BrowserModifier:Win32/OneStepSearch modifies the user's browser to deliver targeted advertisements when the user enters search keywords.
It may also replace or override web browser error pages that would otherwise be displayed when unresolvable web addresses are entered into the browser's address bar.
Installation
This program may add the following files:
%program files%\OneStepSearch\home.js
%program files%\OneStepSearch\onestep.dll
%program files%\OneStepSearch\onestep.exe
%program files%\OneStepSearch\osopt.exe
%program files%\OneStepSearch\readme.html
%program files%\OneStepSearch\uninstall.exe
This program may make the following registry modifications:
HKEY_LOCAL_MACHINE\SOFTWARE\OneStepSearch\Primary = dword:0000fc04
HKEY_LOCAL_MACHINE\SOFTWARE\OneStepSearch\DllPath = "%program files%\OneStepSearch\onestep.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\OneStepSearch\Version = dword:00010012
HKEY_LOCAL_MACHINE\SOFTWARE\OneStepSearch\Partner = "ONESTEP118"
HKEY_LOCAL_MACHINE\SOFTWARE\OneStepSearch\Src = "onestep"
HKEY_LOCAL_MACHINE\SOFTWARE\OneStepSearch\Initial = dword:00000001
HKEY_LOCAL_MACHINE\SOFTWARE\OneStepSearch\ShowToolbarButton = dword:00000000
HKEY_LOCAL_MACHINE\SOFTWARE\OneStepSearch\ShowBarSign = dword:00000000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5B4C3B43-49B6-42A7-A602-F7ACDCA0D409}\DisplayName = "OneStep Search"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5B4C3B43-49B6-42A7-A602-F7ACDCA0D409} URL "http://www.onestepsearch.net/?prt=ONESTEP118&keywords={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneStepSearch\DisplayName = "OneStep Search 1.0 build 118"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneStepSearch\UninstallString = "%program files%\OneStepSearch\uninstall.exe"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE\NextInstance = dword:00000001
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE\0000\Service = "OneStep Search Service"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE\0000\Legacy = dword:00000001
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE\0000\ConfigFlags = dword:00000000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE\0000\Class = "LegacyDriver"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE\0000\ClassGUID = "{8ECC055D-047F-11D1-A537-0000F8753ED1}"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE\0000\DeviceDesc = "OneStep Search Service"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE\0000\Control\*NewlyCreated* = dword:00000000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE\0000\Control\ActiveService = "OneStep Search Service"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\Type = dword:00000010
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\Start = dword:00000002
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\ErrorControl = dword:00000000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\ImagePath = hex(2):22,43,3a,5c,50,72,6f,67,72,61,6d,20,46,69,6c,65,73,5c,4f,6e,65,53,74,65,70,53,65,61,72,63,68,5c,6f,6e,65,73,74,65,70,2e,65,78,65,22,20,22,43,3a,5c,50,72,6f,67,72,61,6d,20,46,69,6c,65,73,5c,4f,6e,65,53,74,65,70,53,65,61,72,63,68,5c,6f,6e,65,73,74,65,70,2e,64,6c,6c,22,20,53,65,72,76,69,63,65,00,
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\DisplayName = "OneStep Search Service"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\ObjectName = "LocalSystem"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\Description = "Update and control for OneStep Search"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\Security\Security = hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\Enum\0 = "Root\LEGACY_ONESTEP_SEARCH_SERVICE\0000"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\Enum\Count = dword:00000001
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service\Enum\NextInstance = dword:00000001
During installation, this program may display the following dialogs: