VersaSearch

VersaSearch is an adware application that installs a browser helper object (BHO) in the form of a toolbar in Internet Explorer.VersaSearch displays links to sponsored sites in the toolbar based on users' search queries.0

General information:

Malware Name:	VersaSearch
Malware Type:	Toolbar
Company Name:	WebLogistics
Company URL:	http://versaworks.net/
Threat Level:	Moderate Risk
Operating System:	WIN XP
Installation Type:	Installed through EXE
Operation:	Time of After Installation

Company Description:

WebLogistics is a software development company that creates tools that help users to navigate the murky waters of personal computers and the Internet. It helps ensure that people's use of computers is efficient, productive and just as important - fun. WebLogistics works with some of the world's most prestigious partners to make our software available for free to our users.

Spyware Description:

VersaSearch is an adware application that installs a browser helper object (BHO) in the form of a toolbar in Internet Explorer.VersaSearch displays links to sponsored sites in the toolbar based on users' search queries.0

Characteristics/Symptoms:

    -> It has a search function and provides search results for paid advertisers -> Track browsing habits -> Adds a third-party utility bar to the web browser -> Changes browser -> Shows Advertisements0

Additional information might be found here:

	Search at Google for VersaSearch
	Search at Bing for VersaSearch
	Search at Yahoo for VersaSearch

Processes Running:

File information Created after Installation:

File Location	Size (Bytes)	Type
C:\Program Files\VersaSearch Toolbar\Cache\favicons\angelfire.com.ico	1406	Icon
C:\Program Files\VersaSearch Toolbar\Cache\favicons\apple.com.ico	7782	Icon
C:\Program Files\VersaSearch Toolbar\Cache\versasearchtb0300.cfg	1385	Microsoft Office Outlook Configuration File

Folder information Created after Installation:

Folder Location
C:\Program Files\VersaSearch Toolbar
C:\Program Files\VersaSearch Toolbar\Cache

Registry information Created after Installation: