1. /
  2. Security Response/
  3. Adware.Fapi

Adware.Fapi

Updated:
February 13, 2007 11:35:03 AM
Type:
Adware
Risk Impact:
High
File Names:
mapisvc32.exe
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

Adware.Fapi is an adware program that displays advertisements. It is installed with freeware programs, such as "Free History Cleaner" and "Turbo Memory Charger." According to the End-User License Agreement (EULA), the user allows the program to "redirect 404, DNS and other pages" and show "advertisement windows from time to time."

When the software is installed, it performs the following actions to install the adware component:
  1. Copies the Mapisvc32.exe file to the %System% folder.


    Note: %System% is a variable. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

  2. Adds the value:

    "mapisvc32" = "%System%\mapisvc32.exe"

    to the registry key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver