Webssearches.com

By Domesticus in Browser Hijackers

Translate To:

Threat Scorecard

Ranking:	4,365
Threat Level:	50 % (Medium)
Infected Computers:	42,810

First Seen:	March 20, 2014
Last Seen:	February 21, 2024
OS(es) Affected:	Windows

Webssearches.com Image

Webssearches.com is a low quality search engine that is part of a browser hijacking tactic. Low quality search engines similar to Webssearches.com may be paired with browser hijacking components to force computer users to visit them repeatedly. This is part of a marketing tactic because Webssearches.com's supposed 'search results' are little more than a list of advertisements and sponsored marketing links. Browser hijackers associated with Webssearches.com are regarded as PUPs, or Potentially Unwanted Programs. Although not as harmful as viruses, Trojans or rootkits, PUPs should be removed immediately because they may be associated with various problems on the affected computer.

Table of Contents

A Decreased Performance may be One of the Issues Caused by Webssearches.com

Listed below are common issues or symptoms that are frequently present in association with PUPs related to Webssearches.com:

PUPs related to Webssearches.com may redirect computer users to Webssearches.com and associated Web pages repeatedly. Webssearches.com redirects are used to increase this website's page ranking and promote its content.
Webssearches.com's search results are not reliable. Few, if any of the results displayed on Webssearches.com are related to the computer user's search. Instead, they are typically advertisements for questionable online services or products that could potentially endanger your computer or compromise your privacy.
Pop-up advertisements and suspicious messages are a common symptom of PUPs associated with Webssearches.com. These messages allow marketers to make money from various marketing schemes.
PUPs associated with Webssearches.com may cause various performance problems on affected computers. These PUPs may take up many of the affected computer's resources, causing it to slow down or freeze frequently. Content related to Webssearches.com may also affect the user's computer's Internet connectivity, making Web pages load much slower than normal.

