Adware.FOne

Adware.FOne is an adware component that runs as a Browser Helper Object. This means that the adware component will run when Internet Explorer runs.

When this adware component is running, it contacts www.f1organizer.com. On this Web site, it accesses a text file that contains links.The links are either files that can be downloaded and executed, or advertisements that can be displayed.

At the time of writing this writeup, Adware.FOne downloaded and installed the following adware components.

• Adware.BargainBuddy
• Adware.SAHAgent
• Adware.ClearSearch

During testing, only Adware.BargainBuddy asked for user confirmation before being installed. All other components were silently installed in the background without any user confirmation or notification.

Summary