ATP (cuckoo.exe)
ATP (cuckoo.exe) is an adware bundler that installs other adware with itself like Adware-NetPals (Favoriteman). Favoriteman installs installs itself as a Browser Helper Object and attempts to contact remote servers to download new executable content.
General information:
| Malware Name: |
ATP (cuckoo.exe) |
| Malware Type: |
Adware Bundler |
| Company Name: |
teamtaylormade.com |
| Company URL: |
http://www.teamtaylormade.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
teamtaylormade.com provides you the software ATP (cuckoo.exe) that is a beautiful clock screensaver, but it cuckoos on the hour. It too is completely accurate and includes mutable music.
Spyware Description:
ATP (cuckoo.exe) is an adware bundler that installs other adware with itself like Adware-NetPals (Favoriteman). Favoriteman installs installs itself as a Browser Helper Object and attempts to contact remote servers to download new executable content.
Characteristics/Symptoms:
-> It installs other adware with itself like Adware-NetPals (Favoriteman). -> Favoriteman installs installs itself as a Browser Helper Object and attempts to contact remote servers to download new executable content.
Additional information might be found here:
Processes Running:
Cuckoo Clock.scr
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\Documents and Settings\[USER]\Local Settings\Temp\42odhr0b.exe |
55296 |
Application |
| C:\WINDOWS\system32\Cuckoo Clock.scr |
715883 |
Screen Saver |
Folder information Created after Installation:
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Classes\F1.Organizer.1 |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMO |
DisplayName |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMO |
UninstallString |
