Trackware.Marketdart

Updated: February 13, 2007 11:40:52 AM

Type: Trackware

Publisher: marketdart.com

Risk Impact: High

File Names: md.exe

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Trackware.Marketdart is executed, it performs the following actions:

Creates the following files:

%Program Files%\md\md.exe
Adds the value:

"MD IE Plugin"="%ProgramFiles%\MD\md.exe"

to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runso that the Trackware runs every time Windows starts.
Modifies the values:

"User Search Asst"="http:/ /ie.marketdart.com"
"Search Page"="http:/ /ie.marketdart.com"
"Search Bar"="http:/ /ie.marketdart.com"
"Default_Search_URL"="http:/ /ie.marketdart.com"
"SearchURL"="http:/ /ie.marketdart.com"

in the registry key:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
Modifies the values:"SearchAssistant"="http:/ /ie.marketdart.com"
"CustomizeSearch"="http:/ /ie.marketdart.com"

in the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main
Modifies the values:

"Search Page"="http:/ /ie.marketdart.com"
"Default_Search_URL"="http:/ /ie.marketdart.com"

in the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search
Modifies the value:"provider"="http:/ /ie.marketdart.com"

in the registry key:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchUrl

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}