Adware.Popuppers

Updated: February 13, 2007 11:42:34 AM

Type: Adware

Risk Impact: High

File Names: a65d.exe

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.Popuppers is installed, it does the following:

Adds the value:

"*" = "2"

to the registry subkeys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\media-motor.net HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\popuppers.com

so that Internet Explorer can access the above domains.
Adds the value:

"popuppers65" = "[PATH TO FILE]"

to the registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

so that Adware.Popuppers is run when Windows starts.
Deletes the following registry subkeys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"popuppers64" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"popuppers" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"loads.exe" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"mediamotor.exe"
Displays ads from the popuppers.com. domain.
May install Adware.180Search, Adware.BetterInternet and Adware.MedLoad.

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}