General discussion

Adware-Findemnow

Program Information
Discovery Date: 03/12/2004
Origin: Unknown
Length: 35328
Type: Program
SubType: Adware

This program is detected as a "potentially unwanted application".

Detection was added to cover for an arguable file called "msxmlpp.dll " , having a filesize of 35328 bytes (decimal). The file is wriiten in MS-Visual C++ and it is internally compressed with upx.

The .dll file is usually dropped by other adware binary files. It has references to a commercial search site having the IP address 213.159.117.235. Apart from changing the Internet Explorer startup page and adding favorites, it also changes the drivers\etc\hosts file so that whenever a user searches for something on msn.com it gets redirected to the webpage from the adware.

More: http://vil.nai.com/vil/content/v_101094.htm

Discussion is locked
Follow
Reply to: Adware-Findemnow
PLEASE NOTE: Do not post advertisements, offensive materials, profanity, or personal attacks. Please remember to be considerate of other members. If you are new to the CNET Forums, please read our CNET Forums FAQ. All submitted content is subject to our Terms of Use.
Reporting: Adware-Findemnow
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Comments

CNET Forums