Threat Database Browser Hijackers Isearch.whitesmoke.com

Isearch.whitesmoke.com

By LoneStar in Browser Hijackers

Isearch.whitesmoke.com Image

Isearch.whitesmoke.com is one of many bogus websites and search engines that, at first sight, may occur like a legitimate and reliable website, but, in truth, it is supported by harmful browser hijackers, rootkits and other malware infections that may involve ZeroAccess rootkit, Google Results Hijacker and Google Redirect Hijacker. These browser hijackers and rootkits can cause annoying search redirecting activity on the affected web browser. If these browser hijackers and rootkits exist on your computer system, you will get forcibly rerouted to Isearch.whitesmoke.com and other similar domains full of fake ads. Such websites were made by scammers to seduce Internet users visiting them and clicking on the ads in order to increase website traffic and earn money. Browser hijackers and rootkits connected to Isearch.whitesmoke.com will restrict your normal Internet surfing. When you try to look for a term on Google, MSN, Yahoo, Bing or other well-known search engines, at first, you will get the search result links related to your query, but if you click on them, suddenly, they will be changed to spam search results totally unrelated to your query. To block diversions to Isearch.whitesmoke.com, you need to remove all browser hijackers and rootkits related to this deceptive website and reconfigure your browser settings.

File System Details

Isearch.whitesmoke.com may create the following file(s):
# File Name Detections
1. %AppData%[trojan name]toolbarcouponsmerchants2.xml
2. %AppData%[trojan name]toolbarcouponsmerchants.xml
3. %AppData%[trojan name]toolbarstats.dat
4. %AppData%[trojan name]toolbarstat.log
5. %Temp%[trojan name]toolbar-manifest.xml
6. %AppData%[trojan name]toolbarcouponscategories.xml
7. %AppData%[trojan name]toolbarlog.txt
8. %AppData%[trojan name]toolbarpreferences.dat
9. %AppData%[trojan name]toolbarversion.xml
10. %AppData%[trojan name]toolbardtx.ini
11. %AppData%[trojan name]toolbarguid.dat
12. %AppData%[trojan name]toolbaruninstallIE.dat
13. %AppData%[trojan name]toolbaruninstallStatIE.dat

Registry Details

Isearch.whitesmoke.com may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}VersionIndependentProgID "[trojan name]IEHelper.UrlHelper"
HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuardCurVer
HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuard.1
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{99079a25-328f-4bd4-be04-00955acaa0a7} "[trojan name] Toolbar"
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115} "UrlHelper Class"
HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuard
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{99079a25-328f-4bd4-be04-00955acaa0a7} "[trojan name] Toolbar"
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{99079a25-328f-4bd4-be04-00955acaa0a7}InprocServer32 "C:PROGRA~1WINDOW~4ToolBar[trojan name]dtx.dll"
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}ProgID "[trojan name]IEHelper.UrlHelper.1"
HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuardCLSID
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar "[trojan name] Toolbar"

Trending

Most Viewed

Loading...