Adware.Adultbox

Updated: February 13, 2007 11:40:35 AM

Type: Adware

Risk Impact: Low

File Names: ABox.exe

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.Adultbox is executed, it performs the following actions:

Uses FTP to download newest copy of itself from a remote site.
Copies itself as %Windir%\Abox.exe.

Note: %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.
Adds the value:

"Abox"="%Windir%\Abox.exe"

to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runso that the Abox.exe runs every time Windows starts.
May Create the registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Carmen

and add a number of values to it.
Launches an application in the system tray bar, offering access to sites with adult conent. By clicking these links the browser will be redirected to [http://]www.fast-loto.com/[REMOVED]/page_send.asp and ads will be displayed.
Offers the ability to uninstall itself.

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}