Updated: February 13, 2007 11:32:51 AM
Type: Adware
Version: 1.3.2.2
Publisher: iwon.com
Risk Impact: Medium
File Names: Aornum.exe,Aornidle.dll,Aornumax.dll
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Adware.Aornum is an Internet Explorer Browser Helper Object that runs as a Windows task.
When it is executed, the installer performs the following actions:
- Installs several files into the %Windir% folder.
Note: %Windir% is a variable. The adware installer locates the Windows installation folder (by default, this is C:\Windows or C:\Winnt) and copies itself to that location.
- Starts a running process (usually Aornum) that can make calls to various servers to update the adware's code.
- Creates the%Windir%\Program Files\Ornum folder.
- Creates the following registry keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Aornum
HKEY_CURRENT_USER\Software\Aornum
HKEY_CURRENT_USER\Software\TENsoft