When Adware.Adtest runs, it performs the following actions:
- Adds the values:
"intnets" = "%System%\intnets.exe"
"sysinfer" = "%System%\sysinfer.exe"
to the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
so that the adware runs when you start Windows.
- Adds the following line to the Win.ini file on Windows 95/98/Me computers:
[Windows]
run = %Windir%\msfiles.exe
- Changes the Internet Explorer home page by creating the value:
"StartPage" = "http:\ \HAO3344.com"
in the registry key:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
- On Windows NT/2000/XP computers, it adds the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load\intnets
with the value:
"%System%\intnets.exe"
