1. /
  2. Security Response/
  3. Adware.Clearx

Adware.Clearx

Updated:
February 8, 2007 11:56:33 AM
Type:
Adware
Name:
Clear-X
Risk Impact:
High
Systems Affected:
Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows 2000
When the program is executed, it creates the following registry subkey:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\clearx

Next the program creates the following registry entry, so that it executes every time Windows starts:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\"Nas" = "%pathtofile%\nas.exe"

The program then modifies the following registry entries to change the Internet Explorer home and start pages:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Start Page" = "[http:]//search-x.org/[REMOVED]/redir.php"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Search Page" = "[http:]//search-x.org/[REMOVED]/redir.php"
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver