Home Malware Programs Adware SmartPops

SmartPops

Posted: March 28, 2006

SmartPops is a relatively simple adware application that shows relevant commercial advertisements and pop-ups. It has the ability to update itself via the Internet. SmartPops must be manually installed. The application runs every time the user starts Internet Explorer.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ne.dll
    2 ne.exe
    3 rh.exe
    4 sp.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}473150D97-09E9-4590-864E-3431DA53BF37HKEY_CLASSES_ROOTHP.HopperHKEY_CLASSES_ROOTHP.Hopper.1HKEY_CLASSES_ROOTSP.SmartPopsHKEY_CLASSES_ROOTSP.SmartPops.1
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}FA777197-4BF7-4AA9-A088-A0D803198DE0FB82CCD5-174B-4379-BC37-72D9B5ADAEDAA8516F49-8046-4295-8EE9-C59D5041C9E2A42DC659-33B5-409E-A433-650AC42ECCA44DEA7CA1-3372-4204-937C-2DD4A6ED65621423903E-86CC-4470-8AB0-257C10D77D45E79061BA-B6E7-4A9D-A07C-C3CB561013B4D5C778F1-CF13-4E70-ADF0-45A953E7CB8B0421701D-CF13-4E70-ADF0-45A953E7CB8BC81CFF28-6DF1-402F-B78C-D9493EF59882

Related Posts

Loading...