1. Symantec/
  2. Security Response/
  3. Adware.PowerScan


February 13, 2007 11:49:36 AM
Risk Impact:
Systems Affected:

When Adware.PowerScan is executed, it performs the following actions:
  1. Creates the following files:

    • %ProgramFiles%\Power Scan\PowerScan.exe
    • %ProgramFiles%\Power Scan\uninstall.exe
    • %UserProfile%\Local Settings\Temp\powerscan.exe
    • %UserProfile%\Desktop\Power Scan.lnk

    • %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
    • %UserProfile% is a variable that refers to the current user's profile folder. By default, this is C:\Documents and Settings\[CURRENT USER] (Windows NT/2000/XP).

  2. Creates the following registry subkeys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Power Scan
    HKEY_ALL_USERS\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\PowerScan

  3. Searches the computer for links and files. It displays any articles that might be adult related, such as the following example:

    C:\Program Files\Common Files\Microsoft Shared\Stationary\Sweets Bkgrd.gif.

  4. May be set to start automatically at Windows startup using a checkbox on the GUI.

  5. Displays a Warning: Porn Detected pop up, in order to purchase the product when the Clean Out Your Computer choice is selected.

Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube