Fastsearchweb is an adware parasite that displays undesirable commercial advertisements and modifies essential Internet Explorer settings. The threat can get into the system while visiting some insecure web sites. Fastsearchweb registers itself as a web browser add-on and therefore runs every time the user starts Internet Explorer.
subsys.exe
rcpie.dll
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainDefault_Page_URL=[blank page]HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainDefault_Search_Page=[blank page]HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainStart Page=[blank page]HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainSearch Bar=[long string]HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainSearch Page=[long string]HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainUse Custom Search URL=0x1HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainUse Search Asst=noHKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchCustomize_Search=[blank page]HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchDefault_Search_URL=[blank page]HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchSearchAssistant=[long string]HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMainStart Page=[blank page]HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMainSearch Bar=[long string]HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMainSearch Page=[long string]HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMainUse Custom Search URL=0x1HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMainUse Search Asst=noHKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearchSearchAssistant=[long string]HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{06ABAA2D-34AB-4902-A326-409BD9B9A7A5}HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{19E25DD9-89F9-49FD-A5FC-1B7862BB8167}HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{69063189-5F20-4361-BB5F-30EF8526284D}HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{D825EF86-59BB-46EA-924F-12088D928D6C}HKEY_LOCAL_MACHINESOFTWAREClassesCLSIDApartment={06ABAA2D-34AB-4902-A326-409BD9B9A7A5}HKEY_LOCAL_MACHINESOFTWAREClassesCLSIDApartment={0EC7A55C-77D4-40E9-A4A0-9463B12B31E5}HKEY_LOCAL_MACHINESOFTWAREClassesCLSIDFreshbar={06ABAA2D-34AB-4902-A326-409BD9B9A7A5}