ATP (yellowsunset.exe)
ATP (yellowsunset.exe) is an adware bundler that installs other adware with itself like Adware-NetPals (Favoriteman). Favoriteman installs installs itself as a Browser Helper Object and attempts to contact remote servers to download new executable
content.
General information:
| Malware Name: |
ATP (yellowsunset.exe) |
| Malware Type: |
Adware Bundler |
| Company Name: |
teamtaylormade.com |
| Company URL: |
http://www.teamtaylormade.com/
|
| Threat Level: |
Low Risk |
| Operating System: |
WIN XP |
| Installation Type: |
Installed through EXE |
| Operation: |
Time of After Installation |
Company Description:
teamtaylormade.com provides you the software ATP (yellowsunset.exe) that shows you the yellow sunset over a rippling body of water.
Spyware Description:
ATP (yellowsunset.exe) is an adware bundler that installs other adware with itself like Adware-NetPals (Favoriteman). Favoriteman installs installs itself as a Browser Helper Object and attempts to contact remote servers to download new executable
content.
Characteristics/Symptoms:
-> It installs other adware with itself like Adware-NetPals (Favoriteman). -> Favoriteman installs installs itself as a Browser Helper Object and attempts to contact remote servers to download new executable content.
Additional information might be found here:
Processes Running:
Yellow Sunset.scr
File information Created after Installation:
| File Location |
Size (Bytes) |
Type |
| C:\WINDOWS\system32\ATPartners.dll |
96256 |
Application Extension |
| C:\WINDOWS\system32\Yellow Sunset.scr |
822942 |
Screen Saver |
Folder information Created after Installation:
Registry information Created after Installation:
| Main Registry Key |
Sub Registry Key |
Key Value Name |
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Classes\F1.Organizer |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000EF1-0786-4633-87C6-1AA7A44296DA} |
|
| HKEY_LOCAL_MACHINE |
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMO |
DisplayName |
