Discovery Date: 03/12/2004
This program is detected as a "potentially unwanted application".
Detection was added to cover for an arguable file called "msxmlpp.dll " , having a filesize of 35328 bytes (decimal). The file is wriiten in MS-Visual C++ and it is internally compressed with upx.
The .dll file is usually dropped by other adware binary files. It has references to a commercial search site having the IP address 18.104.22.168. Apart from changing the Internet Explorer startup page and adding favorites, it also changes the drivers\etc\hosts file so that whenever a user searches for something on msn.com it gets redirected to the webpage from the adware.