Search
Keyword: browser hijacker
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{32E665F3-D68B-4069-92D6-D1A2EA87752B}
execution every time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\
Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{285AB8C6-FB22-4D17-8834-064E2BA0A6F0} Other System
hijacks the browser session if it finds any of the strings below on the browser address bar: &xref= .ask.com .facebook. .facebook. .google. /aol/search? /dnserror /gen_204? /search/results.php? /search;
Routine This adware does not have any backdoor routine. Web Browser Home Page and Search Page Modification This adware modifies the Internet Explorer Zone Settings. Information Theft This adware gathers the
software MagnoPlayer. It offers user if it would like to install the following additional applications: SpeedUpMyPc MyPcBackup Media Player Enhance Vuupc Omiga-plus Browser app Movie Wizard Games Desktop
malicious sites. It may be manually installed by a user. It acts as a Browser Helper Object (BHO) that monitors a user's Internet-browsing habits. It does not have any propagation routine. It does not have
follow the instructions bellow:  1. Download and install Tor Browser  2. After a successful installation, run Tor Browser and wait for its initialization.  3. Type in the address bar:
RockMelt K-Meleon Epic Browser FastStone Browser Stolen Information This spyware sends the gathered information via HTTP POST to the following URL: http://{BLOCKED}etz.com/wtstats.php http://www.{BLOCKED
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{34B4DFE0-E110-4936-BE49-C4F3684FB458}
?tcrcrcerererwbvbbrtdf It checks for the following processes: VBoxService VBoxTray Proxifier prl_cc prl_tools vmusrvc vmsrvc vmtoolsd It checks for specific list of domains in browser cookies and browser history. When
execute arbitrary files Upload files Update itself Modify system settings Terminate processes Downloads and loads additional plugin disk propagation Web Browser Home Page and Search Page Modification This
\Uninstall\ MyTransitGuideTooltab Uninstall Internet Explorer URLInfoAbout = http://support.{BLOCKED}ark.com/ Web Browser Home Page and Search Page Modification This Potentially Unwanted Application modifies
Account Control information Victim's IP Location System information: Host Name System Manufacturer System Model Processors Total physical memory Country Code Telegram Session Browser Data(e.g. Login
\Microsoft\ Windows\CurrentVersion\policies\ system EnableLUA = "0" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects NoExplorer = "1" Dropping Routine This Trojan
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\explorer\ Browser Helper Objects\{9A568672-D437-469E-86C2-F6E4A1156071}
\ Services\FireFox Description = "FireFox Browser Driver" Dropping Routine This Trojan drops the following files: %Windows%\scrwer.exe %System%\fkaar6001k.exe (Note: %Windows% is the Windows folder, which is
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{242F800B-2172-4659-A381-476B66E3DE2A}
\Software\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{C41A1C0E-EA6C-11D4-B1B8-444553540000} This report is generated via an automated analysis system. TrojanSpy:Win32/Bancos.MB
time Internet Explorer is used by adding the following registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\Explorer\ Browser Helper Objects\{C74CDF30-68C2-49B4-9918-EBD66B8D9FBF}