AdClicker-BP is an application type for potentially unwanted programs, it is not a virus. This application is a screensaver which repeatedly connects to certain websites.
Upon running the application, a confirmation is given of installation. A Macromedia screensaver is shown, referencing the MakeLoveNotSpam website. If no internet connection is available, it shows a graphical representation of the third-party websites being contacted.
The following registry entry is changed, to apply this screensaver:
HKEY_CURRENT_USERControl PanelDesktop SCRNSAVE.EXE = C:WINDOWSLYCOS-~1.SCR
The following files are placed in the Windows directory: Spyware Warrior :: View topic - Virus alerts for week of 11/29/04:: 12/9: AdClicker-BP a Screensaver App AdClicker-BP is an application type for 'potentially unwanted programs,' it is not a http://www.spywarewarrior.com/viewtopic.php?p=45897HOME | Online Security Threats - Internet and Network Security Threats :: 12/9: Maslan-A Worm Gives Attacker Access - 12/09/2004 12/9: AdClicker-BP a Screensaver App - 12/09/2004 12/9: Anig-C Worm Copies Itself Over Network http://www.esecurityplanet.com/alerts/archives.php/200412HOME |
Lycos - make LOVE not SPAM.dat (18,192 bytes)
Lycos - make LOVE not SPAM.dll (40,960 bytes)
Lycos - make LOVE not SPAM.exe (1,370,796 bytes)
Lycos - make LOVE not SPAM.scr (404,872 bytes)
More information can be found at this McAfee page.
Pre-Article:Its Years End Do You Know Where Your Money Went? Next-Article:12/9: Maslan-A Worm Gives Attacker Access |