00froud
00froud is an adware bundler that installs Adware-Purityscan (Outerinfo) with itself.Purityscan scans Internet Explorer files such like: browser, cache, history, and cookies for adult related material. After scanning these files for adult related keywords then ads will be served up to your computer.
General information:
Malware Name: | 00froud |
Malware Type: | Adware Bundler |
Company Name: | Unknown |
Company URL: | |
Threat Level: | Low Risk |
Operating System: | WIN XP |
Installation Type: | Installed through EXE |
Operation: | Time of After Installation |
Company Description:
Spyware Description:
00froud is an adware bundler that installs Adware-Purityscan (Outerinfo) with itself.Purityscan scans Internet Explorer files such like: browser, cache, history, and cookies for adult related material. After scanning these files for adult related keywords then ads will be served up to your computer.
Characteristics/Symptoms:
-> It installs Adware-Purityscan (Outerinfo) with itself. -> Purityscan scans Internet Explorer files such like: browser, cache, history, and cookies for adult related material. After scanning these files for adult related keywords then ads will be served up to your computer.
Additional information might be found here:
Processes Running:
00froud.zip
File information Created after Installation:
File Location | Size (Bytes) | Type |
---|
C:\Documents and Settings\All Users\Desktop\AAA Screensavers Downloads.lnk | 459 | Shortcut |
C:\Documents and Settings\[USER]\Start Menu\Programs\Outerinfo\Uninstall.lnk | 1487 | Shortcut |
C:\Program Files\Outerinfo\Terms.rtf | 18031 | Rich Text Format |
Folder information Created after Installation:
Folder Location |
---|
C:\Program Files\AAA Screensaver |
C:\Program Files\AAA Screensavers\00frou |
Registry information Created after Installation:
Main Registry Key | Sub Registry Key | Key Value Name |
---|
HKEY_LOCAL_MACHINE | \SOFTWARE\Classes\Installer\Products\408871709A0670846A329905E392D64F\SourceList | LastUsedSource |
HKEY_LOCAL_MACHINE | \SOFTWARE\Classes\Installer\Products\408871709A0670846A329905E392D64F\SourceList\Media | DiskPrompt |
HKEY_LOCAL_MACHINE | \SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{8D806D2A-54E8-4A88-BB1A-7EFE48A8668F} | Changed |