Symantec.com > Security Response > Threats and Risks > Adware.FreeScratchWin

Adware.FreeScratchWin

Printer Friendly Page

Updated: February 13, 2007 11:39:16 AM
Type: Adware
Publisher: CPM Media, Ltd
Risk Impact: High
File Names: FSW.exe,Fswinst.ocx,Support.exe,IdleUI.dll
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP


Adware.FreeScratchWin is a Browser Helper Object that opens pop-up windows.

When Adware.FreeScratchWin is installed, it does the following:
  1. Adds the value:

    "FSW"="C:\Program Files\FSW\FSW.exe"

    to the registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    so that Adware.FreeScratchWin runs when you start Windows.

  2. Adds the registry keys:

    HKEY_CLASSES_ROOT\FSW.Application
    HKEY_CLASSES_ROOT\CLSID\{47CC4DCD-BBC9-47A3-A677-44DB2559E0D8}
    HKEY_CURRENT_USER\Software\FreeScratchAndWin

  3. May perform the following actions:
    • Change the Internet Explorer home page to www.xzoomy.com
    • Capture keystrokes
    • Update itself in stealth mode
    • Open pop-up ads
    • Track your browsing habits

Search by name
Example: W32.Beagle.AG@mm
Limited Time Offers! Save up to 50%
Windows Vista Security