Updated: February 13, 2007 11:37:26 AM
Type: Adware
Risk Impact: High
File Names: Iesearch.exe
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
When Adware.LookNSearch is executed, it performs the following actions:
- Drops the following .dll files in %System% and %ProgramFiles%\Internet Explorer:
- guardian.dll
- hookDLL.,dll
- netClient.dll
- r_process.dll
Notes:
- %System% is a variable. The adware locates the System folder and copies itself to that location. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
- %ProgramFiles% is a variable that refers to the path to the program files folder. By default, this is C:\Program Files.
- It adds the entry
"Iesearch.exe"="%ProgramFiles%\Internet Explorer\Iesearch.exe"
to the registry key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
so that it runs when you start Windows.
- May make outgoing HTTP connections to download software or advertisements.
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
