Adware.Aornum is an Internet Explorer Browser Helper Object that runs as a Windows task.
When it is executed, the installer performs the following actions:
- Installs several files into the %Windir% folder.
Note: %Windir% is a variable. The adware installer locates the Windows installation folder (by default, this is C:\Windows or C:\Winnt) and copies itself to that location.
- Starts a running process (usually Aornum) that can make calls to various servers to update the adware's code.
- Creates the%Windir%\Program Files\Ornum folder.
- Creates the following registry keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Aornum
HKEY_CURRENT_USER\Software\Aornum
HKEY_CURRENT_USER\Software\TENsoft
