Terra.im

By GoldSparrow in Browser Hijackers

Threat Scorecard

Popularity Rank: 1,507
Threat Level: 50 % (Medium)
Infected Computers: 12,618
First Seen: January 27, 2015
Last Seen: October 24, 2025
OS(es) Affected: Windows

An adware infection uses the Terra.im domain for search operations and display of marketing materials. The adware related to the Terra.im web page may change your browser settings to use Terra.im as your home page and search provider. The Terra.im adware could be promoted as a helpful Browser Helper Object, an add-on or a browser extension in freeware packages. However, the adware connected to Terra.im may obstruct your online activities by displaying ads, banners, and pop-ups. Adware apps are created to promote products, services, and online shops and might not deliver you safe advertisements. The changes caused by the Terra.im adware and the ads may not be desirable, and you might want to use a reliable anti-spyware tool to clean your system.

SpyHunter Detects & Remove Terra.im

File System Details

Terra.im may create the following file(s):
# File Name MD5 Detections
1. 13758B0.tmp 3209ceda21832a7081445605c0b55ce4 249
2. 76850B7.tmp f0a8369443805745f81d27287513cc64 8
3. setmyhomepage.exe e66538f3b6013aa9fe359f1c79dac2e4 1
4. VSUpdater.exe eedd2807dca1d2f3ab905c6c13a6acaa 1
More files

Registry Details

Terra.im may create the following registry entry or registry entries:
File name without path
build_x22.Terra.im.EX.exe
http_terra.im_0.localstorage
http_terra.im_0.localstorage-journal
Software\Microsoft\Internet Explorer\DOMStorage\terra.im
Software\Microsoft\Internet Explorer\SearchScopes\{4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE}
Software\Microsoft\Internet Explorer\SearchScopes\{4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE}
Software\SetMyHomepage
SOFTWARE\Visual Protect Service
SOFTWARE\Wow6432Node\Visual Protect Service

Directories

Terra.im may create the following directory or directories:

%APPDATA%\Visual Protect Service
%PROGRAMFILES%\VideoDownloader
%PROGRAMFILES%\Visual Protect Service
%PROGRAMFILES(x86)%\VideoDownloader
%PROGRAMFILES(x86)%\Visual Protect Service
%appdata%\SetMyHomePage

URLs

Terra.im may call the following URLs:

glclck.ru
glurl.ru
gogone.ru
http://terra.im/
public-box.ru
yadist.ru
yanstat.ru

Trending

Most Viewed

Loading...