Threat Database Adware SearchFoot

SearchFoot

By GoldSparrow in Adware

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 1,841
First Seen: April 17, 2014
Last Seen: June 24, 2024
OS(es) Affected: Windows

SearchFoot is a potentially unwanted program (PUP) that may have been made available for Internet Explorer, Google Chrome and Mozilla Firefox Web browsers. SearchFoot may propagate and be installed as an additional program on the PC through packaged free software that computer download and install from untrustworthy download websites. Once on the PC, SearchFoot may create and display a variety of types of disturbing ads, such as interstitial and full page advertisements, search-related advertisements, in-text advertisements and links, banner and video advertisements. SearchFoot may control the PC user's Web browsing routine by recording software and hardware data involving IP address, OS, browser type, unique identifier number, entered search terms, websites visited, and other similar data.

SpyHunter Detects & Remove SearchFoot

File System Details

SearchFoot may create the following file(s):
# File Name MD5 Detections
1. SearchFoot.PurBrowse64.exe fbc6b6639e38650e80cb1e46858e2bdc 20
2. SearchFoot.PurBrowse.exe 987e43eb1118fd699b439cd576595cd5 18
3. updater.exe 82d5c9176f2b0316652726df79ddeae0 12
4. SearchFoot.BrowserAdapter.exe 7541f57eb48b534b7ad067a05c95f326 3
More files

Registry Details

SearchFoot may create the following registry entry or registry entries:
CLSID
{0A2FAE03-A8A5-4E5F-B732-329EF221D26A}
{1AB8383F-6383-4873-A031-7B06687CC83D}
{e8a37c8e-4949-4e1b-ad24-2d1c141be207}
Software\Microsoft\Internet Explorer\Approved Extensions\{E8A37C8E-4949-4E1B-AD24-2D1C141BE207}
SOFTWARE\Microsoft\Tracing\SearchFoot_RASAPI32
SOFTWARE\Microsoft\Tracing\SearchFoot_RASMANCS
SOFTWARE\Microsoft\Tracing\updateSearchFoot_RASAPI32
SOFTWARE\Microsoft\Tracing\updateSearchFoot_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchFoot_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchFoot_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\updateSearchFoot_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\updateSearchFoot_RASMANCS
SYSTEM\ControlSet001\services\eventlog\Application\Update SearchFoot
SYSTEM\ControlSet001\services\Update SearchFoot
SYSTEM\ControlSet002\services\eventlog\Application\Update SearchFoot
SYSTEM\ControlSet002\services\Update SearchFoot
SYSTEM\CurrentControlSet\services\eventlog\Application\Update SearchFoot
SYSTEM\CurrentControlSet\services\Update SearchFoot

Directories

SearchFoot may create the following directory or directories:

%PROGRAMFILES%\SearchFoot
%PROGRAMFILES(x86)%\SearchFoot

URLs

SearchFoot may call the following URLs:

searchfoot.net

Trending

Most Viewed

Loading...