Search
Keyword: browser hijacker
application credentials. It can also intercept search queries to Google, Yahoo, MSN, Ask, or Live and redirect users to dubious search portals via Web Search Hijacker . Users who may try to access legitimate
keys to install itself as a Browser Helper Object (BHO): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{A05D3A6A-D401-4402-983E-A54BA8BC2EE2} Other System
\ Browser Helper Objects\{1925C7E1-5540-4675-8198-8A2779D4072A} Other System Modifications This worm deletes the following files: %System%\i2.txt %System%\r2.txt %System%\e3.txt %System%\bs.txt %System%
the following browsers: 7Star 360Browser Amigo (Russian Browser) Brave Bromium CentBrowser Chedot Chrome/Chromium CocCoc (Vietnam Browser) Comodo Dragon Browser ElementsBrowser Epic Firefox GoBrowser
by adding the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{B05CB5FE-1E22-43C7-93E2-4CF04C87B3CC} Other System Modifications
\RunOnce {GUID} = "%User Temp%\gjbjojht.exe" Information Theft This Trojan gathers the following data: Computer name / username OS version Browser information Other Details Based on analysis of the codes, it
Computer Name / User name OS Version Browser Informations Other Details Based on analysis of the codes, it has the following capabilities: Install Browser plugins (it may do this monitor browser activites,
BHO to ensure its automatic execution every time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper
keys: HKEY_LOCAL_MACHINE\Software\MozillaPlugins\ @markany.com/npMAOnMultiWebSafer_SCOURT HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\Uninstall\ MarkAny WebSafer Plugin for Multi Browser
every time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\
CoreFTP CuteFTP Cyberduck DeluxeFTP Directory Opus Dreamweaver Easy FTP Epic ExpanDrive FAR Manager FastStone Browser FastTrackFTP FFFTP FileZilla Firefox FireFTP FlashFXP Fling Flock FreeFTP / DirectFTP
browsers: Comodo Dragon ChromePlus Google Chrome Nichome Rockmelt Spark Chromium Titan Browser Torch YandexBrowser Epic Privacy Browser Coc Coc Vivaldi Chromodo Superbird Coowon Mustang Browser 360Browser
commands: sc config browser → Configure Browser Settings sc config browser start=enabled → Enable Browser start-u sc stop vss → Stop Volume shadow copy service sc config vss start=disabled → Disable Volume
Username Computer Name OS Version CPU Architecture RAM IP Address Browsers 7Star Amigo BlackHawk Brave Browser CentBrowser Chedot Chrome ChromePlus Chromium Citrio Comodo Dragon Comodo IceDragon Coowon
Time Username Computer Name OS Version CPU Architecture IP Address Location Primary Screen Browsers: 7Star Amigo BlackHawk Brave Browser CentBrowser Chedot Chrome ChromePlus Chromium Citrio Comodo Dragon
malware. It may be unknowingly downloaded by a user while visiting malicious websites. Web Browser Home Page and Search Page Modification This Trojan modifies the user's Internet Explorer home page to the
to ensure its automatic execution every time Internet Explorer is used by adding the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper
Details This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Web Browser Home Page and Search Page Modification This
inserted script by PE_WAPOMI Browser redirection
Details This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Web Browser Home Page and Search Page Modification This