Adware.Adtest

Updated: February 13, 2007 11:33:57 AM

Type: Adware

Risk Impact: High

File Names: %System%\intnets.exe %System%\scridows.exe %System%\sysinfer.exe %Windir%\msfiles.exe Note: %S

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

When Adware.Adtest runs, it performs the following actions:

Adds the values:

"intnets" = "%System%\intnets.exe" "sysinfer" = "%System%\sysinfer.exe"

to the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

so that the adware runs when you start Windows.
Adds the following line to the Win.ini file on Windows 95/98/Me computers:

[Windows] run = %Windir%\msfiles.exe
Changes the Internet Explorer home page by creating the value:

"StartPage" = "http:\ \HAO3344.com"

in the registry key:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
On Windows NT/2000/XP computers, it adds the registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load\intnets

with the value:

"%System%\intnets.exe"

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}