Home Malware Programs Adware Torrent Search

Torrent Search

Posted: February 24, 2015

Threat Metric

Ranking: 704
Threat Level: 2/10
Infected PCs: 119,951
First Seen: February 24, 2015
Last Seen: March 10, 2025
OS(es) Affected: Windows


The Torrent Search application is an open source project that you can find at Torrent-search.sourceforge.net. The Torrent Search application may be advertised via freeware bundles and sites like IsoHunt.to, ThePirateBay.se and Kat.cr as being an easy to use tool for finding content that is shared publicly. You should note that the materials offered at the previously mentioned sites may be an object of copyrights and distributed to users illegally. Therefore, the Torrent Search application may get you into trouble, and you may be required by state law to pay a fine of five thousand dollars for violating copyrights. If the hefty fine is not enough for you to reconsider installing the Torrent Search application, there are other aspects to consider. Security experts alert that the Torrent Search app is adware and may load insecure content into your browser, which may be rigged with RedKit and the Magnitude Exploit Kits. The developers of the Torrent Search adware may have had the intention of helping fellow PC users to find torrents quickly. However, the services of the Torrent Search app are not free, and you might be harassed with pop-up advertisements and banners loaded with coupons and special offers. The creators of the Torrent Search adware might use its central servers to collect usage statistics like your browsing and download history, recently entered search terms and software configuration to help affiliated advertisers push targeted advertisements and earn a little extra. The Torrent Search adware may run in your system background continuously, and you may notice a small green icon in the tray notification area. Security experts alert that the Torrent Search adware may be used to mine cryptocurrency by hijacking forty percent of your graphic card memory. You might want to consider deleting the Torrent Search adware with the help of a reliable anti-spyware tool that can boost your cyber defenses.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\VK OK AdBlock\VvvSjtp.exe File name: VvvSjtp.exe
Size: 143.48 KB (143480 bytes)
MD5: db4aa3309b23b2a5be6abd1e686852ff
Detection count: 293
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\VK OK AdBlock
Group: Malware file
Last Updated: August 11, 2016
%PROGRAMFILES(x86)%\Torrent Search\IEEF\eF_AlPyYh8Ik.dll File name: eF_AlPyYh8Ik.dll
Size: 565.63 KB (565632 bytes)
MD5: 85c3a855255b210f9917d60679912bee
Detection count: 169
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Torrent Search\IEEF
Group: Malware file
Last Updated: March 26, 2020
%PROGRAMFILES(x86)%\VK OK AdBlock\IEEF\fcfdRZvRgj.dll File name: fcfdRZvRgj.dll
Size: 455.8 KB (455800 bytes)
MD5: 56a34667cb89c93d73610180188927c7
Detection count: 87
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\VK OK AdBlock\IEEF
Group: Malware file
Last Updated: August 11, 2016
%PROGRAMFILES%\VK OK AdBlock\IEEF\a2gohArM7S.dll File name: a2gohArM7S.dll
Size: 271.99 KB (271992 bytes)
MD5: 47224b9f25ccfb9b25c044a0b317c135
Detection count: 82
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\VK OK AdBlock\IEEF
Group: Malware file
Last Updated: August 11, 2016
%PROGRAMFILES%\Torrent Search\IEEF\0MjDulaEls67.dll File name: 0MjDulaEls67.dll
Size: 443.59 KB (443592 bytes)
MD5: 5eccf188a60adbd5c762b6f011ddad7f
Detection count: 77
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Torrent Search\IEEF
Group: Malware file
Last Updated: July 13, 2016
%PROGRAMFILES(x86)%\VK OK AdBlock\IEEF\brhZWJdhe9.dll File name: brhZWJdhe9.dll
