1. Symantec/
  2. Security Response/
  3. Adware.InstallPedia

Adware.InstallPedia

Updated:
July 13, 2011 9:06:18 AM
Type:
Adware
Risk Impact:
Low
Systems Affected:
Windows
When the program is executed, it creates the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\InstallPedia

The program then checks if Mozilla Firefox is installed on the computer. If so, the prefs.js file is modified so that the home page and default search provider point to the following location:
http://www.easysear.ch/

It also attempts to modify the home page and default search provider for Internet Explorer by modifying the following registry entries:
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Start Page" = "http://www.easysear.ch/"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\"Default" = "http://www.easysear.ch/"


The program may also update itself without the user's consent.
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube