Content
Adware PortalScan
- Type
- Program
- SubType
- Adware
- Discovery Date
- 11/17/2003
- Minimum DAT
- 4305 (11/19/2003)
- Updated DAT
- 4305 (11/19/2003)
- Minimum Engine
- 5.1.00
- Description Added
- 12/16/2003
- Description Modified
- 12/16/2003 7:16 AM (PT)
Tab Navigation
Characteristics
This is not a virus or trojan.
This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported. Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.
This adware tries to connect to random ports and so creates security issues as outsiders are given access to internal files.
It may also degrade network performance of an organisation and use large amounts of storage.
The following Registry values are added to hook system at every startup:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “absr”
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Mwsvm”
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “slmss”
Other Registry values are created:
- HKEY_LOCAL_MACHINE\Software\Mwsvm
- HKEY_LOCAL_MACHINE\Software\slmss
This adware uses Microsoft's AdRotator package, so some users may observe an increase in pop-up ads.
Users who would like to check for the presence of potentially unwanted programs on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7, and higher, has an option that enables users to detect this kind of program automatically (see below).
Aliases
Aliases
-
N/A