Size: 455.8 KB (455800 bytes)
MD5: dd33a4d74cc921ea7ebecbb0c4259945
Detection count: 66
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\VK OK AdBlock\IEEF
Group: Malware file
Last Updated: August 11, 2016
%PROGRAMFILES%\Torrent Search\IEEF\9S2TBReGP5wb.exe File name: 9S2TBReGP5wb.exe
Size: 768.14 KB (768144 bytes)
MD5: b7f7d9f74213b89efa5e332100c679cb
Detection count: 61
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Torrent Search\IEEF
Group: Malware file
Last Updated: April 4, 2020
%PROGRAMFILES(x86)%\Torrent Search\IEEF\jALkrRxRNKw4.dll File name: jALkrRxRNKw4.dll
Size: 565.63 KB (565632 bytes)
MD5: c1515fdd4880f312915b364fa5989ed0
Detection count: 59
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Torrent Search\IEEF
Group: Malware file
Last Updated: June 11, 2016
%PROGRAMFILES%\VK OK AdBlock\IEEF\TrhzximJK6.dll File name: TrhzximJK6.dll
Size: 292.81 KB (292816 bytes)
MD5: 07c175617a22072014420c4fa1fb94e2
Detection count: 47
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\VK OK AdBlock\IEEF
Group: Malware file
Last Updated: August 11, 2016
%PROGRAMFILES%\VK OK AdBlock\uninstall.exe File name: uninstall.exe
Size: 1.5 MB (1502024 bytes)
MD5: d61cb31c1fd00bf7ae1b7431872b0415
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\VK OK AdBlock
Group: Malware file
Last Updated: August 11, 2016
%PROGRAMFILES%\VK OK AdBlock\IEEF\Nx7oJ5nfRZ.exe File name: Nx7oJ5nfRZ.exe
Size: 645.35 KB (645352 bytes)
MD5: bb3d02a237d1de48a5225b2dbbaddc39
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\VK OK AdBlock\IEEF
Group: Malware file
Last Updated: June 11, 2016
%PROGRAMFILES(x86)%\VK OK AdBlock\IEEF\QpLIu0JeyX.dll File name: QpLIu0JeyX.dll
Size: 312.04 KB (312040 bytes)
MD5: 27adab0dda18f583f769e5f97776f27a
Detection count: 33
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\VK OK AdBlock\IEEF
Group: Malware file
Last Updated: August 11, 2016
%PROGRAMFILES(x86)%\VK OK AdBlock\IEEF\_QUFe_tPlj.exe File name: _QUFe_tPlj.exe
Size: 645.35 KB (645352 bytes)
MD5: d8797e5cfd21cddd4c57dd2d1510aafc
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\VK OK AdBlock\IEEF
Group: Malware file
Last Updated: June 11, 2016
%PROGRAMFILES%\Torrent Search\IEEF\oRfBqFdMWD84.dll File name: oRfBqFdMWD84.dll
Size: 443.59 KB (443592 bytes)
MD5: aa893ab5a22db19a48a81ba30e02f960
Detection count: 30
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Torrent Search\IEEF
Group: Malware file
Last Updated: December 27, 2019
%PROGRAMFILES(x86)%\VK OK AdBlock\4E82NdX.exe File name: 4E82NdX.exe
Size: 90.85 KB (90856 bytes)
MD5: 07d0b2f2096bfde6ca3f1660252f6d85
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\VK OK AdBlock
Group: Malware file
Last Updated: July 13, 2016
%PROGRAMFILES%\VK OK AdBlock\IEEF\Nx7oJ5nfRZ.dll File name: Nx7oJ5nfRZ.dll
Size: 220.39 KB (220392 bytes)
MD5: 1d1c32ccc60b3619db3471b32030d331
Detection count: 19
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\VK OK AdBlock\IEEF
Group: Malware file
Last Updated: June 11, 2016
%PROGRAMFILES(x86)%\Torrent Search\IEEF\BOlyddIfFlyx.dll File name: BOlyddIfFlyx.dll
Size: 565.64 KB (565640 bytes)
MD5: efa57ac143096df9e01ef3e8a66311e6
Detection count: 19
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Torrent Search\IEEF
Group: Malware file
Last Updated: June 11, 2016
%PROGRAMFILES%\Video Saver 2\IEEF\dhp0S8J2XL.dll File name: dhp0S8J2XL.dll
Size: 271.27 KB (271272 bytes)
MD5: 67ce7f23c0641659b0ad27685b8c4452
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Video Saver 2\IEEF
Group: Malware file
Last Updated: June 11, 2016
%PROGRAMFILES%\VK OK AdBlock\oVBHspU.exe File name: oVBHspU.exe
Size: 90.85 KB (90856 bytes)
MD5: b73429712815e20fc5d98f705eae0a17
