Adware.Flyswat

Adware.Flyswat is an Adware program that creates links from keywords on Web pages as they are viewed with Internet Explorer. The keywords that are turned into links will have a yellow line underneath them.

Adware.Flyswat runs as a Browser Helper Object. This means that the adware component will receive information regarding all the actions inside Internet Explorer. Browser Helper Objects require Internet Explorer 4 or later to function.

This adware component will send Internet usage habits to the flyswat.com server, on port 80.

---

Note: At the time of this writing, the server was off-line. We do not know whether this is permanent or temporary.

---

When installing Flyswat, an End User License Agreement (EULA) is displayed. However, it is difficult to read the EULA, as it is displayed in a small window that cannot be increased in size.

The EULA states that submitted information is not personally identifiable. However, when usage information is submitted to the server, a Global Unique Identifier (GUID) is also sent. Even though the GUID is not tied to a person, usage history can be built based on the GUID.

---

Note: We do not know how these GUIDs are used, as this is done on the server. The EULA states that they are not used to personally identify the user or the location of the user. It is highly likely that the EULA is correct, and therefore, should be trusted.

---

Summary