Content

Adware-NSearch

Type
Program
SubType
Adware
Discovery Date
12/29/2003
Minimum DAT
4312 (12/31/2003)
Updated DAT
4539 (07/20/2005)
Minimum Engine
5.1.00
Description Added
03/05/2004
Description Modified
03/25/2004 10:57 PM (PT)

Tab Navigation

Characteristics

This program can generate an HTML page based on the pages displayed by Internet Explorer.  The HTML page includes links to:

  • www.msn.com
  • www.ntsearch.com

It creates the following registry keys to load itself on Windows start up

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    "sp" = ( path where the file is run )

Users who would like to check for the presence of potentially unwanted programs on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7, and higher, has an option that enables users to detect this kind of program automatically (see below).

Aliases

Aliases

  • Troj/Spooner (Sophos)
  • TROJ_SPOONER (Trend)
  • Trojan.Win32.Spooner(AVP)