Updated: February 13, 2007 11:36:29 AM
Type: Spyware
Risk Impact: High
File Names: ie_32.exe
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When Spyware.Acext is executed, it performs the following actions:
- Installs itself to %Windir%\ie_32.exe, by default.
Note: %Windir% is a variable. The program locates the Windows installation folder (by default, this is C:\Windows or C:\Winnt) and copies itself to that location.
- Adds the value:
"<variable>"="%Windir%\ie_32.exe"
to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
so that the program runs when you start Windows.
- Periodically contacts the Web site, www.autoraskrutka.ru, for tracking purposes.
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
