..\..\..\..{RegistryKeys}Software\BRS\ConfigSoftware\BRS\ReportSOFTWARE\Classes\AppID\{9CE28B1F-CD59-4F6C-B4E8-5B1DA889B0F5}SOFTWARE\Classes\Wow6432Node\AppID\{9CE28B1F-CD59-4F6C-B4E8-5B1DA889B0F5}Software\LasaorenSoftware\Lasaoren BrowserSOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\lasaoren.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WSE_LasaorenSOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\lasaoren.exeSoftware\Microsoft\Windows\CurrentVersion\Run\BRSSoftware\Microsoft\Windows\CurrentVersion\RunOnce\WSE_LasaorenSOFTWARE\RegisteredApplications\Lasaoren.NSJA6BHDA3NCFCFMXW3QSCUYUQSOFTWARE\Wow6432Node\Classes\AppID\{9CE28B1F-CD59-4F6C-B4E8-5B1DA889B0F5}SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\lasaoren.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\lasaoren.exeSOFTWARE\Wow6432Node\RegisteredApplications\Lasaoren.NSJA6BHDA3NCFCFMXW3QSCUYUQSoftware\wse_lasaorenHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}WSE_Lasaoren

Additional Information

The following directories were created:

%APPDATA%\Lasaoren%APPDATA%\Microsoft\Windows\Start Menu\Programs\Lasaoren%APPDATA%\WSE_Lasaoren%LOCALAPPDATA%\Lasaoren%PROGRAMFILES%\WSE_Lasaoren%PROGRAMFILES(x86)%\WSE_Lasaoren

The following URL's were detected:

Lasaoren Searchlasaoren.com