1. /
  2. Security Response/
  3. Adware.Adtest

Adware.Adtest

Updated:
February 13, 2007 11:33:57 AM
Type:
Adware
Risk Impact:
High
File Names:
%System%\intnets.exe %System%\scridows.exe %System%\sysinfer.exe %Windir%\msfiles.exe Note: %S
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

When Adware.Adtest runs, it performs the following actions:
  1. Adds the values:

    "intnets" = "%System%\intnets.exe"
    "sysinfer" = "%System%\sysinfer.exe"


    to the registry key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run


    so that the adware runs when you start Windows.

  2. Adds the following line to the Win.ini file on Windows 95/98/Me computers:

    [Windows]
    run = %Windir%\msfiles.exe


  3. Changes the Internet Explorer home page by creating the value:

    "StartPage" = "http:\ \HAO3344.com"

    in the registry key:

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

  4. On Windows NT/2000/XP computers, it adds the registry key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load\intnets

    with the value:

    "%System%\intnets.exe"


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver