123Mania

Matrix Technology Network123Mania is a search hijakcer that also displays pop-up windows in Internet Explorer. 123Mania also installs other adwares which perform different actions.Characteristics/Symptoms: Can change browsers homepage.Shows ads of its affiliated sitesActs as a search hijacker Performs action in backgroundDate of Found: 2006-01-21Security Level: HighOperating OS: WIN XPInstallation Type: Installed through EXEOperation: After Agreeing to Term and ConditionsTime of Operation: After installation.Screenshot:2. Installation Sample and Image2.1. Installation Sample Origin URL: http://www.desktops4you.com/conectar.asp?id=123DownloadsUK

General information:

Malware Name: 123Mania
Malware Type: Adware
Company Name: Matrix Technology Network
Company URL: http://www.123mania.com
Threat Level: High
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After installation.

Company Description:

123Mania is a search hijakcer that also displays pop-up windows in Internet Explorer. 123Mania also installs other adwares which perform different actions.

Spyware Description:

Matrix Technology Network123Mania is a search hijakcer that also displays pop-up windows in Internet Explorer. 123Mania also installs other adwares which perform different actions.Characteristics/Symptoms: Can change browsers homepage.Shows ads of its affiliated sitesActs as a search hijacker Performs action in backgroundDate of Found: 2006-01-21Security Level: HighOperating OS: WIN XPInstallation Type: Installed through EXEOperation: After Agreeing to Term and ConditionsTime of Operation: After installation.Screenshot:2. Installation Sample and Image2.1. Installation Sample Origin URL: http://www.desktops4you.com/conectar.asp?id=123DownloadsUK

Characteristics/Symptoms:

    -> Can change browsers homepage. -> Shows ads of its affiliated sites -> Acts as a search hijacker -> Performs action in background0

Additional information might be found here:

google Search at Google for 123Mania
bing Search at Bing for 123Mania
yahoo Search at Yahoo for 123Mania

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\User\Application Data\123DownloadsUK.ico 1 ICON
WindowsDir\SYSTEM32\gdi32.dll 240 DLL

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0##ppcimdnnnjbeahepfabjipfginloedkg enodaj
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Internet Explorer\Extensions\{EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C}