ATP (photofun.exe)

ATP (photofun.exe) is an adware bundler that installs other adware with itself like Adware-NetPals (Favoriteman). Favoriteman installs installs itself as a Browser Helper Object and attempts to contact remote servers to download new executable content.

General information:

Malware Name:	ATP (photofun.exe)
Malware Type:	Adware Bundler
Company Name:	teamtaylormade.com
Company URL:	http://www.teamtaylormade.com/
Threat Level:	Low Risk
Operating System:	WIN XP
Installation Type:	Installed through EXE
Operation:	Time of After Installation

Company Description:

teamtaylormade.com provides you the software ATP (photofun.exe) that provides you a collection of the 50 funniest photos that you have ever seen.

Spyware Description:

ATP (photofun.exe) is an adware bundler that installs other adware with itself like Adware-NetPals (Favoriteman). Favoriteman installs installs itself as a Browser Helper Object and attempts to contact remote servers to download new executable content.

Characteristics/Symptoms:

    -> It installs other adware with itself like Adware-NetPals (Favoriteman). -> Favoriteman installs installs itself as a Browser Helper Object and attempts to contact remote servers to download new executable content.

Additional information might be found here:

	Search at Google for ATP (photofun.exe)
	Search at Bing for ATP (photofun.exe)
	Search at Yahoo for ATP (photofun.exe)

Processes Running:

Photo Fun.scr

File information Created after Installation:

File Location	Size (Bytes)	Type
C:\Documents and Settings\[USER]\Local Settings\Temp\42odhr0b.exe	55296	Application
C:\WINDOWS\system32\Photo Fun.scr	2619697	Screen Saver

Folder information Created after Installation:

Folder Location

Registry information Created after Installation: