Home Malware Programs Browser Hijackers Veba Search

Veba Search

Posted: October 23, 2014

Threat Metric

Ranking: 10,434
Threat Level: 2/10
Infected PCs: 9,966
First Seen: October 24, 2014
Last Seen: March 2, 2025
OS(es) Affected: Windows

Veba Search is part of a browser hijacker that is potent enough to manipulate your web browser. Its functionality includes changing your homepage, search settings, and you might find yourself redirected to potentially harmful websites. A browser hijacker might appear as a toolbar, add-on or a browser helper. The continuous use of Veba Search may expose you to cyber attacks. You should think twice whether to keep it or not.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\VebaSearch\ScriptHost64.dll File name: ScriptHost64.dll
Size: 438.27 KB (438272 bytes)
MD5: 282e5aa16938dbba6754e123a8af13f6
Detection count: 1,082
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\VebaSearch
Group: Malware file
Last Updated: October 24, 2014
%PROGRAMFILES%\VebaSearch\ScriptHost.dll File name: ScriptHost.dll
Size: 452.6 KB (452608 bytes)
MD5: 79ab5d6f5f5cb31845ca556b7f9589cb
Detection count: 281
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\VebaSearch
Group: Malware file
Last Updated: October 23, 2018
%PROGRAMFILES(x86)%\VebaSearch\BackgroundHost64.exe File name: BackgroundHost64.exe
Size: 503.8 KB (503808 bytes)
MD5: f5d88c54ad06120542ad2373044ba4c4
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\VebaSearch
Group: Malware file
Last Updated: October 24, 2014
%PROGRAMFILES%\VebaSearch\BackgroundHost.exe File name: BackgroundHost.exe
Size: 668.16 KB (668160 bytes)
MD5: 2533c6e31658294e4067edf40912c39d
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\VebaSearch
Group: Malware file
Last Updated: October 24, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{09CCBF14-F63A-41AF-BC67-8A4DB17ECE8C}{20A364F7-0072-4671-BB45-F0F70FFDBFF4}{2EC89937-61D7-4289-886E-D4B24BA93040}{4E78EAD9-1A55-4001-9191-A4D8CDE4E85C}{8A6933D8-401C-4D92-82A1-9089ACB8812D}{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}{B54236FA-50D6-4DE5-8D7A-34C6B6EE6036}{BBBE01ED-0F1E-44DB-88C1-5CC1AEE3B462}{C76B33BA-136A-40AB-9C4B-6C1BCC7F7AD0}HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Approved Extensions\{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{8E0B5CFE-A7EB-4F19-848A-C862F2AD464D}SOFTWARE\Wow6432Node\MozillaPlugins\@getadverts.com/npTBUtilsSOFTWARE\Wow6432Node\VebaSearchHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}VebaSearch

Additional Information

The following directories were created:
%PROGRAMFILES%\VebaSearch%PROGRAMFILES(x86)%\VebaSearch
Loading...