Versions

9, 4, 0, 2	1.69%
9, 3, 0, 4	1.69%
8, 9, 0, 3	1.69%
8, 8, 0, 3	1.69%
8, 2, 0, 3	1.69%
8, 1, 0, 2	8.47%
7, 6, 0, 2	11.86%
7, 2, 0, 1	6.78%
7, 2, 0, 1	1.69%
7, 1, 0, 3	1.69%
7, 0, 0, 1	3.39%
6, 9, 0, 1	13.56%
6, 7, 0, 4	3.39%
6, 6, 0, 4	5.08%
6, 5, 0, 3	8.47%
6, 3, 0, 3	1.69%
6, 2, 0, 2	23.73%
4, 9, 0, 5	1.69%

Warning 21 antivirus scanners has detected malware in various versions of SearchSettings.exe.

searchsettings.exe has 18 known versions, the most recent one is 9, 4, 0, 2. searchsettings.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 1.21 MB. It is an authenticode code-signed executable issued to Spigot by the certification authority VeriSign. The programs YouTube Downloader Toolbar v4.9, IObit Apps Toolbar v7.2 and IObit Apps Toolbar v7.6 have been observed as installing specific variations of searchsettings.exe. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 3.75 MB with the maximum memory reaching around 3.9 MB. Addionally, typically read and write I/O disk operations is about 41.49 KB per minute for reads and 1.6 KB per minute for writes.

The Widgi Search Settings Toolbar is a toolbar built on the spigot platform. The toolbar is usually installed together with other software. Typically, PC owner is not careful enough and leave some checkboxes unchecked. That is how one of such Widgi toolbars land on their browser. The Widgi Toolbar displays advertisements, or change your browsers default search provider.

Based on 40+ industry antivirus scanners, 21 of them detected the following malware.