Content

Adware-Tronix

Type
Program
SubType
Adware
Discovery Date
11/25/2002
Minimum DAT
4235 (11/27/2002)
Updated DAT
4668 (01/05/2006)
Minimum Engine
5.1.00
Description Added
12/01/2003
Description Modified
12/01/2003 4:33 AM (PT)

Tab Navigation

Characteristics

This program is detected as a "potentially unwanted application".

On executing, a EULA is presented and user chooses to install the program. It also requests the user's name and email address to be given. The file unwise.exe is then added to c:\Program Files\Blank . The file hosts is copied to the windows directory.  This is also detected as Adware-Tronix.

The following files are created in the windows directory:

  • downicon.ico
  • mbicon.ico
  • searchicon.ico
  • weicon.ico

The following will be added to windows favorite directory:

  • Downloadalot - The best freeware and shareware on the Internet
  • ModemBoost - dramatically boosts your Internet speed!
  • Searchalot - We search a lot, so you don't have to!
  • Web Eraser - Protect your Privacy - Erase all traces of your Computer Activity!

The following registry keys will be modified:

  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "SearchURL" "http://www.searchalot.com"  
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Default_Page_URL"  "http://www.searchalot.com"
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Search Bar" http://www.searchalot.com
  •  HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search "CustomizeSearch" http://www.searchalot.com
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search "SearchAssistant" http://www.searchalot.com
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main "Search Bar" http://www.searchalot.com
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Local Page" http://www.searchalot.com
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Search Page" "http://www.searchalot.com"
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Start Page" http://www.searchalot.com  

The detection of this type of file is not automatically activated. Users who would like to check for the presence of this kind of files on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7, and higher, has also an option, which enables users to detect this kind of program automatically (see below).

Aliases

Aliases

    N/A