Reason Labs

zjo0f8on.xml

The file zjo0f8on.xml has been detected as Adware.Youndoo. This is a Mozilla Firefox web browser search plugin called ‘youndoo’ which enables the search engine provider as well as search suggestions.
MD5:
38a163d623c4d513d57e05428ac88307

SHA-1:
4d928905cb3789aa2c319994787fba83b5e10662

SHA-256:
558349a6705652f2d95854f755ad8697beed22c23b8770b943f458c28994c4c3

Detection:
Adware.Youndoo

Risk:
Medium

Explanation:
This potentially unwanted zjo0f8on search plugin for Firefox is used to direct web searches from the search bar and runs as the browser's search engine.

Analysis date:
10/19/2018 4:15:28 AM UTC  (today)

File size:
615 Bytes

File type:
OpenSearch plugin for Firefox

Common path:
C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\searchplugins\zjo0f8on.xml

Mozilla Search Plugins
Name:
youndoo

Search Template:
http://www.youndoo.com/search/


<SearchPlugin xmlns="http://www.mozilla.org/2006/browser/search/" xmlns:os="http://a9.com/-/spec/opensearch/1.1/">
  <os:ShortName>youndoo</os:ShortName>
  <os:InputEncoding>UTF-8</os:InputEncoding>
  <os:Url type="text/html" method="GET" template="http://www.youndoo.com/search/">
    <Param name="from" value="wak" />
    <Param name="q" value="{searchTerms}" />
    <Param name="type" value="sp" />
    <Param name="uid" value="WDCXWD5000LPVX-22V0TT0_WD-WX31A838157081570" />
    <Param name="z" value="cb8f00791bbfb0f68b78542g1zbb1q0cbwegcmab6c" />
  </os:Url>
</SearchPlugin>
Download Reason Core Security - Powerful anti-malware software