Updated: February 13, 2007 11:33:57 AM
Type: Adware
Risk Impact: High
File Names: %System%\intnets.exe
%System%\scridows.exe
%System%\sysinfer.exe
%Windir%\msfiles.exe
Note: %S
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
When Adware.Adtest runs, it performs the following actions:
- Adds the values:
"intnets" = "%System%\intnets.exe"
"sysinfer" = "%System%\sysinfer.exe"
to the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
so that the adware runs when you start Windows.
- Adds the following line to the Win.ini file on Windows 95/98/Me computers:
[Windows]
run = %Windir%\msfiles.exe
- Changes the Internet Explorer home page by creating the value:
"StartPage" = "http:\ \HAO3344.com"
in the registry key:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
- On Windows NT/2000/XP computers, it adds the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load\intnets
with the value:
"%System%\intnets.exe"