1. Symantec/
  2. Security Response/
  3. Adware.InstallPedia


July 13, 2011 9:06:18 AM
Risk Impact:
Systems Affected:
Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP
When the program is executed, it creates the following registry subkey:

The program then checks if Mozilla Firefox is installed on the computer. If so, the prefs.js file is modified so that the home page and default search provider point to the following location:

It also attempts to modify the home page and default search provider for Internet Explorer by modifying the following registry entries:
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Start Page" = "http://www.easysear.ch/"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\"Default" = "http://www.easysear.ch/"

The program may also update itself without the user's consent.
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube