Adware.Emusic

Printer Friendly Page

Updated: April 13, 2006 3:33:04 PM
Type: Adware
Risk Impact: Medium
Systems Affected: Windows

Behavior


Adware.Emusic is adware that creates links on the user's desktop and in Internet Explorer's main window. It may be installed without user consent.

Antivirus Protection Dates

  • Initial Rapid Release version October 02, 2014 revision 022
  • Latest Rapid Release version November 25, 2016 revision 024
  • Initial Daily Certified version April 13, 2006
  • Latest Daily Certified version November 26, 2016 revision 001
  • Initial Weekly Certified release date April 19, 2006

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Updated: April 13, 2006 3:33:04 PM
Type: Adware
Risk Impact: Medium
Systems Affected: Windows

Adware.Emusic is adware that creates links on the user's desktop and in Internet Explorer's main window. It may be installed without user consent.

When first installed, Adware.Emusic creates the following files:
%UserProfile%\Desktop\50 FREE MP3s from eMusic!.url
%UserProfile%\Start Menu\Programs\50 FREE MP3s from eMusic!.url
%ProgramFiles%\eMusic\eMusicClient.ini
%ProgramFiles%\eMusic\eMusicSetup.exe
%ProgramFiles%\eMusic\Round.ico
%Windir%\eMusicClient.ini
%Windir%\eMusicSetup.exe

The risk then creates the following registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{686C970F-1D7D-4469-85D1-4B35763B56CC}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{686C970F-1D7D-4469-85D1-4B35763B56CC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eMusicSetup

The risk creates the following registry entry:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\"{686C970F-1D7D-4469-85D1-4B35763B56CC}" = "0x00002002"

The risk creates the following legitimate registry entry:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\"{1E796980-9CC5-11D1-A83F-00C04FC99D61}"