1. Symantec/
  2. Security Response/
  3. Adware.RCPrograms

Adware.RCPrograms

Updated:
February 13, 2007 11:35:47 AM
Type:
Adware
Risk Impact:
High
File Names:
Rcsync.exe,Prizesurfer_setup.exe
Systems Affected:
Windows

Adware.RCPrograms is an adware program that displays advertisements. When this adware is executed, it contacts update.rcprograms.com on port 80. Then it keeps open a connection to the server, which downloads and displays advertisements. The advertisements are generally displayed in a small browser window.

When Adware.RCPrograms is executed, it does the following:
  1. Creates the file, C:\Program Files\RCPrograms\Rcsync.exe.

  2. Adds the value:

    "RCSync"="C:\Program Files\RCPrograms\RCSync.exe"

    to the registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    so that the adware runs when you start Windows.

  3. Adds the value:

    "PartID"="14"

    to the registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\RCPrograms


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube