|
PowerSearch Browser Hijacker Information
| Name: |
PowerSearch |
| Category: |
Browser Hijacker |
| Alias: |
- Alias: SyncWait |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
PowerSearch is a Internet Explorer search toolbar. When searching in the toolbar you will be directed to www.sirsearch.com. It also comes bundled with Keenvalue, a nasty spyware.
PowerSearch is bundled with "One Nutty Santa Screensaver". It is also bundled with KeenValue. PowerSearch is installed by a drive-by-download.
Using KeenValue, eUniverse anonymously collects the following information:
Web sites/pages viewed, The amount of time spent at some Web sites, Response to the Advertisements displayed, Standard web log information including IP address and system settings, What software is on your personal computer, Your first and last name, country, and five digit ZIP code, Your usage characteristics and preferences.
The policy indicates that eUniverse has the right to install other software in the future on the users’ computer — and uninstalling PowerSearch won’t remove this additional software from their system.
|
| Signatures:
|
process: tipb.exe: MD5 Hash: 5a7f54d3a75c03076a6...
process: tipb.exe: MD5 Hash: ...
process: setup_powersearch_demo.exe: MD5 Hash: 80df64853881c850a76...
process: powersearch_toolbar.exe: MD5 Hash: 5ad78c740c02f4acd00.. |
| Type: |
Browser Hijacker - Spyware's primary purpose is to collect demographic and usage information from your computer, usually for advertising purposes. Spyware usually that 'sneaks' onto a system or performs other activities hidden to the user. Spyware programs are usually bundled as a hidden component and downloaded from the Internet. These modules are almost always installed on the system secretively and try to run secretively as well. |
Top Browser Hijacker Visited Pages:
SuperSpider - Alias: Network Security Guard, Melcosoft - 328 visits
Spyass.com - 68 visits
Tubby - Alias: MakeMeSearch, CoolWebSearch.Tubby, Spyware.Arau, Trojan.Win32.StartPage.ih, Trojan.StartPage-FJ - 55 visits
CrackSpider - Alias: Troj/Favadd-D - 51 visits
CoolWebSearch - Alias: CWS, Cool Web Serach, CoolWwwSearch - 50 visits
SecurityToolbar.DesktopScam - 46 visits
Paytime - 41 visits
Trojan.StartPage - Alias: SearchCentral - 37 visits
Search3 Hijacker - 31 visits
SBSoft - 31 visits
Random Browser Hijacker Pages:
AdBlock
Hijacker.Explorer32 - Alias: W32/Kwbot.worm, SdBot.05.v, Troj/StartPa-MN
Tro.FeelMedia.windows.dat
2nd-thought
AutoSearch - Alias: SafeSearch, MSInfoSys
LoadFonts - Alias: Trojan.VBS.Seeker
TinyBar
CrackedEarth
Hijacker.WTLBAss - Alias: WTLBAss, AnalyzeIE
saSyncMgr - Alias: SyncWait
|
