home

Lavasoft.SearchProtect.WinService.exe

SPWindowsService

Lavasoft Limited

It runs as a separate (within the context of its own process) windows Service named “IE Search Set”. This is installed with Web Companion.
Publisher:
Lavasoft Limited  (signed and verified)

Product:
SPWindowsService

Version:
1.0.0.0

MD5:
3b8a6115cbc5bd7c9525f799de3ef999

SHA-1:
55bd43706532436f0dd6c18164e8556d3e73d18d

SHA-256:
e6354c521a6f4d60dcb466cc290c6bd8fb56967bdb85d53d1f5affa7150037c3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/1/2024 11:22:31 PM UTC  (a few moments ago)

File size:
14.9 KB (15,208 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2014

Original file name:
Lavasoft.SearchProtect.WinService.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\lavasoft\web companion\application\lavasoft.searchprotect.winservice.exe

Digital Signature
Signed by:
Lavasoft Limited

Authority:
VeriSign, Inc.

Valid from:
8/7/2013 5:00:00 PM

Valid to:
7/24/2015 4:59:59 PM

Subject:
CN=Lavasoft Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Lavasoft Limited, L=sliema, S=Malta, C=MT

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0E13B3A79AA60B7EA934163F5237606B

File PE Metadata
Compilation timestamp:
9/10/2014 4:43:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
192:FtHabAy9Ll5/rZHxaJMGLLNujtonYe+PjP/rpJstXx+vJ5Or9ZCspE+TM4r5h2M:nacy9BuMEkponYPLctX6deMe

Entry address:
0x379E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00, 00, 00, 38, 00...
 
[+]

Entropy:
6.1077

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
6 KB (6,144 bytes)

Service
Display name:
IE Search Set

Service name:
SearchProtectionService

Description:
Sets the homepage and search engine for IE

Type:
Win32OwnProcess


The file Lavasoft.SearchProtect.WinService.exe has been discovered within the following program.

Web Companion  by Lavasoft
Publisher's description - “Web Companion secures your browser’s settings against unauthorized changes and acts as a buffer between your browser and malicious sites.”
www.Lavasoft.com
19% remove it
 
Powered by Should I Remove It?

Scan Lavasoft.SearchProtect.WinService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.