Author Topic: search4top.net  (Read 4877 times)

0 Members and 1 Guest are viewing this topic.

March 09, 2008, 07:26:43 pm
Read 4877 times

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Found by TonyKlein ..... tis a browser hijacker ;)

I've unpacked the DLL and extracted the HTA from it .... both attached (unpacked, packed and the HTA)

URL's from the file;

Quote
hxxp://www.search4top.net/%04X/as.asp?q=%s
hxxp://www.search4top.net/%04X/ie.asp?q=%s
hxxp://www.search4top.net/%04X/asrcend.htm
popup.hta
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

March 09, 2008, 07:27:22 pm
Reply #1

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Matrixsearch/123Mania variant btw ;)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

March 09, 2008, 11:05:15 pm
Reply #2

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
Thank you :)

March 09, 2008, 11:11:59 pm
Reply #3

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Always a pleasure :)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net