Search
Keyword: browser hijacker
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\explorer\ Browser Helper Objects\{682D5ECF-BF6F-40B6-AF2F-5AF2BBF61180}
following files: %System Root%\bck.bck %System Root%\vista.com It adds the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Internet Explorer\Main Enable Browser Extensions = "No" This
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\explorer\ Browser Helper Objects\{C75BCB9D-384C-476D-BD2A-CDD4708028ED}
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\explorer\ Browser Helper Objects\{ACAE16C9-2154-4045-BD87-ED7CB4F3B7D6}
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{E45B12A3-3687-4CEB-B0F5-F2CF3B901C6C}
a Browser Helper Object (BHO): HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ BHO.clsUrlSearch Other Details This spyware requires its main component to successfully perform its intended routine.
\FeatureControl\ FEATURE_BROWSER_EMULATION explorer.exe = "0" Web Browser Home Page and Search Page Modification This Trojan modifies the Internet Explorer Zone Settings. Other Details This Trojan connects to the
as a component bundled with malware/grayware packages. Web Browser Home Page and Search Page Modification This Trojan modifies the Internet Explorer Zone Settings. Download Routine This Trojan accesses
malware/grayware or malicious users. NOTES: This is the Trend Micro detection for PDF files that contains a malicious link. Once the link on the document file is opened, a browser will be opened and redirected to
drops the following copy(ies) of itself in all removable drives: {Drive Letter}:\{Random File Name}.JPG{spaces}.jse Web Browser Home Page and Search Page Modification This Worm modifies the user's
functions. This browser plug-ins checks for the value of the following: SCode URL Epoch S/Kryptik.ATB trojan (ESET-NOD32), JS:Trojan.Script.CMT (BitDefender) Downloaded from the Internet, Dropped by other
Modifications This spyware adds the following registry entries: HKEY_CURRENT_USER\Software\WinRAR HWID = "{Hex values}" Web Browser Home Page and Search Page Modification This spyware modifies the Internet
Adobe Flash Player Remote Code Execution Vulnerability (CVE-2015-3113) NOTES: Once a compromised website is visited, the user's browser with a vulnerable version of Adobe Flash loads a specially-crafted
is C:\ on all Windows operating system versions.) Web Browser Home Page and Search Page Modification This Trojan modifies the Internet Explorer Zone Settings. Other Details This Trojan deletes itself
before the FTP command, which causes the commands to be inserted into an authenticated FTP connection established earlier in the same browser session, as demonstrated using a DELE command, a variant or
" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{Hex Values} NoExplorer = "1" Adware.DealPly (Symantec); HEUR:AdWare.Win32.DealPly.gen (Kaspersky); Adware.DealPly (fs)
"config.json" under a folder 3CXDesktopApp. It retrieves the last 500 URLs and title columns listed on the browser history of the following browsers: Chrome Edge Brave Firefox It passes the retrieved data in
redirect their browser to a malicious link: However, as of this writing, the said sites are inaccessible. It does not exploit any vulnerability. Downloaded from the Internet, Dropped by other malware
\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{0ED403E8-470A-4a8a-85A4-D7688CFE39A3} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\
Hash = "{Random Hex Values}" HKEY_CURRENT_USER\Software\WinRAR HWID = "{Random Hex Values}" Web Browser Home Page and Search Page Modification This spyware modifies the Internet Explorer Zone Settings.