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\VK OK AdBlock
Group: Malware file
Last Updated: July 13, 2016
%PROGRAMFILES(x86)%\Torrent Search\IEEF\MEa88jFfiDeZ.dll File name: MEa88jFfiDeZ.dll
Size: 565.64 KB (565640 bytes)
MD5: 47d2637b5ba4331d3088a19a5ac3d105
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\Torrent Search\IEEF
Group: Malware file
Last Updated: November 24, 2019
%PROGRAMFILES%\Media Saver\IEEF\_Utl_2MfAc.dll File name: _Utl_2MfAc.dll
Size: 270.8 KB (270808 bytes)
MD5: 643fee997c90d1c86329953053cae5e7
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Media Saver\IEEF
Group: Malware file
Last Updated: June 11, 2016
%PROGRAMFILES%\Torrent Search\IEEF\H7HqXE8WeC2Z.dll File name: H7HqXE8WeC2Z.dll
Size: 443.6 KB (443600 bytes)
MD5: f95a06ccab96b8bd5aea747b90bfe806
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\Torrent Search\IEEF
Group: Malware file
Last Updated: June 11, 2016
%PROGRAMFILES%\VK OK AdBlock\IEEF\TrhzximJK6.exe File name: TrhzximJK6.exe
Size: 339.92 KB (339920 bytes)
MD5: 2e8c87480f85874aedbe5794c5216e06
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\VK OK AdBlock\IEEF
Group: Malware file
Last Updated: August 11, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{03AE1B7B-A9E7-4D5A-9D34-89999C31B659}{22AFAC71-C6C3-47EA-A30E-A181F1B63411}{357D32FC-F0AE-4B37-B36F-D44AA31496F5}{44933305-00E7-4EAF-B907-4F0B5024845F}{5A83D7C9-4A14-4000-BC05-389268238753}{6024E484-490B-4FD7-8205-1FFF4EEE7539}{617807FB-4FCA-48ED-8290-EA4B3342FB17}{6E727987-C8EA-44DA-8749-310C0FBE3C3E}{71C14936-0068-469E-8633-B88961FE45A9}{80B3B43F-7508-4627-BE66-00FB9AE5EE72}{A06ED961-D98F-4CF9-A89B-80AB11DB149C}{DCFCC2EC-3F33-45A8-8ADF-A6C81F11232F}{DE59DEE8-0FB4-46BA-BC67-97CFA3AFD9DA}Regexp file mask%APPDATA%\Homepager.exe.bat%WINDIR%\System32\Tasks\6E727987-C8EA-44DA-8749-310C0FBE3C3E%WINDIR%\System32\Tasks\6E727987-C8EA-44DA-8749-310C0FBE3C3E2%WINDIR%\System32\Tasks\B3A986DC-C2DD-40A0-8C0C-FEF66B783511[RANDOM CHARACTERS]%WINDIR%\System32\Tasks\PED_Torrent_Search%WINDIR%\System32\Tasks\U2_B3A986DC-C2DD-40A0-8C0C-FEF66B783511%WinDir%\System32\Tasks\Update Service for Torrent Search[RANDOM CHARACTERS]%WINDIR%\Tasks\6E727987-C8EA-44DA-8749-310C0FBE3C3E.job%WINDIR%\Tasks\B3A986DC-C2DD-40A0-8C0C-FEF66B783511[RANDOM CHARACTERS].job%WINDIR%\Tasks\PED_Torrent_Search.job%WinDir%\Tasks\Update Service for Torrent Search[RANDOM CHARACTERS].jobHKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\CLSID\{17FE002F-FCF8-4B85-BEA7-5E551B7D4010}SOFTWARE\Classes\CLSID\{B3A986DC-C2DD-40A0-8C0C-FEF66B783511}SOFTWARE\Classes\SOFTWARE\Classes\CLSID\{03AE1B7B-A9E7-4D5A-9D34-89999C31B659}SOFTWARE\Classes\SOFTWARE\Classes\CLSID\{17FE002F-FCF8-4B85-BEA7-5E551B7D4010}SOFTWARE\Classes\TypeLib\{191A476F-8D04-43CE-A173-8C602E7A7B0D}SOFTWARE\Classes\TypeLib\{5CF327B9-3531-447A-AEF1-7A3CB2C60B23}SOFTWARE\Classes\WOW6432Node\CLSID\{17FE002F-FCF8-4B85-BEA7-5E551B7D4010}SOFTWARE\Classes\WOW6432Node\CLSID\{B3A986DC-C2DD-40A0-8C0C-FEF66B783511}SOFTWARE\Classes\Wow6432Node\TypeLib\{5CF327B9-3531-447A-AEF1-7A3CB2C60B23}Software\HomepagerSoftware\Microsoft\Internet Explorer\Approved Extensions\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}SOFTWARE\Microsoft\Internet Explorer\Extensions\{03AE1B7B-A9E7-4D5A-9D34-89999C31B659}SOFTWARE\Microsoft\Internet Explorer\Extensions\{17FE002F-FCF8-4B85-BEA7-5E551B7D4010}SOFTWARE\Microsoft\Internet Explorer\Extensions\{44627DAE-18B6-4ABC-8B22-13979EDFC56D}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BE1819A7-6E66-4B63-8788-44C2A9100575}Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DCFCC2EC-3F33-45A8-8ADF-A6C81F11232F}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDD14F6-78DA-49E7-A868-85EC771148EE}Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping\{03AE1B7B-A9E7-4D5A-9D34-89999C31B659}Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\9S2TBReGP5wb.