1. Symantec/
  2. Security Response/
  3. Adware.Adtest


February 13, 2007 11:33:57 AM
Risk Impact:
File Names:
%System%\intnets.exe %System%\scridows.exe %System%\sysinfer.exe %Windir%\msfiles.exe Note: %S
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

When Adware.Adtest runs, it performs the following actions:
  1. Adds the values:

    "intnets" = "%System%\intnets.exe"
    "sysinfer" = "%System%\sysinfer.exe"

    to the registry key:


    so that the adware runs when you start Windows.

  2. Adds the following line to the Win.ini file on Windows 95/98/Me computers:

    run = %Windir%\msfiles.exe

  3. Changes the Internet Explorer home page by creating the value:

    "StartPage" = "http:\ \HAO3344.com"

    in the registry key:

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main

  4. On Windows NT/2000/XP computers, it adds the registry key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load\intnets

    with the value:


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube