Home / Spyware Encyclopedia / Adware.OneStep
 Adware.OneStep Technical Details
Category Adware
Discovered 1/29/2007 12:04:00 AM
Modified 11/6/2009 5:26:26 PM
Threat Level Critical
Category Description

Adware are programs that facilitate delivery for advertising content to the user and in some cases gather information from the user's computer, including information related to Internet browser usage or other computer habits. They can take up your computers resources and are largely responsible for the countless popup ads you receive on the web. Adware is often bundled with or embedded within freeware programs like such as clocks, messengers, alerts, weather, and so on.
Notice
Summary

The following http urls were started:
•upgrade.onestepsearch.net/?vn=65572&partner=onestep&ptag=ONESTEP136&cid=dd7b9a5d19cc4...
•upgrade.onestepsearch.net/?vn=65610&partner=onestep&ptag=ONESTEP136&cid=dd7b9a5d19cc4...
•upgrade.onestepsearch.net/?vn=65610&partner=onestep&ptag=ONESTEP136&cid=dd7b9a5d19cc4...
The hosts file was updated with the following url-to-ip mappings: NA
The following internet connection was established:
208.87.149.251 : 80
199.7.48.190 : 80
92.52.125.20 : 80

The following Files were created:

NameVersionPublisherSignature (MD5)File Size (in KB)
..\664A90AA.EXE1.0.1.50Zumie.com586b7c7cb50a3c949d9075997b52fe4598304
..\ZUMIE\ZUMIE.DLL1.0.1.46ZUMIE.COMb5c446acc64c2d0375a8d309dc9a7605487424
..\ZUMIE\ZOPT.EXE1.0.1.30ZUMIE.COM9b48246dd2bce3a8efdff40c72825eff91616
..\TEMP\ZOPT.EXE1.0.1.46ZUMIE.COM90e8a76d28294ce2b326ed94efa3e64e103904
..\ZUMIE\ZUMIE.EXE1.0.0.0ZUMIE.COM2ad5a0a4e70cc6334e2420183712b5ff4608
..\TEMP\ZUMIE.EXE1.0.0.0ZUMIE.COM265df3b34e36b33353e300af1c32b5fb3584
..\ZUMIE\ZUMIE.EXE1.0.0.0ZUMIE.COM 4608
..\ZUMIE\ZOPT.EXE1.0.1.30ZUMIE.COM 91616
..\TEMP\ZUMIE.EXE1.0.0.0ZUMIE.COM 3584
..\TEMP\ZOPT.EXE1.0.1.46ZUMIE.COM 103904
..\51ad08f7.exe1.0.1.36Zumie.comd0bec74f90e6ed2b426a0e8f5ab48cad91616
..\Temp\iomem101.exe1.1.0.1Simple9436197665131e3fe79ee8e54de387ef53248
..\e68f1f6b.dll1.0.1.10seekeen.com35949f049d4cf0726a7d6ba352419ea8487424
..\Temp\CF1F22AD.EXE1.6.0.0SecurityProWorld LLC 2850b2d768e46de39e05f71cbbf7603b4094331
..\6baf5d8e.exe2.8.0.0Secrethider LLC 94d87abad6046c9492aa785416a2a8c01381999
..\temp\7024a374.exe1.0.0.0SearchInOneStep.com, Inc.dd54c958923f6704ef0f0333bbefb8005120
..\D9F99465.EXE1.0.0.0SearchInOneStep.com, Inc.740e7acf79bc44ccfe05a597831bc0ff3584
..\si1opt.exe1.0.1.36SearchInOneStep.com, Inc.afba57b076371ca655b3f86ed0538e0191664
..\searchin1.exe1.0.0.0SearchInOneStep.com, Inc.5000ce1971268070249cf4cf47ea02913584
..\si1opt.exe1.0.1.36SearchInOneStep.com, Inc. 91664
..\searchin1.dll1.0.1.36SearchInOneStep.com, Inc.570164e706ebe9afeccc31875428cdcd487424
..\354534E2.EXE1.0.0.0SearchInOneStep.com, Inc.a3dd79ba54f63f1dde1dbab242308e845120
..\searchin1.exe1.0.0.0SearchInOneStep.com, Inc.be31830094c00d79845ca2448562716c3584
..\searchin1.dll1.0.1.32SearchInOneStep.com, Inc.ae2923114531217ef9a4289aefdfc8f0487424
..\A5B3DAD0.EXE1.0.1.54SearchInOneStep.com, Inc.01095d94c13322842bf1c13a5dd51ea898304
..\searchin1.dll1.0.1.42SearchInOneStep.com, Inc.50c72d37bcde8698aa7fb35881e2e049487424
..\searchin1.dll1.0.1.56SearchInOneStep.com, Inc.6b9fdae22afa2028af97e6e018da0eb0503808

The following Registry Entries were created:

•..\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\relevantknowledge
•..\System\CurrentControlSet\Services\onestep search service
•..\Software\Classes\Clsid\{c111980d-b372-44b4-8095-1b6060e8c647}
•..\Software\Microsoft\Windows\CurrentVersion\Uninstall\onestepsearch
•..\Software\Microsoft\Windows\CurrentVersion\Uninstall\{b144a578-63b8-4365-a90e-5d205450d74b}
•..\System\CurrentControlSet\Services\SYNTPS
•..\Software\Microsoft\Internet Explorer\URLSearchHooks\"{d9c9a8c9-460d-4343-888e-ae02bcc3ce57}"
•..\Software\Microsoft\Internet Explorer\searchscopes\{FD511088-776F-4893-B28D-8FB100254730}
•..\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchInOneStep
•..\Software\SearchInOneStep
•..\Software\Classes\Clsid\{D9C9A8C9-460D-4343-888E-AE02BCC3CE57}
•..\System\CurrentControlSet\Services\SearchInOneStep Service
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"iOmem"\"%DAS%\admin\Local Settings\TempImages\iOmem101.exe"
•..\Software\Classes\Clsid\{1ED91CAB-201C-49FE-A47A-027C36B32DC8}
•..\Software\Microsoft\Internet Explorer\URLSearchHooks\"{1ed91cab-201c-49fe-a47a-027c36b32dc8}"
•..\Software\Microsoft\Internet Explorer\Toolbar\\"{1ed91cab-201c-49fe-a47a-027c36b32dc8}"\"speedapps Toolbar"
•..\Software\Microsoft\Windows\CurrentVersion\Uninstall\Fixup
•..\Software\Fixup Restrictions
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"IEPR"\"%DAS.AU.LS%\TempImages\ISPR108.exe"
•..\Software\Microsoft\Windows\CurrentVersion\Run\\"iOmem"\"%DAS.AU.LS%\TempImages\iOmem103.exe"
•..\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\"SFCDisable"
Recommendation to remove Adware.OneStep

Spyware Detector can remove Adware.OneStep, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.
Download Spyware Detector and Scan for FREE
 
Search Threats
Customer Service Rating by LivePerson