Terra.im

By GoldSparrow in Browser Hijackers

Threat Scorecard

Ranking: 630
Threat Level: 50 % (Medium)
Infected Computers: 9,208
First Seen: January 27, 2015
Last Seen: September 21, 2023
OS(es) Affected: Windows

An adware infection uses the Terra.im domain for search operations and display of marketing materials. The adware related to the Terra.im web page may change your browser settings to use Terra.im as your home page and search provider. The Terra.im adware could be promoted as a helpful Browser Helper Object, an add-on or a browser extension in freeware packages. However, the adware connected to Terra.im may obstruct your online activities by displaying ads, banners, and pop-ups. Adware apps are created to promote products, services, and online shops and might not deliver you safe advertisements. The changes caused by the Terra.im adware and the ads may not be desirable, and you might want to use a reliable anti-spyware tool to clean your system.

SpyHunter Detects & Remove Terra.im

File System Details

Terra.im may create the following file(s):
# File Name MD5 Detections
1. 13758B0.tmp 3209ceda21832a7081445605c0b55ce4 246
2. VSUpdater.exe dd7b559a18f57329703352b79112e0ae 118
3. VSUpdater.exe 6d8468f707405bd8096f681af1c6a046 96
4. VSUpdater.exe be423f71a7c928e72c1cabdc38a9e110 85
5. VSUpdater.exe 9df074c7c25981d7af695d046b5153b6 35
6. setmyhomepage.exe 7db4bdd470d3e4264564996e3c9e6383 31
7. setmyhomepage.exe 738118572afc79855c05a3d512a1cc3a 16
8. setmyhomepage.exe 097cd98a53e1b0fe91dde213d117d496 16
9. 76850B7.tmp f0a8369443805745f81d27287513cc64 8
10. VSUpdater.exe 228f1b54c118437e7dc8351cfa198d0c 7
11. setmyhomepage.exe df816a4d17d7459ce968ca9b8daf864c 5
12. setmyhomepage.exe e439e9384b78ca4f28ef2b2e0ff42114 3
13. setmyhomepage.exe 215949cfdfe646240cc2ae877ff96417 1
14. VSUpdater.exe f24b480656046a11c027564d10fa9932 1
15. VSUpdater.exe cab18157b5f22aea4e269ae5a2a6ed21 1
16. VSUpdater.exe f35a82de2deae4150672ee8ecf77de7b 1
17. VSUpdater.exe adbaf461273e82a454bbcb10d3ecc816 1
18. VSUpdater.exe 031b2e99ecc6c686c8e2503ca1b77c84 1
19. VSUpdater.exe d99b73180e92d4cc0eb1e182c0731a29 1
20. VSUpdater.exe d71aab81ebb36fcc54ba276f53359362 1
21. VSUpdater.exe 35945375e1efd3953b5ad1d22b15207d 1
22. VSUpdater.exe 918955d26554699f6863b5d79ef9d773 1
23. VSUpdater.exe 823150bf3abe9cb0284847bc7b6169f1 1
24. setmyhomepage.exe e66538f3b6013aa9fe359f1c79dac2e4 1
25. VSUpdater.exe 1404ecbc4e3db81c81887c9ba216e973 1
26. VSUpdater.exe a7e2f50066a8cc9620c495bd56bc015d 1
27. VSUpdater.exe eedd2807dca1d2f3ab905c6c13a6acaa 1
More files

Registry Details

Terra.im may create the following registry entry or registry entries:
File name without path
build_x22.Terra.im.EX.exe
http_terra.im_0.localstorage
http_terra.im_0.localstorage-journal
Software\Microsoft\Internet Explorer\DOMStorage\terra.im
Software\Microsoft\Internet Explorer\SearchScopes\{4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE}
Software\Microsoft\Internet Explorer\SearchScopes\{4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE}
Software\SetMyHomepage
SOFTWARE\Visual Protect Service
SOFTWARE\Wow6432Node\Visual Protect Service

Directories

Terra.im may create the following directory or directories:

%APPDATA%\Visual Protect Service
%PROGRAMFILES%\VideoDownloader
%PROGRAMFILES%\Visual Protect Service
%PROGRAMFILES(x86)%\VideoDownloader
%PROGRAMFILES(x86)%\Visual Protect Service
%appdata%\SetMyHomePage

URLs

Terra.im may call the following URLs:

glclck.ru
glurl.ru
gogone.ru
http://terra.im/
https://glclck.ru/search?cref=
public-box.ru
yadist.ru
yanstat.ru

Trending

Most Viewed

Loading...