iSearch.DesktopSearch

iSearch.DesktopSearch Description

iSearch.DesktopSearch is a browser plug-in that puts a search box, without the permission or consent of the user, onto the user's desktop: usually on the bottom right hand corner. iSearch.DesktopSearch comes bundled with other malware and generates commercial pop-up advertisements. iSearch.DesktopSearch takes advantage of security weaknesses from CoolWebSearch related sites.

Technical Information

File System Details

iSearch.DesktopSearch creates the following file(s):
# File Name Detection Count
1 edmond.exe N/A
2 msdbhk.dll N/A
3 desktop.exe N/A
4 mfiltis.dll N/A
5 delprot.sys N/A
6 idinst.exe N/A
7 ffisearch.exe N/A
8 sysupd.dll N/A
9 evidenceeraser.lnk N/A
10 virushuntersecurity.lnk N/A
11 delprot.ini N/A
12 bigdickschoolfor2.95.url N/A
13 spywareavenger.lnk N/A
14 yourplatinumvisa.lnk N/A
15 isearch.xpi N/A
16 analexploits.url N/A
17 popupblockerstopspopups.lnk N/A
18 virushunter.url N/A
19 delprot.log N/A

Registry Details

iSearch.DesktopSearch creates the following registry entry or registry entries:
Registry key
HKEY_CLASSES_ROOT\mfiltis
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ffis
950238fb-c706-4791-8674-4d429f85897e
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\desktopsearch
5b4ab8e2-6dc5-477a-b637-bf3c1a2e5993
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browserhelper
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\delprot