Updated: February 13, 2007 11:37:05 AM
Type: Adware
Publisher: http://www.fightpopups.net
Risk Impact: High
File Names: Varies.
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When Adware.MessStopper runs, it performs the following actions:
- Creates the C:\Program Files\Common Files\SYS folder and drops following files:
- check.txt
- status.txt
- instant.reg
- Adds the value:
"SystemB" = "[PATH TO THE ADWARE]"
to the registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
so that the Adware.MessStopper runs when you start Windows.
- Starts the messenger service in Microsoft Windows.
Note: Messenger is a service in Windows that transmits message data between clients and servers. It is not part of Windows Messenger.
- Displays pop-up windows.
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
