1. /
  2. Security Response/
  3. Adware.RCPrograms

Adware.RCPrograms

Updated:
February 13, 2007 11:35:47 AM
Type:
Adware
Risk Impact:
High
File Names:
Rcsync.exe,Prizesurfer_setup.exe
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

Adware.RCPrograms is an adware program that displays advertisements. When this adware is executed, it contacts update.rcprograms.com on port 80. Then it keeps open a connection to the server, which downloads and displays advertisements. The advertisements are generally displayed in a small browser window.

When Adware.RCPrograms is executed, it does the following:
  1. Creates the file, C:\Program Files\RCPrograms\Rcsync.exe.

  2. Adds the value:

    "RCSync"="C:\Program Files\RCPrograms\RCSync.exe"

    to the registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    so that the adware runs when you start Windows.

  3. Adds the value:

    "PartID"="14"

    to the registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\RCPrograms


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report