BasicScan

By Domesticus in Adware

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 24,350
First Seen: January 4, 2012
Last Seen: June 1, 2023
OS(es) Affected: Windows

BasicScan is a search engine that, when installed, takes over your Internet browser's default search settings and providers. Most recent Internet browsers allow you to carry out online searches directly from the address bar. They will usually carry out that search with one of the premier online search engines, such as Google or Bing. However, if the BasicScan add-on is installed on your computer system, all these kinds of online searches are carried out at BasicScan's website, BasicScan.com. This is unfortunate because BasicScan is not designed to return legitimate search results. Rather, BasicScan is designed to return irrelevant results that are actually sponsored links. This website is designed to deliver a stream of spam and advertisements in order to profit from advertisement impressions and pay-per-click schemes.

BasicScan Overstays Its Welcome on Your Computer

While BasicScan will often not show up as a virus or malware infection on an anti-malware scanner, this browser add-on uses various techniques that are closely linked to malware, rather than to legitimate search add-ons. Many computer users have reported problems removing BasicScan and undoing its harmful changes to their computers' settings. Most computer users that have installed BasicScan on their computer acquired it as a free bundle with various freeware applications – typically video or audio players and audio and video file converters. ESG security researchers strongly advise against downloading freeware applications that require you to install BasicScan on your Internet browser. There are usually better alternatives that do not force their users to install potentially harmful software on their system. BasicScan will usually be an unwanted presence on any computer in which BasicScan resides. This browser add-on interferes with normal online tasks and may be able to record your online activity and keep track of the sites you visit. The kinds of search results displayed for a BasicScan online search will usually include shady websites like dodgy online casinos and pharmacies or websites promoting fake security programs. Because of this, removal of BasicScan should be followed with a full, in-depth scan of your hard drives with a trusted anti-malware scanner.

Aliases

14 security vendors flagged this file as malicious.

Anti-Virus Software Detection
Panda Trj/OCJ.B
AVG Skodna.Onestep.CO
Fortinet Riskware/OneStep
Ikarus BHO.Win32.Zwangi
Microsoft BrowserModifier:Win32/Zwangi
McAfee-GW-Edition Heuristic.LooksLike.Win32.Suspicious.I
AntiVir ADWARE/Adware.Gen
Comodo UnclassifiedMalware
Avast Win32:Dropper-gen [Drp]
Symantec WS.Reputation.1
K7AntiVirus Riskware
McAfee Generic.dx!bg3f
CAT-QuickHeal BrowserModifier.Zwangi (Not a Virus)
DrWeb Trojan.Searcher.394

SpyHunter Detects & Remove BasicScan

File System Details

BasicScan may create the following file(s):
# File Name MD5 Detections
1. dnsessential.exe 8a215dbe0a4c690863bd6ef4f8eb851c 134
2. uninstall.exe 8f8228b9461b52f7f660e45dc45b8bd4 79
3. uninstall.exe 05b50b77ce905a8d64c57bf22966fe98 63
4. uninstall.exe dbb87bd3238820d14c5f4cb67a230512 59
5. uninstall.exe 89478b58967dcdb4e40ba50180a942eb 8
6. uninstall.exe b95e9f3b54df6e34e4ebfefc0924200e 8
7. uninstall.exe 7e11c649ad7bdd0689b148fb75c47813 8
8. uninstall.exe a31ceeffec45c0675000b59a53258277 6
9. uninstall.exe 0da41584f993325f03f2c13f8353c58c 4
10. dnsbasic.dll d557b44d05c98dbcefaa3a81d518d609 3
11. dnsessential.exe f026313323f5ec52f3a30073a726840c 3
12. dnsessential.exe b7f12d8dda8f93c43af5392123010942 3
13. dnsbasic.dll 4090de8853b82cc9a62170906d159445 2
14. dnsessential.exe deaf566c8798f49c0d433f670ab45391 2
15. dnsbasic.dll 87368607da3571327c2d90a376181a66 2
16. dnsbasic.exe b7e6a4f1b508c2c5ec0e1ad0f92c198b 2
17. uninstall.exe b4b0f9bb8b78e0afdc90bb719af438ff 2
18. dnsbasic.dll 13e55139e9b56daf178d8e83a6e68293 1
19. dnsessential.exe 422f37938e63c4119c7990a235344bb5 1
20. dnsbasic.dll 0c81eea317fc85d4dbcaf07608e9b5bd 1
21. dnsbasic.dll c49430d1a80686502585675b091edee3 1
22. dnsbasic.dll 851089f047b8049b7e8149daf7da7393 1
23. dnsbasic.dll a736b020d3c069139636a5e8480514f7 1
24. uninstall.exe 04892938b1d6d4580052acd55779853e 1
25. uninstall.exe 3cfe9a411e6be35ec1b0d57b8494b507 1
26. uninstall.exe 52982c767045a262fed65ac845f6bf89 1
27. %CommonAppData%\BasicScan\basicscan115.exe
28. %ProgramFiles%\BasicScan\uninstall.exe
29. %ProgramFiles%\BasicScan\basicscan.dll
30. %ProgramFiles%\BasicScan\BasicScan_deleted_\basicscan.dll
31. %ProgramFiles%\BasicScan\basicscan.exe
32. %ProgramFiles%\BasicScan\BasicScan_deleted_\basicscan.exe
33. %Windir%\Temp\BAS5.tmp\upgrade.exe
More files

Registry Details

BasicScan may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BasicScan Service\Security
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BASICSCAN_SERVICE\0000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BASICSCAN_SERVICE\0000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BasicScan Service\Enum
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{33524C00-63FB-43DB-A6BF-0A4E14B24649}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BasicScan
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BasicScan Service
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BASICSCAN_SERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BASICSCAN_SERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BasicScan Service
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes
HKEY_LOCAL_MACHINE\SOFTWARE\BasicScan
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BasicScan Service\Enum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BASICSCAN_SERVICE\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BASICSCAN_SERVICE\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BasicScan Service\Security
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33524C00-63FB-43DB-A6BF-0A4E14B24649}

Directories

BasicScan may create the following directory or directories:

%ALLUSERSPROFILE%\Application Data\BasicScan
%PROGRAMFILES%\DnsBasic
%PROGRAMFILES(x86)%\BasicScan
%PROGRAMFILES(x86)%\DnsBasic
%ProgramFiles%\BasicScan

Related Posts

Trending

Most Viewed

Loading...