1. /
  2. Security Response/
  3. Adware.ShowBehind

Adware.ShowBehind

Updated:
February 13, 2007 11:40:09 AM
Type:
Adware
Publisher:
MicroSmarts Enterprise
Risk Impact:
Medium
File Names:
winxp2.exe; ShowBehind.exe; gate.exe; thank.exe
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.ShowBehind installs, it does the following:
  1. Creates the following files that are part of the adware component:
    • %Windir%\sbnet\ShowBehind.exe
    • %Windir%\sbnet\removead.bat

      Note: %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.

  2. Adds the value:

    "ShowBehind"="%Windir%\sbnet\ShowBehind.exe"

    to the registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    so that Adware.ShowBehind runs every time Windows starts.

Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver