Content

PCast

Type
Program
SubType
Discovery Date
02/08/2007
Minimum DAT
4959 (02/08/2007)
Updated DAT
4971 (02/26/2007)
Minimum Engine
5.1.00
Description Added
02/08/2007
Description Modified
03/31/2007 7:22 PM (PT)

Tab Navigation

Characteristics

It is not a virus or trojan. This is a Potentially Unwanted Program (PUP) detection which may display pornographic PodcastBar on user's system.

Installation:

File:   Install.exe
Hash: 8efaf0473318269aa11e8ff5b9274613

Upon execution installer connects to domains listed below.

  • pcast[removed].dudu.com
  • [removed].pcast.dudu.com
  • ps.[removed].mop.com
  • mop[removed].mop.com

Registry keys listed below are created on user's system.

  •  HKEY_CURRENT_USER\Software\podcastie
  •  HKEY_CURRENT_USER\Software\podcastie\Main
  •  HKEY_CURRENT_USER\Software\podcastN
  •  HKEY_CURRENT_USER\Software\podcastN\Main

Directories listed below are created on user's system.

  • %Documents and Settings%\[user]\Application Data\Podcast
  • %Documents and Settings%\[user]\Application Data\Podcast\Podcast

This unwanted application may display PodcastBar loaded with porn images as shown below.

Aliases

Aliases

  • Adware.Zhong (Symantec)
  • Adware/Sohu (Panda)
  • Pcast,Trojan (CA eTrust)
  • Trojan.DownLoader.10376 (Doctor Web)