iSearch.DesktopSearch Description
iSearch.DesktopSearch is a browser plug-in that puts a search box, without the permission or consent of the user, onto the user's desktop: usually on the bottom right hand corner. iSearch.DesktopSearch comes bundled with other malware and generates commercial pop-up advertisements. iSearch.DesktopSearch takes advantage of security weaknesses from CoolWebSearch related sites.
Technical Information
File System Details
iSearch.DesktopSearch creates the following file(s):
# | File Name | Detection Count |
---|---|---|
1 | edmond.exe | N/A |
2 | msdbhk.dll | N/A |
3 | desktop.exe | N/A |
4 | mfiltis.dll | N/A |
5 | delprot.sys | N/A |
6 | idinst.exe | N/A |
7 | ffisearch.exe | N/A |
8 | sysupd.dll | N/A |
9 | evidenceeraser.lnk | N/A |
10 | virushuntersecurity.lnk | N/A |
11 | delprot.ini | N/A |
12 | bigdickschoolfor2.95.url | N/A |
13 | spywareavenger.lnk | N/A |
14 | yourplatinumvisa.lnk | N/A |
15 | isearch.xpi | N/A |
16 | analexploits.url | N/A |
17 | popupblockerstopspopups.lnk | N/A |
18 | virushunter.url | N/A |
19 | delprot.log | N/A |
Registry Details
iSearch.DesktopSearch creates the following registry entry or registry entries:
Registry key
HKEY_CLASSES_ROOT\mfiltis
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ffis
950238fb-c706-4791-8674-4d429f85897e
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\desktopsearch
5b4ab8e2-6dc5-477a-b637-bf3c1a2e5993
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browserhelper
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\delprot