Adware.Clearx

When the program is executed, it creates the following registry subkey:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\clearx

Next the program creates the following registry entry, so that it executes every time Windows starts:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\"Nas" = "%pathtofile%\nas.exe"

The program then modifies the following registry entries to change the Internet Explorer home and start pages:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Start Page" = "[http:]//search-x.org/[REMOVED]/redir.php"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Search Page" = "[http:]//search-x.org/[REMOVED]/redir.php"

Summary