Home Malware Programs Adware WhenUSearch

WhenUSearch

Posted: March 28, 2006

WhenUSearch is an adware application that creates a special desktop toolbar, monitors user Internet activity, collects details of performed web searches and serves marketing and advertising content. WhenUSearch can update itself via the Internet. The adware is bundled with ad-supported WhenU.com software. It can also be manually installed. WhenUSearch runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 search.dll
    2 search.exe
    3 whse.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOTWUSE.1HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunWhenUSearchHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunWhenUSearchWHSEHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallWhenUSearchHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallWhenUSearchBHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallWhenUSearchF
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}737830B7-F1F9-4bae-A8FC-1433C71BEDFFBA2325ED-F9EB-4830-8FCE-0BC35B16969B763BD795-24AE-44d7-82D8-F9A1EE799729715839CD-ABEC-45D8-A83C-1275F2D837CD45E5DADB-DFDF-4FC3-A46C-DD34B6CDDB38

Related Posts

Loading...