SpyHunter Detects & Remove Webssearches.com

File System Details

Webssearches.com may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	UninstallManager.exe.vir	56377173dd7c1d5cb6ace6a102168286	4,066
Name: UninstallManager.exe.vir MD5: 56377173dd7c1d5cb6ace6a102168286 Size: 1.92 MB (1927680 bytes) Detections: 4,066 Path: %SYSTEMDRIVE%\AdwCleaner\Quarantine\C\Users\<username>\AppData\Roaming\webssearches\UninstallManager.exe.vir Group: Malware file Last Updated: February 21, 2024
2.	pcm_webssearches.exe	65411a1cfd2cec788cedfa711a50a52c	1
Name: pcm_webssearches.exe MD5: 65411a1cfd2cec788cedfa711a50a52c Size: 888.98 KB (888984 bytes) Detections: 1 Type: Executable File Group: Malware file Last Updated: January 8, 2020
3.	%AppData%\SupTab
Name: %AppData%\SupTab Group: Malware file
4.	%AppData%\SupTab\SupTab.dll
Name: %AppData%\SupTab\SupTab.dll Type: Dynamic link library Group: Malware file
5.	%AppData%\webssearches
Name: %AppData%\webssearches Group: Malware file
6.	%AppData%\webssearches\92.json
Name: %AppData%\webssearches\92.json Group: Malware file
7.	%AppData%\webssearches\UninstallManager.exe
Name: %AppData%\webssearches\UninstallManager.exe Type: Executable File Group: Malware file
8.	%AppData%\webssearches\uninstallDlg.xml
Name: %AppData%\webssearches\uninstallDlg.xml Group: Malware file
9.	%AppData%\webssearches\images
Name: %AppData%\webssearches\images Group: Malware file
10.	%AppData%\webssearches\images\bg1.png
Name: %AppData%\webssearches\images\bg1.png Group: Malware file
11.	%AppData%\webssearches\images\checked.png
Name: %AppData%\webssearches\images\checked.png Group: Malware file
12.	%AppData%\webssearches\images\button1.png
Name: %AppData%\webssearches\images\button1.png Group: Malware file
13.	%AppData%\webssearches\images\close.png
Name: %AppData%\webssearches\images\close.png Group: Malware file
14.	%AppData%\webssearches\images\min.png
Name: %AppData%\webssearches\images\min.png Group: Malware file
15.	%AppData%\webssearches\images\Thumbs.db
Name: %AppData%\webssearches\images\Thumbs.db Group: Malware file
16.	%AppData%\webssearches\images\unchecked.png
Name: %AppData%\webssearches\images\unchecked.png Group: Malware file
17.	%CommonAppData%\WPM
Name: %CommonAppData%\WPM Group: Malware file
18.	%CommonAppData%\WPM\wprotectmanager.exe
Name: %CommonAppData%\WPM\wprotectmanager.exe Type: Executable File Group: Malware file
19.	%CommonAppData%\WPM\update
Name: %CommonAppData%\WPM\update Group: Malware file
20.	%CommonAppData%\WPM\update\conf
Name: %CommonAppData%\WPM\update\conf Group: Malware file
21.	%CommonAppData%\IePluginService
Name: %CommonAppData%\IePluginService Group: Malware file
22.	%CommonAppData%\IePluginService\PluginService.exe
Name: %CommonAppData%\IePluginService\PluginService.exe Type: Executable File Group: Malware file
23.	%CommonAppData%\IePluginService\update
Name: %CommonAppData%\IePluginService\update Group: Malware file
24.	C:\Program Files\Mozilla Firefox\searchplugins\webssearches.xml
Name: C:\Program Files\Mozilla Firefox\searchplugins\webssearches.xml Group: Malware file
25.	C:\Program Files\SupTab
Name: C:\Program Files\SupTab Group: Malware file
26.	C:\Program Files\SupTab\SupTab.dll
Name: C:\Program Files\SupTab\SupTab.dll Type: Dynamic link library Group: Malware file
27.	C:\Program Files\SupTab\DpInterface64.dll
Name: C:\Program Files\SupTab\DpInterface64.dll Type: Dynamic link library Group: Malware file
28.	C:\Program Files\SupTab\DpInterface32.dll
Name: C:\Program Files\SupTab\DpInterface32.dll Type: Dynamic link library Group: Malware file
29.	C:\Program Files\SupTab\DpInterfacef32.dll
Name: C:\Program Files\SupTab\DpInterfacef32.dll Type: Dynamic link library Group: Malware file
30.	C:\Program Files\SupTab\ient.json
Name: C:\Program Files\SupTab\ient.json Group: Malware file
31.	C:\Program Files\SupTab\RSHP.exe
Name: C:\Program Files\SupTab\RSHP.exe Type: Executable File Group: Malware file
32.	C:\Program Files\SupTab\install.data
Name: C:\Program Files\SupTab\install.data Group: Malware file
33.	C:\Program Files\SupTab\SpAPPSv32.dll
Name: C:\Program Files\SupTab\SpAPPSv32.dll Type: Dynamic link library Group: Malware file
34.	C:\Program Files\SupTab\SpAPPSv64.dll
Name: C:\Program Files\SupTab\SpAPPSv64.dll Type: Dynamic link library Group: Malware file
35.	C:\Program Files\SupTab\SearchProtect32.dll
Name: C:\Program Files\SupTab\SearchProtect32.dll Type: Dynamic link library Group: Malware file
36.	C:\Program Files\SupTab\SearchProtect64.dll
Name: C:\Program Files\SupTab\SearchProtect64.dll Type: Dynamic link library Group: Malware file
37.	C:\Program Files\SupTab\uninstall.exe
Name: C:\Program Files\SupTab\uninstall.exe Type: Executable File Group: Malware file
38.	C:\Program Files\SupTab\web\_locales
Name: C:\Program Files\SupTab\web\_locales Group: Malware file
39.	C:\Program Files\SupTab\web\_locales\en-US
Name: C:\Program Files\SupTab\web\_locales\en-US Group: Malware file
40.	C:\Program Files\SupTab\web\_locales\en-US\messages.json
Name: C:\Program Files\SupTab\web\_locales\en-US\messages.json Group: Malware file
41.	C:\Program Files\SupTab\web\_locales\es-419
Name: C:\Program Files\SupTab\web\_locales\es-419 Group: Malware file
42.	C:\Program Files\SupTab\web\_locales\es-419\messages.json
Name: C:\Program Files\SupTab\web\_locales\es-419\messages.json Group: Malware file
43.	C:\Program Files\SupTab\web
Name: C:\Program Files\SupTab\web Group: Malware file
44.	C:\Program Files\SupTab\web\img
Name: C:\Program Files\SupTab\web\img Group: Malware file
45.	C:\Program Files\SupTab\web\img\weather
Name: C:\Program Files\SupTab\web\img\weather Group: Malware file
46.	C:\Program Files\SupTab\web\indexIE8.html
Name: C:\Program Files\SupTab\web\indexIE8.html Group: Malware file
47.	C:\Program Files\SupTab\web\indexIE.html
Name: C:\Program Files\SupTab\web\indexIE.html Group: Malware file
48.	C:\Program Files\SupTab\web\style.css
Name: C:\Program Files\SupTab\web\style.css Group: Malware file
49.	C:\Program Files\SupTab\web\ver.txt
Name: C:\Program Files\SupTab\web\ver.txt Group: Malware file
50.	C:\Program Files\SupTab\web\img\default_logo.png
Name: C:\Program Files\SupTab\web\img\default_logo.png Group: Malware file
51.	C:\Program Files\SupTab\web\img\icon128.png
Name: C:\Program Files\SupTab\web\img\icon128.png Group: Malware file
52.	C:\Program Files\SupTab\web\img\icon16.png
Name: C:\Program Files\SupTab\web\img\icon16.png Group: Malware file
53.	C:\Program Files\SupTab\web\js
Name: C:\Program Files\SupTab\web\js Group: Malware file
54.	C:\Program Files\SupTab\web\js\background.js
Name: C:\Program Files\SupTab\web\js\background.js Type: JavaScript file Group: Malware file
55.	C:\Program Files\SupTab\web\js\xagainit.js
Name: C:\Program Files\SupTab\web\js\xagainit.js Type: JavaScript file Group: Malware file
56.	C:\Program Files\SupTab\web\js\jquery.autocomplete.js
Name: C:\Program Files\SupTab\web\js\jquery.autocomplete.js Type: JavaScript file Group: Malware file
57.	C:\Program Files\SupTab\web\js\ga.js
Name: C:\Program Files\SupTab\web\js\ga.js Type: JavaScript file Group: Malware file
58.	C:\Program Files\SupTab\web\js\jquery-base.js
Name: C:\Program Files\SupTab\web\js\jquery-base.js Type: JavaScript file Group: Malware file
59.	C:\Program Files\SupTab\web\js\js.js
Name: C:\Program Files\SupTab\web\js\js.js Type: JavaScript file Group: Malware file

