-
Updated:
- February 8, 2007 11:56:33 AM
-
Type:
- Adware
-
Name:
- Clear-X
-
Risk Impact:
- High
-
Systems Affected:
- Windows 98, Windows 95, Windows XP, Windows Me, Windows NT, Windows 2000
When the program is executed, it creates the following registry subkey:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\clearx
Next the program creates the following registry entry, so that it executes every time Windows starts:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\"Nas" = "%pathtofile%\nas.exe"
The program then modifies the following registry entries to change the Internet Explorer home and start pages:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Start Page" = "[http:]//search-x.org/[REMOVED]/redir.php"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\"Search Page" = "[http:]//search-x.org/[REMOVED]/redir.php"
