Home Malware Programs Browser Hijackers Yoursearching.com

Yoursearching.com

Posted: November 16, 2015

Threat Metric

Ranking: 3,076
Threat Level: 5/10
Infected PCs: 49,336
First Seen: November 16, 2015
Last Seen: October 17, 2023
OS(es) Affected: Windows


If your default homepage suddenly changes to Yoursearching.com, then chances are there is a browser hijacker in your Web clients. The site looks plain and simple, which explains why it may not attract your attention initially. However, you should leave it immediately because the platform is not completely safe. Yoursearching.com looks like popular search engines. It resembles Google greatly to confuse the PC user. You may even detect the 'Web,' 'Images,' 'Videos' and 'News' database directories in the top left corner. The search field itself looks oddly familiar. Of course, the Google logo is absent because otherwise it may be the reason for legal disputes about copyright infringement. In addition to visual similarities, Yoursearching.com seems to borrow most of its results from Google directly. The problem is that the suspicious site manipulates them. Yoursearching.com adds above the sites sponsored links that match the criteria most accurately. There is nothing unique to this advertising activity: the developers of Yoursearching.com receive the corresponding commissions whenever they generate page impressions on the partner sites. However, the process may lead to two kinds of problems. First, visiting platforms that don't correspond to your terms may waste your time as these sites may not offer what you need. The second reason not to use Yoursearching.com concerns to the legitimacy of promoted domains. It is possible for some of them to host unsafe software or undertake various hoaxes. Since yoursearching.com doesn't offer a single feature that trustworthy engines don't have, it is advisable not to use it and to delete the harmful extension related to it.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%TEMP%\898A6F75-9F5F-428E-A20F-09F0466BA89B\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 726.26 KB (726264 bytes)
MD5: 3f6fc15ec562b0ce6ca727ee68f0cb72
Detection count: 90
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\898A6F75-9F5F-428E-A20F-09F0466BA89B
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\E52CA6C6-EFA0-4F69-94D7-6584FFAF37F4\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 317.68 KB (317688 bytes)
MD5: 03b0132a971610af6c49af7e1558994c
Detection count: 84
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\E52CA6C6-EFA0-4F69-94D7-6584FFAF37F4
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\CB3F3490-49BE-4B24-8EC8-0434F08BEF56\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 709.36 KB (709368 bytes)
MD5: b96840afc54be44d9533465d7f6d42ff
Detection count: 83
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\CB3F3490-49BE-4B24-8EC8-0434F08BEF56
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\C905D91F-E95B-4DB6-95FF-C356482DA30F\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 317.68 KB (317688 bytes)
MD5: 0da17ad4d130747e2d87e92ec9f0aab7
Detection count: 73
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\C905D91F-E95B-4DB6-95FF-C356482DA30F
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\5B7A1E2A-DBD8-499E-BAD7-5BF2FEC1708C\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 452.3 KB (452304 bytes)
MD5: eb406cf3dc536ee84ff2b213884f748d
Detection count: 64
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\5B7A1E2A-DBD8-499E-BAD7-5BF2FEC1708C
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\BC2022E0-68CB-4247-805B-E39201570318\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 452.34 KB (452344 bytes)
MD5: 3b1d661bf139519d35f7f5ddd28bd341
Detection count: 60
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\BC2022E0-68CB-4247-805B-E39201570318
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\nsg31AB.tmp\itr1_yoursearching.exe File name: itr1_yoursearching.exe
Size: 350.32 KB (350328 bytes)
MD5: ac2978900962d8ff1fd749c8c0c6009e
Detection count: 51
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nsg31AB.tmp
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\smt_yoursearching.exe File name: smt_yoursearching.exe
Size: 361.59 KB (361592 bytes)
MD5: 412d81c74c8917ac13de1593a3dfd21c
Detection count: 43
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\3D910065-5897-4B08-BAF8-670B8E3BF571\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 452.3 KB (452304 bytes)
MD5: e88671b4a12f173077f9f1207ef490e4
