AsktheCrew.net

AsktheCrew.net Description

ScreenshotAskTheCrew.net is a fraudulent website and fictitious online search system which is associated with some malware threats and browser hijacking infections such as Google Redirect Virus, Google Redirect Hijacker, Google Results Hijacker, etc. that will restrict you from normal web browsing. These malware infections can corrupt your web browser and change its settings. They can change your default search engine and homepage. Also, if you try to find something online by using AskTheCrew.net, your search results will be rerouted to some malicious websites full of fake advertisements. Browser hijackers linked to AskTheCrew.net can also download and install additional malware threats and slow down your PC. To block irritating diversions to AskTheCrew.net, you should delete all browser hijacking infections and change your browser settings. Avoid visiting AskTheCrew.net.

Technical Information

File System Details

AsktheCrew.net creates the following file(s):
Expand All | Collapse All
# File Name Detection Count
1 %System%\UAC[RANDOM CHARACTERS].dll N/A
2 %System%\uacinit.dll %System%\drivers\UAC[RANDOM CHARACTERS].sys N/A
3 %System%\UAC[RANDOM CHARACTERS].dat N/A
4 C:\Windows\System32\Drivers\etc\ Hosts\malicious host of AsktheCrew.net N/A
5 %Temp%\tmp[RANDOM NUMBERS].tmp N/A

Registry Details

AsktheCrew.net creates the following registry entry or registry entries:
Registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
HKEY_CLASSES_ROOT\PROTOCOLS\Handler\tbr
HKEY_CLASSES_ROOT\ctbcommon.Buttons HKEY_CLASSES_ROOT\ctbr.R404Pro
HKEY_CLASSES_ROOT\Interface\{41349826-5C7F-4BF0-8279-5DAF1DE6E9AE}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
HKEY_CLASSES_ROOT\TypeLib\{E79BB61D-7F1A-41DF-8AD0-402795E3B566}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_CLASSES_ROOT\Interface\{01C78433-6FDF-4E5A-A82D-B535C32E03DF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\""={4B3803EA-5230-4DC3-A7FC-33638F3D3542} HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks={CFBFAE00-17A6-11D0-99CB-00C04FD64497}
HKEY_CLASSES_ROOT\TypeLib\{506F578A-91E1-46CE-830F-E2F4268E9966}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
HKEY_CLASSES_ROOT\CLSID\{B1CF6225-211E-4B4C-B466-5F224E348FF3}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar={4B3803EA-5230-4DC3-A7FC-33638F3D3542}
By JubileeX in Browser Hijackers