Home Malware Programs Adware FCHelp

FCHelp

Posted: March 28, 2006

FCHelp is a typical adware application, which silently downloads from the Internet and shows many commercial advertisements. It does not have any additional functionality. FCHelp automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 fchelp.dll
    2 fchelp.exe
    3 fcman.exe
    4 fcplugin.dll
    5 setup.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}994D478A-2BD0-4DB4-288B1E346E99HKEY_CURRENT_USERSoftwareFCManHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunFCManHKEY_LOCAL_MACHINESOFTWAREClassesProtocolsFilterext/html
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}1B8B502E-465B-4022-BE4F-FB6D9F808A18
Loading...