Home Malware Programs Browser Hijackers lookfor.cc

lookfor.cc

Posted: March 28, 2006

lookfor Hihacks explorer page and directs it to http://www.lookfor.cc/index.php?p=xxxxx, there xxxxx is the ID code. Also tries to oblige to edit register keys at: HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainstart page

File System Modifications

  • The following files were created in the system:
    # File Name
    1 IEFEATSL.DLL
    2 MSHP.DLL
    3 MSIESH.DLL
    4 SUBMITHOOK.DLL
    5 UNINSTALL.EXE
    6 UNINSTALL.INI

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}UpdateDllsgotoHKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Runonceanddeleteiefeats1Update=rundll32iefeats1.dll
Loading...