Updated: February 13, 2007 11:37:00 AM
Type: Adware
Risk Impact: High
File Names:
SMSS.exe
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When Adware.DreamAd is executed, it performs the following actions:
- Copies itself to the %Windir%\SMSS.exe folder.
Note: %Windir% is a variable. The program locates the Windows installation folder (by default, this is C:\Windows or C:\Winnt) and copies itself to that location.
- Adds the value:
"Debug" = "SMSS.exe"
to the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
- Continuously downloads new advertisements from a predefined server and displays them on the user's computer.
- May download its updated version of itself.
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine
