-
Updated:
- February 13, 2007 11:38:35 AM
-
Type:
- Adware
-
Risk Impact:
- High
-
File Names:
- IEService.dll,IEService.exe
-
Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
Adware.Fastfind is a browser helper object DLL that another program must install; this program is reportedly called IEService.exe. As of this writing, Symantec Security Response has not received submissions of this installer.
When the program is loaded, the DLL creates the following registry keys:
HKEY_CLASSES_ROOT\TypeLib\{B929C108-045F-48D1-8638-E3195AD6FF03}
HKEY_CLASSES_ROOT\Interface\{47D8F3A0-C511-4D91-A963-F00DDDEE4E49}
HKEY_CLASSES_ROOT\Interface\{5A4E1627-8677-41F7-B78C-4CACDF5B12FF}
HKEY_CLASSES_ROOT\CLSID\{9E992732-295F-4987-8BE3-16FAC1639198}
HKEY_CLASSES_ROOT\CLSID\{D72A7651-8A16-476E-953C-347F0241FD32}
HKEY_CLASSES_ROOT\E.HH
HKEY_CLASSES_ROOT\E.ZZA
Also, it monitors outgoing requests to search engines and downloads advertisements from www.fastfind.org.
