IESearch is a spyware program that adds a search toolbar to Internet Explorer. However, it also monitors all network and Internet traffic to and from the compromised computer and hijacks the web browser by changing its default home, search and error pages and modifying some related settings. IESearch works as an Internet Explorer add-on and therefore runs every time the user launches the web browser.
versionchecker.exe
iebho.dll
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMainSearch Bar=[site address]HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearchSearchAssistant=[site address]HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainStart Page=[site address]HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMainAutoSearch=5HKEY_CLASSES_ROOTIEBHOProject.IEBHOHKEY_CLASSES_ROOTIEBHOProject.IEBHO.1HKEY_CLASSES_ROOTAppIDIEBHO.DLLHKEY_CLASSES_ROOTAppID{2E97A338-5092-4B14-B5E7-50994E09EA35}HKEY_CLASSES_ROOTCLSID{901C2C91-AFE7-416D-9FC1-34F87A264AC8}HKEY_CLASSES_ROOTInterface{E128D984-2F06-41D0-B55C-0EAAE5913436}HKEY_CLASSES_ROOTTypeLib{2E97A338-5092-4B14-B5E7-50994E09EA35}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{901C2C91-AFE7-416D-9FC1-34F87A264AC8}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExtStats{901C2C91-AFE7-416D-9FC1-34F87A264AC8}HKEY_LOCAL_MACHINESOFTWAREIEsearchHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallIESearch