1. /
  2. Security Response/
  3. Adware.InstallPedia

Adware.InstallPedia

Updated:
July 13, 2011 9:06:18 AM
Type:
Adware
Risk Impact:
Low
Systems Affected:
Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP
When the program is executed, it creates the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\InstallPedia

The program then checks if Mozilla Firefox is installed on the computer. If so, the prefs.js file is modified so that the home page and default search provider point to the following location:
http://www.easysear.ch/

It also attempts to modify the home page and default search provider for Internet Explorer by modifying the following registry entries:
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Start Page" = "http://www.easysear.ch/"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\"Default" = "http://www.easysear.ch/"


The program may also update itself without the user's consent.
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver