Name: Begin2Search Category: Browser Plug-in Alias: Begin2Search Toolbar Advice: Remove Risk: Moderate Risk Moderate threats may profile users online habits or broadcast data back to a server with 'opt-out' permission. In most cases this type of threat is more along the lines of commercial type adware that offer a premium service in exchange for tracking your user online performance. Description: Installs a number of thrid part spyware products and displays popup ads in addition to hijacking Internet Explorer. Signatures: process: reg6523.exe: MD5 Hash: 6bca721bafbc353595c... process: desktrf.exe: MD5 Hash: 1979e6fa0e18568d5da... process: imwireup.exe: MD5 Hash: 7fc38aa71cfcf2267f3... process: imwireup.exe: MD5 Hash: ... process: euniverse_uninstaller.exe: MD5 Hash: 49b194676d184a6262b... process: desktrf-cat_b2s.exe: MD5 Hash: 38ce711363af089608a... process: tool2_162813.exe: MD5 Hash: e609bc8b2535ab92a27... process: tool2_667279.exe: MD5 Hash: 1f41efc8a1508d3012d... process: tool5-fran-one.exe: MD5 Hash: bc5e5815b8c40659158... process: tool5-fran-two.exe: MD5 Hash: 8d9ba3831a631434cc9... process: btnetw-ventura-hot_246765.exe: MD5 Hash: 7623c0158548a1023dc... process: tool4_b2search.exe: MD5 Hash: a956445b1569f9591d9... process: rtneg5_venturahot_246765.exe: MD5 Hash: ec5db77d5f2206348b1... process: 712995.exe: MD5 Hash: 4cb4e3f96bd21fa075a... process: ventura-hot_246765.exe: MD5 Hash: 902705cc8a96892575f... process: btnetw3-995329.exe: MD5 Hash: 38cd53741737bb95550... process: btnetw3_venturahot_246765.exe: MD5 Hash: 5a67dce16e032d2963a... process: xbedf.exe: MD5 Hash: 21f81953ccbe72fb908... process: btnetw3.exe: MD5 Hash: eccfc1b521f8d7ea309.. Type: Browser Plug-in - A browser plug-in is an application that can be installed within a user's web browser. Plug-ins can come in the form of a toolbar that is included in your web browser or a search or navigation feature to extra task buttons on the browser. Although most plug-ins are designed to perform necessary functions, many plug-ins are harmful to you computer because they have complete access to your web browser and can modify, spy and redirect any task you perform.