home

SearchSettings.exe

Search Settings

Flipora

The application SearchSettings.exe by Flipora has been detected as a potentially unwanted program by 4 anti-malware scanners. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Search Settings’. This file is typically installed with the program Search Settings by Spigot, Inc. which is a potentially unwanted software program.
Publisher:
Flipora  (signed and verified)

Product:
Search Settings

Version:
2.0.0.1

MD5:
bee4f6567d4c7bee6bcb8d465e5f471e

SHA-1:
37fad6864a68e2eda9914f0c769224d8b3ac055a

SHA-256:
f39f3507236f3356e9b21f3b05d4ffb428825a5172d74acf19244a74d283ad53

Scanner detections:
4 / 68

Status:
Potentially unwanted

Analysis date:
4/27/2024 2:01:48 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
MalSign.Flipora
2017.0.2835

ESET NOD32
Win32/InfoAxe (variant)
10.10495

G Data
Win32.Adware.InfoAxe
16.2.24

Reason Heuristics
Win32.Generic
16.2.12.14

File size:
152.3 KB (155,928 bytes)

Product version:
2.0.0.1

Copyright:
Copyright © 2002-2012

Original file name:
SearchSettings.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\searchsettings\searchsettings.exe

Digital Signature
Signed by:
Flipora

Authority:
VeriSign, Inc.

Valid from:
3/29/2012 2:00:00 AM

Valid to:
3/30/2015 1:59:59 AM

Subject:
CN=Flipora, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Flipora, L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4E5D7F106293C44426F134E3A6C47BB9

File PE Metadata
Compilation timestamp:
4/4/2013 8:18:18 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:5+lR+ReUc9qlI+xybEa5mXe9C/tx3k1frxt250iHN2lFcIGZwji:5+lJl5mO9C/tRk1jxQVwhE

Entry address:
0xBEE7

Entry point:
E8, 2D, 42, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8D, 42, FF, 5B, C3, 8D, A4, 24, 00, 00, 00, 00, 8D, 64, 24, 00, 33, C0, 8A, 44, 24, 08, 53, 8B, D8, C1, E0, 08, 8B, 54, 24, 08, F7, C2, 03, 00, 00, 00, 74, 15, 8A, 0A, 83, C2, 01, 3A, CB, 74, CF, 84, C9, 74, 51, F7, C2, 03, 00, 00, 00, 75, EB, 0B, D8, 57, 8B, C3, C1, E3, 10, 56, 0B, D8, 8B, 0A, BF, FF, FE, FE, 7E, 8B, C1, 8B, F7, 33, CB, 03, F0, 03, F9, 83, F1, FF, 83, F0, FF, 33, CF, 33, C6, 83, C2, 04, 81...
 
[+]

Entropy:
6.3983

Code size:
101.5 KB (103,936 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Search Settings

Command:
C:\Program Files\searchsettings\searchsettings.exe


The file SearchSettings.exe has been discovered within the following program.

Search Settings  by Spigot, Inc.
Search Settings application is a process that runs in the background and prevents other programs from modifying the web browsers search and home page settings.
www.spigot.com/remove-search-settings.html
68% remove it
 
Powered by Should I Remove It?

Remove SearchSettings.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.