Adware.PowerScan

Updated: February 13, 2007 11:49:36 AM

Type: Adware

Risk Impact: Low

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.PowerScan is executed, it performs the following actions:

Creates the following files:
- %ProgramFiles%\Power Scan\PowerScan.exe
- %ProgramFiles%\Power Scan\uninstall.exe
- %UserProfile%\Local Settings\Temp\powerscan.exe
- %UserProfile%\Desktop\Power Scan.lnk
  
  Notes:
- %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
- %UserProfile% is a variable that refers to the current user's profile folder. By default, this is C:\Documents and Settings\[CURRENT USER] (Windows NT/2000/XP).
Creates the following registry subkeys:

HKEY_LOCAL_MACHINE\SOFTWARE\PowerScan HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Power Scan HKEY_ALL_USERS\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\PowerScan HKEY_ALL_USERS\SOFTWARE\PowerScan
Searches the computer for links and files. It displays any articles that might be adult related, such as the following example:

C:\Program Files\Common Files\Microsoft Shared\Stationary\Sweets Bkgrd.gif.
May be set to start automatically at Windows startup using a checkbox on the GUI.
Displays a Warning: Porn Detected pop up, in order to purchase the product when the Clean Out Your Computer choice is selected.

Summary

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}