Registry Details

Webssearches.com may create the following registry entry or registry entries:

File name without path

http_istart.webssearches.com_0.localstorage

http_istart.webssearches.com_0.localstorage-journal

HKEY..\..\{Value}

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\BrowserEmulation "TLDUpdates" = "1"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing "NewTabPageShow" = "0"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Default_Page_URL" = "http://istart.webssearches.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Start Page" = "http://istart.webssearches.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command "(Default)" = ""C:\Documents and Settings\[USERNAME]\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" http://istart.webssearches.com/?type=sc...

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "C:\Program Files\Mozilla Firefox\firefox.exe http://istart.webssearches.com/?type=sc&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Opera\shell\open\command "(Default)" = ""C:\Program Files\Opera\Opera.exe" http://istart.webssearches.com/?type=sc&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\SEAMONKEY.EXE\shell\open\command "(Default)" = "C:\Program Files\SeaMonkey\seamonkey.exe http://istart.webssearches.com/?type=sc&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Start Page" = "http://istart.webssearches.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Default_Search_URL" = "http://istart.webssearches.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Search Page" = "http://istart.webssearches.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search "CustomizeSearch" = "http://istart.webssearches.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search "SearchAssistant" = "http://istart.webssearches.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs" = "C:\PROGRA~1\SupTab\SEARCH~1.DLL"

HKEY..\..\..\..{Subkeys}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstaller

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}

HKEY_LOCAL_MACHINE\SOFTWARE\supWPM

HKEY_LOCAL_MACHINE\SOFTWARE\supTab

HKEY_LOCAL_MACHINE\SOFTWARE\webssearchesSoftware

HKEY_LOCAL_MACHINE\SOFTWARE\Wpm

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IePluginService

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wpm

HKEY..\..\..\..{RegistryKeys}

Software\Microsoft\Internet Explorer\DOMStorage\istart.webssearches.com

Software\Microsoft\Internet Explorer\DOMStorage\search.webssearches.com

Software\Microsoft\Internet Explorer\DOMStorage\webssearches.com

Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\webssearches.com

SOFTWARE\Microsoft\Tracing\webssearches_RASAPI32

SOFTWARE\Microsoft\Tracing\webssearches_RASMANCS

SOFTWARE\webssearchesSoftware

SOFTWARE\Wow6432Node\webssearchesSoftware

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WPM

webssearches uninstall

webssearches uninstaller

Directories

Webssearches.com may create the following directory or directories:

%appdata%\webssearches

URLs

Webssearches.com may call the following URLs:

http://istart.webssearches.com/web?

http://webssearches.com/

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Webssearches.com

Threat Scorecard

EnigmaSoft Threat Scorecard

A Decreased Performance may be One of the Issues Caused by Webssearches.com

SpyHunter Detects & Remove Webssearches.com

File System Details

Registry Details

Directories

URLs

Submit Comment

Trending

Ldhy Ransomware

Ssj4.io

Jastugoa.top

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?