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\PED_Torrent_Search.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\PED_Torrent_Search.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PED_Torrent_SearchSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update Service for Torrent SearchSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Update Service for Torrent Search2SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{05EB6920-D8AD-4350-BEF1-4F7107F70431}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B3A986DC-C2DD-40A0-8C0C-FEF66B783511}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{05EB6920-D8AD-4350-BEF1-4F7107F70431}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}Software\Torrent SearchSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extensions\{03AE1B7B-A9E7-4D5A-9D34-89999C31B659}SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{17FE002F-FCF8-4B85-BEA7-5E551B7D4010}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BE1819A7-6E66-4B63-8788-44C2A9100575}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DCFCC2EC-3F33-45A8-8ADF-A6C81F11232F}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDD14F6-78DA-49E7-A868-85EC771148EE}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{05EB6920-D8AD-4350-BEF1-4F7107F70431}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}SOFTWARE\Wow6432Node\Torrent SearchHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}6E727987-C8EA-44DA-8749-310C0FBE3C3EHomepagerSearcherTorrent Search

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Torrent_Search_PED%APPDATA%\Homepager%APPDATA%\Searcher%PROGRAMFILES%\MSearchIE%PROGRAMFILES%\MSearchU%PROGRAMFILES%\MSearchUn%PROGRAMFILES%\MadarchU2%PROGRAMFILES%\MafarchIE%PROGRAMFILES%\MafarchU%PROGRAMFILES%\MafarchU2%PROGRAMFILES%\MafarchUn%PROGRAMFILES%\MayarchUn%PROGRAMFILES%\MederchU%PROGRAMFILES%\MediaSerchIE%PROGRAMFILES%\MediaSerchU%PROGRAMFILES%\MediaSerchU2%PROGRAMFILES%\MediaSerchUn%PROGRAMFILES%\MefarchIE%PROGRAMFILES%\Mozilla Firefox\browser\features\{D29DBC80-E8B5-4116-AB62-ECD8ED032A33}%PROGRAMFILES%\SearchDefender%PROGRAMFILES%\TSearchIE%PROGRAMFILES%\Torrent Search%PROGRAMFILES%\Torrent SearchIE%PROGRAMFILES%\Torrent SearchU%PROGRAMFILES%\Torrent SearchUn%PROGRAMFILES(x86)%\MSearchIE%PROGRAMFILES(x86)%\MSearchU%PROGRAMFILES(x86)%\MSearchUn%PROGRAMFILES(x86)%\MadarchU2%PROGRAMFILES(x86)%\MafarchIE%PROGRAMFILES(x86)%\MafarchU%PROGRAMFILES(x86)%\MafarchU2%PROGRAMFILES(x86)%\MafarchUn%PROGRAMFILES(x86)%\MayarchUn%PROGRAMFILES(x86)%\MederchU%PROGRAMFILES(x86)%\MediaSerchIE%PROGRAMFILES(x86)%\MediaSerchU%PROGRAMFILES(x86)%\MediaSerchU2%PROGRAMFILES(x86)%\MediaSerchUn%PROGRAMFILES(x86)%\MefarchIE%PROGRAMFILES(x86)%\Mozilla Firefox\browser\features\{D29DBC80-E8B5-4116-AB62-ECD8ED032A33}%PROGRAMFILES(x86)%\TSearchIE%PROGRAMFILES(x86)%\TSearchU%PROGRAMFILES(x86)%\TSearchUn%PROGRAMFILES(x86)%\Torrent Search%PROGRAMFILES(x86)%\Torrent SearchIE%PROGRAMFILES(x86)%\Torrent SearchU%PROGRAMFILES(x86)%\Torrent SearchUn%USERPROFILE%\AppData\LocalLow\TSearch%USERPROFILE%\Application Data\TSearch%appdata%\TSearch%windir%\SysWOW64\config\systemprofile\AppData\Roaming\Searcher%windir%\System32\config\systemprofile\AppData\Roaming\Searcher
The following URL's were detected:
"name":"TSearch"1stserp.comappsaddons.com/app_torrentsearchbearblack.rucosmosearch.rudefaultenginename", "GoSearch")getsearch.rugo-search.rurusearcher.comsearch.baisvik.comsmartsputnik.ruspacesearch.rutorrentexpert.rutraff-4.ru{D29DBC80-E8B5-4116-AB62-ECD8ED032A33}
Loading...