|
Name: | SubSearch |
Type: | Adware |
Risk: | |
Description: | SubSearch is an Internet Explorer Browser Helper Object,toolbar and a browser hijacker. It detects when you are using a search engine, and opens its own 'enhanced results' sidebar containing paid links. This is styled to look a bit like the search engine you are using at the time. Apart from the fake search results, it can also show pop-up adverts when IE is first opened, if directed to do so by their controlling server. SubSearch has a silent auto-update feature. The v2,v21,v22 variants connect periodically to their controlling server which can direct them to download and execute code from it. The v2 variant suffers from a critical security hole: it can be directed by any web page to download any file and write it anywhere to the filesystem, including over other program files which may then get run. |
|
|
|
|