123Mania

Matrix Technology Network123Mania is a search hijakcer that also displays pop-up windows in Internet Explorer. 123Mania also installs other adwares which perform different actions.Characteristics/Symptoms: Can change browsers homepage.Shows ads of its affiliated sitesActs as a search hijacker Performs action in backgroundDate of Found: 2006-01-21Security Level: HighOperating OS: WIN XPInstallation Type: Installed through EXEOperation: After Agreeing to Term and ConditionsTime of Operation: After installation.Screenshot:2. Installation Sample and Image2.1. Installation Sample Origin URL: http://www.desktops4you.com/conectar.asp?id=123DownloadsUK

General information:

Malware Name:123Mania
Malware Type:Adware
Company Name:Matrix Technology Network
Company URL:http://www.123mania.com
Threat Level:High
Operating System:WIN XP
Installation Type:Installed through EXE
Operation:Time of After installation.

Company Description:

123Mania is a search hijakcer that also displays pop-up windows in Internet Explorer. 123Mania also installs other adwares which perform different actions.

Spyware Description:

Matrix Technology Network123Mania is a search hijakcer that also displays pop-up windows in Internet Explorer. 123Mania also installs other adwares which perform different actions.Characteristics/Symptoms: Can change browsers homepage.Shows ads of its affiliated sitesActs as a search hijacker Performs action in backgroundDate of Found: 2006-01-21Security Level: HighOperating OS: WIN XPInstallation Type: Installed through EXEOperation: After Agreeing to Term and ConditionsTime of Operation: After installation.Screenshot:2. Installation Sample and Image2.1. Installation Sample Origin URL: http://www.desktops4you.com/conectar.asp?id=123DownloadsUK

Characteristics/Symptoms:

    -> Can change browsers homepage. -> Shows ads of its affiliated sites -> Acts as a search hijacker -> Performs action in background0

Additional information might be found here:

googleSearch at Google for 123Mania
bingSearch at Bing for 123Mania
yahooSearch at Yahoo for 123Mania

Processes Running:

File information Created after Installation:

File LocationSize (Bytes)Type
C:\Documents and Settings\User\Application Data\123DownloadsUK.ico1ICON
WindowsDir\SYSTEM32\gdi32.dll240DLL

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry KeySub Registry KeyKey Value Name
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0##ppcimdnnnjbeahepfabjipfginloedkg enodaj
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EF6D6AE3-2625-40D6-A5AB-920DFD2DAF8C}