5/5 - (1 votes)

StartSearch, Potentially Superfluous Software.

Some legitimate programs like StartSearch can be classified as superfluous, they are not necessarily necessary for the system and sometimes even unwanted.

It is generally installed as a browser toolbar (Toolbar). It often comes from repackaged software like the VShare TV plugin. Some antiviruses, such as Malwarebytes, classify this software as Potentially Unwanted Optional Software (PUP/LPI)

This program is classified as Potentially Unnecessary Software (LPS). It installs as a program and/or as a browser extension. It can start automatically from the Registry via a "Run" key, a service or a scheduled task. It may launch when you start your browser after changing its settings. Sometimes the launch is done silently, that is to say it works in the background. The virus analysis of this software does not show any malware detection.

List of VisicomMedia software.

These are mostly legitimate programs that may not be necessary for your system to function properly. The multiplication of programs launched at system startup can cause delays in the execution of ordinary system tasks but also when browsing the Internet. Note that some programs come from downloads with repackaging, a technique which consists of offering other software during installation. These additional programs are obviously superfluous, they can even be installed without your knowledge. It is recommended to read the EULA before installing packaged software. Before clicking, check the relevance of the pre-checked boxes offered to you.

Potentially unwanted software (LPI) or Potentialy Unwanted Programs (PUP) are the cause of many infections. The most common example is adware. InstallCore, Crossrider, Graftor ou Boxore which pollute the Registry and your data storage units. They are usually installed without your knowledge by downloading freeware. Indeed some sites use the repackaging method, an operation which consists of redoing the software installation module by adding download options. These options allow you to add other software such as browser toolbars, adware, potentially unwanted software, intrusive advertising software, or even browser hijackers.

A browser hijacker, or hijacker, is an application that modifies certain settings of your internet browsers without your consent. These are usually the home pages, search pages and settings of your internet service provider. This mainly involves redirecting traffic from start and/or search pages to a dedicated server which collects information on your browsing habits. The goal of this app is to make money by driving web traffic to its own search engine.

Spyware (spyware) and adware (adwares) unwanted files, just like malware, can use the writing flaws of legitimate software or those of operating systems. It is therefore essential to have official software and that it has automatic updating. Likewise, your Windows operating system must be programmed in automatic update mode and activated, so that you can have the latest updates for critical security vulnerabilities.

Features

– It hijacks the start page of the Google Chrome (G0) browser,
– It replaces the search page of the Google Chrome (G1) browser,
– It installs an extension program for the Google Chrome (G2) browser,
– It hijacks the start page of the Mozilla Firefox (M0) browser,
– It installs a plugin for the Mozilla Firefox (M3) browser
– It modifies the start page of the Internet Explorer browser (R0),
– It modifies the search page of the Internet Explorer (R1) browser,
– It is installed as an Internet Browser Browser Helper Object (O2),
– It is installed as an Internet Browser Toolbar (O3),
– It creates “Software” Registry keys.
– It modifies the Internet search provider (O69),

Preview in reports

Recorded on 08/06/2011
M3 – MFPP: Plugins – [Collegien] — C:\Users\Collegien\AppData\Roaming\Mozilla\Firefox\Profiles\4aqc9tvz.default\searchplugins\startsear.xml
M0 – MFSP: prefs.js [Middle school student – 4aqc9tvz.default] https://startsear.ch
R0 – HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://startsear.ch
R0 – HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://startsear.ch
R0 – HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://seeearch.com
R0 – HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = https://seeearch.com
R1 – HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = https://seeearch.com
R1 – HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://start.search.us.com
R1 – HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = https://start.search.us.com
G0 – GCSP: Preference [User Data\Default][HomePage] https://startsear.ch
G1 – GCS: Preference [User Data\Default] https://startsear.ch
G2 – GCE: Preference [User Data\Default] [gdmficmbklmfnjfafnemocjonebpefim] Search.us Home v.2.0.0.1627 (Enabled)
G2 – GCE: Preference [User Data\Default] [ijepgjdjkdbopbnaopmlmobimmhjklhd] MyStart New Tab
P2 – EXT FILE: (…) — C:\Users\Coolman\AppData\Roaming\Mozilla\Firefox\Profiles\jlfteccz.default\extensions\{607b689f-7600-45e4-b8e5-887f72dab15c}.xpi
P2 – EXT FILE: (…) — C:\Users\Coolman\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\{607b689f-7600-45e4-b8e5-887f72dab15c}.xpi
O42 – Software: MyStart Toolbar – (.Visicom Media Inc..) [HKLM] — mystarttb
O2 – BHO: IE5BarLauncherBHO Class – {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} . (.StartSearch Inc. – This is a module that is required for the o.) — C:\Program Files\StartSearch plugin\ssBarLcher.dll
O3 – Toolbar: StartSearchToolBar – {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} . (.StartSearch Inc. – This is a module that is required for the o.) — C:\Program Files\StartSearch plugin\ssBarLcher.dll
HKCU\Software\StartSearch
O43 – CFD: 08/01/2012 – 21:50:54 – [0,549] —-D- C:\Program Files\StartSearch plugin
O69 – SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} [DefaultScope] – (Web Search) – https://startsear.ch
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}]
[HKLM\Software\Classes\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}]
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}]
[HKCU\Software\StartSearch]
[HKLM\Software\Google\Chrome\Extensions\gdmficmbklmfnjfafnemocjonebpefim]
C:\Users\Coolman\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdmficmbklmfnjfafnemocjonebpefim
C:\Program Files\StartSearch plugin