Home Malware Programs Adware SVAPlayer

SVAPlayer

Posted: March 28, 2006

SVAPlayer is a discontinued adware application that attempts to show commercial advertisements. It also tries to update itself, download and execute arbitrary files. SVAPlayer was bundled with some ad-supported softwares such as WeatherBug. The threat runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 svaplayer.dll
    2 svaplayer.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareSVAPlayerHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSVAPlayerHKEY_LOCAL_MACHINESOFTWARESVAPlayer
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}1E6F1D6A-1F20-11D4-8859-00A0CCE26836
Loading...