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\3D910065-5897-4B08-BAF8-670B8E3BF571
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\B04DF6E6-BD82-4F15-B13B-ED74C74E8124\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 452.34 KB (452344 bytes)
MD5: 829ac07fad1d63d8bf0f502760c84aab
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\B04DF6E6-BD82-4F15-B13B-ED74C74E8124
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\BD0C2915-3E45-41B5-822A-659DAA823E5C\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 705.24 KB (705248 bytes)
MD5: 5651492a0a217afd807c9e92a465ea56
Detection count: 40
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\BD0C2915-3E45-41B5-822A-659DAA823E5C
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\1457966431078\itr2_yoursearching.exe File name: itr2_yoursearching.exe
Size: 705.24 KB (705248 bytes)
MD5: cd32def025fe7297b93d14ca5f49e75e
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\1457966431078
Group: Malware file
Last Updated: March 30, 2016
C:\Users\<username>\AppData\Local\Temp\B860526D-AB7E-4E18-BEEF-6810FC0D922D\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 692.44 KB (692448 bytes)
MD5: 36e1a18d7fbc2a2ffb6cee2c0ce4f4f8
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\B860526D-AB7E-4E18-BEEF-6810FC0D922D\itr_yoursearching.exe
Group: Malware file
Last Updated: June 15, 2022
%TEMP%\in364BB553\6330E6AC_stp\5278_corna_yoursearching.exe File name: 5278_corna_yoursearching.exe
Size: 350.45 KB (350456 bytes)
MD5: c17860c2d8c12301a68d3704dfbe78da
Detection count: 31
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in364BB553\6330E6AC_stp
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\6C7E0228-4212-48B8-8B25-C3FE3215F6AA\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 474.89 KB (474896 bytes)
MD5: 12d9c32d14325a1662959420142c37a4
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\6C7E0228-4212-48B8-8B25-C3FE3215F6AA
Group: Malware file
Last Updated: March 30, 2016
C:\Windows\Temp\_avast_\ws10A5FC18.dat File name: ws10A5FC18.dat
Size: 194.22 KB (194224 bytes)
MD5: 1359989b08d8b88065733f92cf376791
Detection count: 9
File type: Data file
Mime Type: unknown/dat
Path: C:\Windows\Temp\_avast_\ws10A5FC18.dat
Group: Malware file
Last Updated: June 22, 2022
C:\Users\<username>\AppData\Local\Temp\component.exe File name: component.exe
Size: 753.4 KB (753400 bytes)
MD5: 91e6642d4341fae0d952b142e925d104
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\component.exe
Group: Malware file
Last Updated: September 10, 2022
%TEMP%\is-BH3V8.tmp\brd_yoursearching.exe File name: brd_yoursearching.exe
Size: 189.66 KB (189664 bytes)
MD5: fa6819b291844a2de008661d78d7209e
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\is-BH3V8.tmp
Group: Malware file
Last Updated: September 4, 2020
%TEMP%\E27686FD-1445-4F09-A5DC-386DD1794827\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 753.4 KB (753400 bytes)
MD5: cbb5bf759f9f4952fba1e10134ea3c21
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\E27686FD-1445-4F09-A5DC-386DD1794827
Group: Malware file
Last Updated: January 6, 2020
%TEMP%\itr2_yoursearching.exe File name: itr2_yoursearching.exe
Size: 452.3 KB (452304 bytes)
MD5: fa1f3b11396c1d3af55e05efe2051b62
Detection count: 6
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 30, 2016
%TEMP%\72E26C25-502C-438A-88A3-3860D95BDDB3\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 465.07 KB (465072 bytes)
MD5: 2cfcb20f9838fe52decce5bbc231ce29
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\72E26C25-502C-438A-88A3-3860D95BDDB3
Group: Malware file
Last Updated: April 24, 2020
%TEMP%\96C7B903-A2F7-4480-9C73-17E0B1098A2B\itr_yoursearching.exe File name: itr_yoursearching.exe
Size: 465.14 KB (465144 bytes)
MD5: 3b06f40ad10df5f45a78f13557a7087d
Detection count: 4
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\96C7B903-A2F7-4480-9C73-17E0B1098A2B
Group: Malware file
Last Updated: March 30, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

File name without pathhttp_www.yoursearching.com_0.localstoragehttp_www.yoursearching.com_0.localstorage-journalwww.yoursearching[1].xmlRegexp file mask%HOMEDRIVE%\yoursearching.xmlHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\yoursearching.comSOFTWARE\Wow6432Node\yoursearchingSoftwareSOFTWARE\yoursearchingSoftwareHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}yoursearchingyoursearching uninstall

Additional Information

The following directories were created:
%AppData%\yoursearching
The following URL's were detected:
http://yoursearching.com/
Loading...