Purple Passions

Purple Passions is an adware bundler that installs several other software’s with itself Adware-Ezula and NDotNet (New.net) and the adware that it installs with itself shows advertising and deceptive warnings.

General information:

Malware Name: Purple Passions
Malware Type: Adware Bundler
Company Name: irenesimages.com
Company URL: http://www.irenesimages.com/
Threat Level: Elevated Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

irenesimages.com provides you the software Purple Passions that provides you Passionate purple for Valentines Day.

Spyware Description:

Purple Passions is an adware bundler that installs several other software’s with itself Adware-Ezula and NDotNet (New.net) and the adware that it installs with itself shows advertising and deceptive warnings.

Characteristics/Symptoms:

    -> It installs several other software’s with itself like Adware-Ezula and NDotNet (New.net). -> The adware that it installs with itself shows advertising and deceptive warnings.

Additional information might be found here:

google Search at Google for Purple Passions
bing Search at Bing for Purple Passions
yahoo Search at Yahoo for Purple Passions

Processes Running:

Purple Passions.scr

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\FileSubmit\Install Purple Passions.lnk 1662 Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\FileSubmit\Uninstall Purple Passions.lnk 1614 Shortcut
C:\Program Files\FileSubmit\Purple Passions\UNWISE.INI 29 Configuration Settings

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER \Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\FileSubmit
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Purple Passions DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Purple Passions UninstallString