Home Malware Programs Adware Winupie

Winupie

Posted: March 28, 2006

Winupie is an adware application that shows commercial pop-up advertisements. It also can download from the Internet and execute arbitrary code. Winupie is distributed through ActiveX drive-by downloads and therefore can get into the computer while visiting some insecure web sites. The threat runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 axconfig.dll
    2 winupie.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunwinpopup
Loading...