Analysis by: RonJay Kristoffer Caragay
ALIASES:

BrowserModifier:Win32/IGetNet (Microsoft); IGetNet (McAfee); Win32/Adware.IGetNet.AC (ESET-NOD32); IGetNet (Sophos); Adware/IGetNet (Fortinet); ADSPY/IGetNet.B (Avira); Adware.Igetnet.B (BitDefender); not-a-virus:AdWare.Win32.IGetNet.b (Kaspersky); Adware.IGetNet (Symantec)

 PLATFORM:

Windows

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 INFORMATION EXPOSURE:

  • Threat Type: Spyware

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This spyware may arrive bundled with malware packages as a malware component. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It requires its main component to successfully perform its intended routine.

  TECHNICAL DETAILS

File Size: 45,065 bytes
File Type: DLL
Initial Samples Received Date: 07 Apr 2011

Arrival Details

This spyware may arrive bundled with malware packages as a malware component.

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Autostart Technique

This spyware adds the following registry keys to install itself as a Browser Helper Object (BHO):

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
BHO.clsUrlSearch

Other Details

This spyware requires its main component to successfully perform its intended routine.