|
SurferBar Browser Hijacker Information
| Name: |
SurferBar |
| Category: |
Browser Hijacker |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
SurfBar is a porn related toolbar and home page hijacker for Internet Explorer.
SurfBar is installed by taking advantage a recent Internet Explorer exploit which allows the SurfBar executable to be installed when a user visits a particular website or receives and email spam. For details on this security exploit, please visit the Microsoft site at: http://www.microsoft.com/technet/security/bulletin/MS03-032.mspx
SurfBar installs a toolbar in Internet Explorer that links to a dozen porn sites.
SurfBar also installs many folders on the local machine, into which various URL shortcuts are dropped. A large proportion of these shortcuts are porn-related.
|
| Signatures:
|
process: drg.exe: MD5 Hash: ed4c2211ddb97342466...
process: wins32.exe: MD5 Hash: e383afb32f8d9662887...
process: winsrv32.exe: MD5 Hash: b141139488541dc3561...
process: winsrv32.exe: MD5 Hash: ...
process: drg.exe: MD5 Hash: .. |
| Type: |
Browser Hijacker - Adware is generally software that displays advertisements. Some advertisers may covertly install adware on your system and generate a stream of unsolicited advertisements that can clutter your desktop and affect your productivity. The advertisements may also contain pornographic or other material that you might find inappropriate. The extra processing required to track you or to display advertisements can tax your computer and hurt your system performance. |
Top Browser Hijacker Visited Pages:
SuperSpider - Alias: Network Security Guard, Melcosoft - 323 visits
Spyass.com - 65 visits
Tubby - Alias: MakeMeSearch, CoolWebSearch.Tubby, Spyware.Arau, Trojan.Win32.StartPage.ih, Trojan.StartPage-FJ - 54 visits
CoolWebSearch - Alias: CWS, Cool Web Serach, CoolWwwSearch - 50 visits
CrackSpider - Alias: Troj/Favadd-D - 50 visits
SecurityToolbar.DesktopScam - 45 visits
Paytime - 40 visits
Trojan.StartPage - Alias: SearchCentral - 37 visits
Search3 Hijacker - 30 visits
SBSoft - 30 visits
Random Browser Hijacker Pages:
Xupiter - Alias: XupiterToolbar
Hijacker.Explorer32 - Alias: W32/Kwbot.worm, SdBot.05.v, Troj/StartPa-MN
Wazam - Alias: SBar, SearchBlaster
GIGA Search - Alias: Search Bar
Winshow - Alias: CWS.Winshow
Secret Crush
CSRSS Hijack
NavExcel Search Toolbar - Alias: NavExcel browser helper
STRAd32.BHO - Alias: Confusearch, StickyPopsBHO
Superlogy
|
