Welcome to the Virus Encyclopedia of Panda Security.
It presents users attempting to access several web search engines with biased results, and changes the home page of Internet Explorer. It reaches the computer when accessing websites that use vulnerability exploits in order to affect computers.>
|First detected on:||April 22, 2005|
|Detection updated on:||Oct. 4, 2005|
|Yes, using TruPrevent Technologies
PremiumSearch is an adware type program that redirects applications attempting to access a number of web search engines, such as Google, Yahoo and MSN, among others, to the IP address 126.96.36.199, thus presenting users with results of its author's choice.
It also downloads from the server located at http://ovxeas.biz a toolbar very similar to the one provided by Google, and then installs it.
Additionally, it uses a BHO (Browser Helper Object) in order to change the home page of Internet Explorer.
PremiumSearch reaches the computer when accessing websites that use vulnerability exploits in order to affect computers.
PremiumSearch is easy to recognize once it has affected the computer, as it changes the home page of Internet Explorer to the following: