Home / malware

PDF

BrowserModifier:Win32/AlterbookSP

First posted on 15 February 2019.
Source: Microsoft

Aliases :

There are no other names known for BrowserModifier:Win32/AlterbookSP.

Explanation :

The latest version of this application is not detected by our objective criteria, and is not considered unwanted software.

Installation

This browser modifier is offered to the user when bundled with other programs.

Upon installation, you are prompted to install Search App by Ask:

When another program attempts to change the home page, default search, or new tabs setting, older versions of this browser modifier displays the following warning that there have been changes in the Internet Explorer settings and attempts to revert you back to the Ask home page:

File Changes 

This browser modifier also adds the following folders:

%ProgramFiles% AskPartnerNetwork %ProgramFiles% AskPartnerNetworkToolbar %ALLUSERSPROFILE% AskPartnerNetwork %ALLUSERSPROFILE% AskPartnerNetworkToolbar %ALLUSERSPROFILE% AskPartnerNetworkToolbarORJ-SPE %ALLUSERSPROFILE% AskPartnerNetworkToolbarORJ-SPECRX %ALLUSERSPROFILE% AskPartnerNetworkToolbarORJ-SPECRX108.3 %ALLUSERSPROFILE% AskPartnerNetworkToolbarORJ-SPEUpdater %ALLUSERSPROFILE% AskPartnerNetworkToolbarORJ-SPEUpdaterConfig %ALLUSERSPROFILE% AskPartnerNetworkToolbarORJ-SPEUpdaterResponse

It also adds the following files:

%ProgramFiles% AskPartnerNetworkToolbarapnmcp.exe %ProgramFiles% AskPartnerNetworkToolbarAPNSetup.exe %ProgramFiles% AskPartnerNetworkToolbarORJ-SPEPassport.dll %ProgramFiles% AskPartnerNetworkToolbarORJ-SPESource1031.mst %LOCALAPPDATA% AskPartnerNetworkToolbarUpdaterIDCIdcLdr.exe %LOCALAPPDATA% AskPartnerNetworkToolbarUpdaterIDCIdcSrv.dll %ALLUSERSPROFILE% AskPartnerNetworkToolbarORJ-SPECRX108.3Toolbar.crx %ALLUSERSPROFILE% AskPartnerNetworkToolbarORJ-SPEUpdaterConfigConfig.31.15.1.0-5.xml %ALLUSERSPROFILE% AskPartnerNetworkToolbarORJ-SPEUpdaterConfigConfig.31.18.0.0-5.xml %ALLUSERSPROFILE% AskPartnerNetworkToolbarORJ-SPEUpdaterResponseResponse.31.18.0.0-0.xml Related information A timeline of consent and control provides an overview of Microsoft's BrowserModifier detection criteria. Detection changes: search protection code provides an overview of Microsoft's detection criteria update for browser search protection functionality.

Analysis by Karthleen Mae Notario 

Last update 15 February 2019

 

TOP