Home Malware Programs Adware AdWare.Win32.FunWeb.ds

AdWare.Win32.FunWeb.ds

Posted: January 10, 2011

AdWare.Win32.FunWeb.ds is a potentially unwanted Adware program designed to deliver various adverts to the user's system. AdWare.Win32.FunWeb.ds also contains a corrupt search tool application which attaches itself to your toolbar which, when accessed, will display links to other corrupt sites. It is advisable to have AdWare.Win32.FunWeb.ds removed with an effective antivirus program immediately once it has been detected.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %ProgramFiles%\FunWebProducts
    2 %ProgramFiles%\FunWebProducts\Installr
    3 %ProgramFiles%\FunWebProducts\Installr\1.bin
    4 %ProgramFiles%\FunWebProducts\Installr\1.bin\F3EZSETP.DLL
    5 %ProgramFiles%\FunWebProducts\Installr\1.bin\F3PLUGIN.DLL
    6 %ProgramFiles%\FunWebProducts\Installr\1.bin\NPFUNWEB.DLL

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB}\ControlHKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB}\InprocServer32HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB}\VersionIndependentProgIDHKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D4DB7D1-6EC9-47A3-BD87-1E41684E07BB}[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB}\MiscStatus\1]HKEY..\..\..\..{RegistryKeys}(Default) = "131473"(Default) = "FunWebProductsInstaller.Start"
Loading...