Author Topic: search4top.net (Read 5395 times)

MysteryFCM · March 09, 2008, 07:26:43 pm

Found by TonyKlein ..... tis a browser hijacker

I've unpacked the DLL and extracted the HTA from it .... both attached (unpacked, packed and the HTA)

URL's from the file;

Quote

hxxp://www.search4top.net/%04X/as.asp?q=%s
hxxp://www.search4top.net/%04X/ie.asp?q=%s
hxxp://www.search4top.net/%04X/asrcend.htm

popup.hta

MysteryFCM · March 09, 2008, 07:27:22 pm

Matrixsearch/123Mania variant btw

JohnC · March 09, 2008, 11:05:15 pm

Thank you

MysteryFCM · March 09, 2008, 11:11:59 pm

Always a pleasure