Home / malware

PDF

Adware.Azsearch

First posted on 21 November 2011.
Source: BitDefender

Aliases :

Adware.Azsearch is also known as AZESearch.

Explanation :

Azseach is a browser hijacker that changes your homepage and filters your searches on the most known web search engines to provide corrupted results. It installs a toolbar (Azesearch) in Internet Explorer and adds several links to Favorites.

The CLSIDs used by the toolbar are {a19ef336-01d4-48e6-926a-fe7e1c747aed}, {ba048011-957f-4ba0-a804-62c28d96f878}, {da7ff3f8-08be-4cac-bc00-94d91c6ae7f4}.

Registration as a BHO is under HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{da7ff3f8-08be-4cac-bc00-94d91c6ae7f4}.

On install, its files are copied to the %SYSTEM% folder, and an executable is added to HKLMSoftwareMicrosoftWindowsCurrentVersionRun. File names vary, depending on the version being installed, but most start with AZE. One exception is iasada.dll, which is also a BHO that monitors your Internet Explorer. Its CLSID is {f65b197f-8260-4d52-909a-f70118e646eb}.

Last update 21 November 2011

 

TOP